ELSA-2025-17085

ELSA-2025-17085 - ipa security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-10-02

Description


[4.12.2-15.0.1.el10_0.4]
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
- Add bind to ipa-server-common Requires [Orabug: 36518596]

[4.12.2-15.el10_0.4]
- Resolves: RHEL-113245
EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


Related CVEs


CVE-2025-7493

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) ipa-4.12.2-15.0.1.el10_0.4.src.rpmd276af80f50a35eb17cec88a69b72a30a92e65108b4f31756c2f9475cb7a8ac1-ol10_aarch64_appstream
ipa-4.12.2-15.0.1.el10_0.4.src.rpmd276af80f50a35eb17cec88a69b72a30a92e65108b4f31756c2f9475cb7a8ac1-ol10_aarch64_codeready_builder
ipa-client-4.12.2-15.0.1.el10_0.4.aarch64.rpm6108b55b6b6df52859767eec9af10aa949f633bd50b78d595eb2edcd420ced66-ol10_aarch64_appstream
ipa-client-common-4.12.2-15.0.1.el10_0.4.noarch.rpm8fb05170f2014cdd4ae3f1bce296226c0c43e2015748edc360fab1671c144060-ol10_aarch64_appstream
ipa-client-encrypted-dns-4.12.2-15.0.1.el10_0.4.aarch64.rpmcec942ef0f62345a5df9c9f4b1e6cb32e5a6d58da5196360416965ac2a661b45-ol10_aarch64_appstream
ipa-client-epn-4.12.2-15.0.1.el10_0.4.aarch64.rpm76dbff74501edff0aecc6442aa5f2511427269a0fd1d64010bd0ca59c5788f91-ol10_aarch64_appstream
ipa-client-samba-4.12.2-15.0.1.el10_0.4.aarch64.rpm97536fe4c42b7526a0bcb65901e5e51a468dd38d8c15b86a1bb4f543da3f0acb-ol10_aarch64_appstream
ipa-common-4.12.2-15.0.1.el10_0.4.noarch.rpm36b3a1c14852cff955b7d13c426c926ba64bf366bf25ada3525b3c17c2324db6-ol10_aarch64_appstream
ipa-selinux-4.12.2-15.0.1.el10_0.4.noarch.rpmc45c2465194787d15f48c63462c5e1a94ca005ea41e6856f0c7b4f4efbcbecd4-ol10_aarch64_appstream
ipa-selinux-luna-4.12.2-15.0.1.el10_0.4.noarch.rpm81d232abfc757e5a78e895e8393abec6775af0d5dd472dab8f8461c120237b65-ol10_aarch64_appstream
ipa-selinux-nfast-4.12.2-15.0.1.el10_0.4.noarch.rpm56e2d8fca3c6505560c083d539c955e61ae368de7f46e6dda3f2bd44b351c136-ol10_aarch64_appstream
ipa-server-4.12.2-15.0.1.el10_0.4.aarch64.rpma3b4fdc6b6d1e588dd02e88219dc0f93a04386a7eba7b8a2c0b4ae0426dcc982-ol10_aarch64_appstream
ipa-server-common-4.12.2-15.0.1.el10_0.4.noarch.rpm660b6399faecd108f688cabda8d688c7037af257332a47fc5b721337c7acb6cf-ol10_aarch64_appstream
ipa-server-dns-4.12.2-15.0.1.el10_0.4.noarch.rpmbdc677c196425c1f061da2e6c219ab43dffe7527f71dcbb51c40dd3833afe2d8-ol10_aarch64_appstream
ipa-server-encrypted-dns-4.12.2-15.0.1.el10_0.4.aarch64.rpm54a55c0d76cea5a0710f5dda10a685ad8484ddc942809ae8e88e1cc4985aa7eb-ol10_aarch64_appstream
ipa-server-trust-ad-4.12.2-15.0.1.el10_0.4.aarch64.rpm4accd029234e1c7720011c010442cd14669b004c0070a86141eb99d6fe8cd08a-ol10_aarch64_appstream
python3-ipaclient-4.12.2-15.0.1.el10_0.4.noarch.rpm43f090875b417d8d0f6fc94d0bc018393b828d0e0c1e616e7ce2e93053c79f0c-ol10_aarch64_appstream
python3-ipalib-4.12.2-15.0.1.el10_0.4.noarch.rpmad80b5fcc1604b9742e479eb8db7a223363b0462ac7688c9f80385adc27b367c-ol10_aarch64_appstream
python3-ipaserver-4.12.2-15.0.1.el10_0.4.noarch.rpm5bcb37fe5182ff1371ac83426636b337e08a527d88a2bcb168f46290163ffc6e-ol10_aarch64_appstream
python3-ipatests-4.12.2-15.0.1.el10_0.4.noarch.rpm25eb60c76f2f6f1de768d2de10334bef40815892f451433ad39cdac0b968d21f-ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64) ipa-4.12.2-15.0.1.el10_0.4.src.rpmd276af80f50a35eb17cec88a69b72a30a92e65108b4f31756c2f9475cb7a8ac1-ol10_x86_64_appstream
ipa-4.12.2-15.0.1.el10_0.4.src.rpmd276af80f50a35eb17cec88a69b72a30a92e65108b4f31756c2f9475cb7a8ac1-ol10_x86_64_codeready_builder
ipa-client-4.12.2-15.0.1.el10_0.4.x86_64.rpm8f6c276c6a7a7d2f05ceff5d780bb247782ebf4f000c6a74174f9f3b08dcc809-ol10_x86_64_appstream
ipa-client-common-4.12.2-15.0.1.el10_0.4.noarch.rpm8fb05170f2014cdd4ae3f1bce296226c0c43e2015748edc360fab1671c144060-ol10_x86_64_appstream
ipa-client-encrypted-dns-4.12.2-15.0.1.el10_0.4.x86_64.rpmb9196a9f74fc06ac129c59e63817ef9a3ba362f9107461f0fea1ca752317085a-ol10_x86_64_appstream
ipa-client-epn-4.12.2-15.0.1.el10_0.4.x86_64.rpm31826651deca736f310c9800f35a22ed04064583f99f394579676d73315b991d-ol10_x86_64_appstream
ipa-client-samba-4.12.2-15.0.1.el10_0.4.x86_64.rpmd1f230f7956010cd481d5e9b9f16a210d1c47ec0c47459e759115598fb4d5a2c-ol10_x86_64_appstream
ipa-common-4.12.2-15.0.1.el10_0.4.noarch.rpm36b3a1c14852cff955b7d13c426c926ba64bf366bf25ada3525b3c17c2324db6-ol10_x86_64_appstream
ipa-selinux-4.12.2-15.0.1.el10_0.4.noarch.rpmc45c2465194787d15f48c63462c5e1a94ca005ea41e6856f0c7b4f4efbcbecd4-ol10_x86_64_appstream
ipa-selinux-luna-4.12.2-15.0.1.el10_0.4.noarch.rpm81d232abfc757e5a78e895e8393abec6775af0d5dd472dab8f8461c120237b65-ol10_x86_64_appstream
ipa-selinux-nfast-4.12.2-15.0.1.el10_0.4.noarch.rpm56e2d8fca3c6505560c083d539c955e61ae368de7f46e6dda3f2bd44b351c136-ol10_x86_64_appstream
ipa-server-4.12.2-15.0.1.el10_0.4.x86_64.rpmf38d2202d67c63c5a8e5fc3accf40fd6176fffe77e6336642c6de308167ebeb7-ol10_x86_64_appstream
ipa-server-common-4.12.2-15.0.1.el10_0.4.noarch.rpm660b6399faecd108f688cabda8d688c7037af257332a47fc5b721337c7acb6cf-ol10_x86_64_appstream
ipa-server-dns-4.12.2-15.0.1.el10_0.4.noarch.rpmbdc677c196425c1f061da2e6c219ab43dffe7527f71dcbb51c40dd3833afe2d8-ol10_x86_64_appstream
ipa-server-encrypted-dns-4.12.2-15.0.1.el10_0.4.x86_64.rpm7b7a0a14f2d956f4d017fc1e34ade283f0886bdab9271c78c65257abd62a37a8-ol10_x86_64_appstream
ipa-server-trust-ad-4.12.2-15.0.1.el10_0.4.x86_64.rpm362bf5fbc72c84b360a0c6a83de82496ac5e407ee9a5e01595387c8645263019-ol10_x86_64_appstream
python3-ipaclient-4.12.2-15.0.1.el10_0.4.noarch.rpm43f090875b417d8d0f6fc94d0bc018393b828d0e0c1e616e7ce2e93053c79f0c-ol10_x86_64_appstream
python3-ipalib-4.12.2-15.0.1.el10_0.4.noarch.rpmad80b5fcc1604b9742e479eb8db7a223363b0462ac7688c9f80385adc27b367c-ol10_x86_64_appstream
python3-ipaserver-4.12.2-15.0.1.el10_0.4.noarch.rpm5bcb37fe5182ff1371ac83426636b337e08a527d88a2bcb168f46290163ffc6e-ol10_x86_64_appstream
python3-ipatests-4.12.2-15.0.1.el10_0.4.noarch.rpm25eb60c76f2f6f1de768d2de10334bef40815892f451433ad39cdac0b968d21f-ol10_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete