ELSA-2025-20994

ELSA-2025-20994 - ipa security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-12-02

Description


[4.12.2-24.0.1.1]
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
- Add bind to ipa-server-common Requires [Orabug: 36518596]

[4.12.2-24.1]
- Resolves: RHEL-118447 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


Related CVEs


CVE-2025-7493

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) ipa-4.12.2-24.0.1.el10_1.1.src.rpm09c5872161b59de14c652b71014c476c244ec7a65746d044fa84e5962eca3cd6-ol10_aarch64_appstream
ipa-4.12.2-24.0.1.el10_1.1.src.rpm09c5872161b59de14c652b71014c476c244ec7a65746d044fa84e5962eca3cd6-ol10_aarch64_codeready_builder
ipa-client-4.12.2-24.0.1.el10_1.1.aarch64.rpm1cc9de0c9038e44879ae64153377f32426343dacdfe7a001d2055bc87dcd1c7e-ol10_aarch64_appstream
ipa-client-common-4.12.2-24.0.1.el10_1.1.noarch.rpm621852cb7b03a97d96e206d4395d75195f564856b85f144dd4b03db4737f44ac-ol10_aarch64_appstream
ipa-client-encrypted-dns-4.12.2-24.0.1.el10_1.1.aarch64.rpm7df4ce8d7fc4be68f52c7260be3beede87f5baa086ea1bbca5e422d3dee737aa-ol10_aarch64_appstream
ipa-client-epn-4.12.2-24.0.1.el10_1.1.aarch64.rpme64276388ee9d8b385ab3ecb2e0d0c0f7f69fa3a859bcd80032ad15448efee4e-ol10_aarch64_appstream
ipa-client-samba-4.12.2-24.0.1.el10_1.1.aarch64.rpm8388f8504500def41c12d2119d50af9574a6fccf480be7f6e42e5ab442744078-ol10_aarch64_appstream
ipa-common-4.12.2-24.0.1.el10_1.1.noarch.rpm5fd92146116f3892d990222453abbac10ea90cdf0fa3ceb9ff2a3cc503bec411-ol10_aarch64_appstream
ipa-selinux-4.12.2-24.0.1.el10_1.1.noarch.rpm669609df2507f4cf113b33cbb8c68124c19d0df02156c54d00678817b2ef6994-ol10_aarch64_appstream
ipa-selinux-luna-4.12.2-24.0.1.el10_1.1.noarch.rpmd2ca9d6dd2243f9b9e257bb9a6bdc79de92ed59e7a0f86cd85934124ab48d3d7-ol10_aarch64_appstream
ipa-selinux-nfast-4.12.2-24.0.1.el10_1.1.noarch.rpm8e791427ccf73e0795d8e526278b08b48bee9e983534cd9706d2e8915c7f19b7-ol10_aarch64_appstream
ipa-server-4.12.2-24.0.1.el10_1.1.aarch64.rpmcc74b33dadd94635bde40a050f3739034bbb5da763083845179afe84184ac1e2-ol10_aarch64_appstream
ipa-server-common-4.12.2-24.0.1.el10_1.1.noarch.rpmd2b12a43db325e20ff068dc5441c49e9cc776b536fe8fca76f4da92af3ef8a92-ol10_aarch64_appstream
ipa-server-dns-4.12.2-24.0.1.el10_1.1.noarch.rpm26ea6f854c2956ba8f16cff0ea8ea680335e1609cf038901a5893fe695d464e6-ol10_aarch64_appstream
ipa-server-encrypted-dns-4.12.2-24.0.1.el10_1.1.aarch64.rpmde2a786662561a25dffbcb0a6b0ec62482fbc48db4220e9430cf48ec3aaa6a0a-ol10_aarch64_appstream
ipa-server-trust-ad-4.12.2-24.0.1.el10_1.1.aarch64.rpmf427d3fe2da9668ec82929b19dbded7994b679f96826c16ee9ef7f0eef3f726e-ol10_aarch64_appstream
python3-ipaclient-4.12.2-24.0.1.el10_1.1.noarch.rpm4174af091a0eb1df3020321d9b8b90541b368c9e296031dc0c29c3bbc4d628c3-ol10_aarch64_appstream
python3-ipalib-4.12.2-24.0.1.el10_1.1.noarch.rpm07e32434423d74ffe1fdcad508c3db13f6b6e7ada460d7d1708eb6cbd32a66ab-ol10_aarch64_appstream
python3-ipaserver-4.12.2-24.0.1.el10_1.1.noarch.rpmc88a1599c89b8ef91600466a3432c916c2394be2ad0eb0c19c70a7359564cbd0-ol10_aarch64_appstream
python3-ipatests-4.12.2-24.0.1.el10_1.1.noarch.rpm11e8130d08cc9f03eab4dcd7dc0193cb9e4a2527fcda91d3e2849418cbff2f1f-ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64) ipa-4.12.2-24.0.1.el10_1.1.src.rpm09c5872161b59de14c652b71014c476c244ec7a65746d044fa84e5962eca3cd6-ol10_x86_64_appstream
ipa-4.12.2-24.0.1.el10_1.1.src.rpm09c5872161b59de14c652b71014c476c244ec7a65746d044fa84e5962eca3cd6-ol10_x86_64_codeready_builder
ipa-client-4.12.2-24.0.1.el10_1.1.x86_64.rpm75a51bc2acbdcd8dde11fb3b2ad247cb558f6440ea1f9b24006322b61db2b44c-ol10_x86_64_appstream
ipa-client-common-4.12.2-24.0.1.el10_1.1.noarch.rpm621852cb7b03a97d96e206d4395d75195f564856b85f144dd4b03db4737f44ac-ol10_x86_64_appstream
ipa-client-encrypted-dns-4.12.2-24.0.1.el10_1.1.x86_64.rpm8166812a0fbf649164622b78a367096a76101e71e302f84fef09d8e49beef645-ol10_x86_64_appstream
ipa-client-epn-4.12.2-24.0.1.el10_1.1.x86_64.rpmc2efba3781c46bdc165a7142cd44982060dc789900d9309cdf86343327414df6-ol10_x86_64_appstream
ipa-client-samba-4.12.2-24.0.1.el10_1.1.x86_64.rpma799f562d45d2e19df00d3640aef045a916dcde520eeb710476501e95e11a73b-ol10_x86_64_appstream
ipa-common-4.12.2-24.0.1.el10_1.1.noarch.rpm5fd92146116f3892d990222453abbac10ea90cdf0fa3ceb9ff2a3cc503bec411-ol10_x86_64_appstream
ipa-selinux-4.12.2-24.0.1.el10_1.1.noarch.rpm669609df2507f4cf113b33cbb8c68124c19d0df02156c54d00678817b2ef6994-ol10_x86_64_appstream
ipa-selinux-luna-4.12.2-24.0.1.el10_1.1.noarch.rpmd2ca9d6dd2243f9b9e257bb9a6bdc79de92ed59e7a0f86cd85934124ab48d3d7-ol10_x86_64_appstream
ipa-selinux-nfast-4.12.2-24.0.1.el10_1.1.noarch.rpm8e791427ccf73e0795d8e526278b08b48bee9e983534cd9706d2e8915c7f19b7-ol10_x86_64_appstream
ipa-server-4.12.2-24.0.1.el10_1.1.x86_64.rpme206ab5544b7e843e15971dcd84ce9f5cfea0081195e478676ff36df76a6ca9c-ol10_x86_64_appstream
ipa-server-common-4.12.2-24.0.1.el10_1.1.noarch.rpmd2b12a43db325e20ff068dc5441c49e9cc776b536fe8fca76f4da92af3ef8a92-ol10_x86_64_appstream
ipa-server-dns-4.12.2-24.0.1.el10_1.1.noarch.rpm26ea6f854c2956ba8f16cff0ea8ea680335e1609cf038901a5893fe695d464e6-ol10_x86_64_appstream
ipa-server-encrypted-dns-4.12.2-24.0.1.el10_1.1.x86_64.rpm2404b788a8175da092f34e1370c473e4ed83eb91bb16ee8610540a036629af6b-ol10_x86_64_appstream
ipa-server-trust-ad-4.12.2-24.0.1.el10_1.1.x86_64.rpmd665a964b1694d7fd4bbcf9666e0f3140b5041d02c91ca642cb47013205f4d19-ol10_x86_64_appstream
python3-ipaclient-4.12.2-24.0.1.el10_1.1.noarch.rpm4174af091a0eb1df3020321d9b8b90541b368c9e296031dc0c29c3bbc4d628c3-ol10_x86_64_appstream
python3-ipalib-4.12.2-24.0.1.el10_1.1.noarch.rpm07e32434423d74ffe1fdcad508c3db13f6b6e7ada460d7d1708eb6cbd32a66ab-ol10_x86_64_appstream
python3-ipaserver-4.12.2-24.0.1.el10_1.1.noarch.rpmc88a1599c89b8ef91600466a3432c916c2394be2ad0eb0c19c70a7359564cbd0-ol10_x86_64_appstream
python3-ipatests-4.12.2-24.0.1.el10_1.1.noarch.rpm11e8130d08cc9f03eab4dcd7dc0193cb9e4a2527fcda91d3e2849418cbff2f1f-ol10_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete