# CVE-2025-7493: ipa: A privilege escalation flaw from host to domain administrator was found in FreeIPA CVE-2025-7493 is fixed in 40 products on 1 platform, first by RHSA-2025:20994, released September 30, 2025. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2025-7493 - Priority: High - CVSS: 9.1 (important) - EPSS: 0.0058 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Sep 30, 2025 ## Description A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bind-dyndb-ldap RHEL 8 | 0:11.6-6.module+el8.10.0+23009+91fb337e | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | bind-dyndb-ldap almalinux 8 | 11.6-6.module_el8.10.0+3980+d78e8e90 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | bind-dyndb-ldap ol 8 | 0:11.6-6.module+el8.10.0+90553+1bd85afa | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | bind-dyndb-ldap rocky 8 | 0:11.6-6.module+el8.10.0+1960+1ed527b3 | [RLSA-2025:17129](https://patchblox.com/security/data/fix/linux/rlsa-2025-17129.md) | Mar 18, 2026 | | Linux | custodia RHEL 8 | 0:0.6.0-3.module+el8.9.0+18911+94941f82 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | custodia almalinux 8 | 0.6.0-3.module_el8.6.0+2881+2f24dc92 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | custodia ol 8 | 0:0.6.0-3.module+el8.9.0+90094+20819f5a | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | custodia rocky 8 | 0:0.6.0-3.module+el8.9.0+1371+ffa84eb9 | [RLSA-2025:17129](https://patchblox.com/security/data/fix/linux/rlsa-2025-17129.md) | Mar 18, 2026 | | Linux | ipa RHEL 10 | 4.12.2-24.el10_1.1 | [RHSA-2025:20994](https://patchblox.com/security/data/fix/linux/rhsa-2025-20994.md) | Sep 30, 2025 | | Linux | ipa rocky 10 | 0:4.12.2-24.el10_1.1 | [RLSA-2025:20994](https://patchblox.com/security/data/fix/linux/rlsa-2025-20994.md) | Nov 21, 2025 | | Linux | ipa rocky 8 | 0:4.9.13-20.module+el8.10.0+2066+d74ade98 | [RLSA-2025:17129](https://patchblox.com/security/data/fix/linux/rlsa-2025-17129.md) | Mar 18, 2026 | | Linux | ipa rocky 9 | 0:4.12.2-22.el9_7.1 | [RLSA-2025:20928](https://patchblox.com/security/data/fix/linux/rlsa-2025-20928.md) | Nov 21, 2025 | | Linux | ipa-client RHEL 8 | 0:4.9.13-20.module+el8.10.0+23537+32c82745 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-client RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-client almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-client almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-client ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-client ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-client ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-client-common RHEL 8 | 0:4.9.13-20.module+el8.10.0+23537+32c82745 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-client-common RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-client-common almalinux 10 | 4.12.2-24.el10_1.1 | [ALSA-2025:20994](https://patchblox.com/security/data/fix/linux/alsa-2025-20994.md) | Nov 11, 2025 | | Linux | ipa-client-common almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-client-common almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-client-common ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-client-common ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-client-common ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-client-encrypted-dns RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-client-encrypted-dns almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-client-encrypted-dns ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-client-encrypted-dns ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-client-epn RHEL 8 | 0:4.9.13-20.module+el8.10.0+23537+32c82745 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-client-epn RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-client-epn almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-client-epn almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-client-epn ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-client-epn ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-client-epn ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-client-samba RHEL 8 | 0:4.9.13-20.module+el8.10.0+23537+32c82745 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-client-samba RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-client-samba almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-client-samba almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-client-samba ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-client-samba ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-client-samba ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-common RHEL 8 | 0:4.9.13-20.module+el8.10.0+23537+32c82745 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-common RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-common almalinux 10 | 4.12.2-24.el10_1.1 | [ALSA-2025:20994](https://patchblox.com/security/data/fix/linux/alsa-2025-20994.md) | Nov 11, 2025 | | Linux | ipa-common almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-common almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-common ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-common ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-common ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-healthcheck RHEL 8 | 0:0.12-6.module+el8.10.0+23403+cc1f9b40 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-healthcheck almalinux 8 | 0.12-6.module_el8.10.0+4036+84b152d9 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-healthcheck ol 8 | 0:0.12-6.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-healthcheck rocky 8 | 0:0.12-6.module+el8.10.0+2053+a0a9dc19 | [RLSA-2025:17129](https://patchblox.com/security/data/fix/linux/rlsa-2025-17129.md) | Mar 18, 2026 | | Linux | ipa-healthcheck-core RHEL 8 | 0:0.12-6.module+el8.10.0+23404+f6b3454f | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-healthcheck-core almalinux 8 | 0.12-6.module_el8.10.0+4036+84b152d9 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-healthcheck-core ol 8 | 0:0.12-6.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-python-compat RHEL 8 | 0:4.9.13-20.module+el8.10.0+23537+32c82745 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-python-compat almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-python-compat ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-selinux RHEL 8 | 0:4.9.13-20.module+el8.10.0+23537+32c82745 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-selinux RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-selinux almalinux 10 | 4.12.2-24.el10_1.1 | [ALSA-2025:20994](https://patchblox.com/security/data/fix/linux/alsa-2025-20994.md) | Nov 11, 2025 | | Linux | ipa-selinux almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-selinux almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-selinux ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-selinux ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-selinux ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-selinux-luna RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-selinux-luna almalinux 10 | 4.12.2-24.el10_1.1 | [ALSA-2025:20994](https://patchblox.com/security/data/fix/linux/alsa-2025-20994.md) | Nov 11, 2025 | | Linux | ipa-selinux-luna almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-selinux-luna ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-selinux-luna ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-selinux-nfast RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-selinux-nfast almalinux 10 | 4.12.2-24.el10_1.1 | [ALSA-2025:20994](https://patchblox.com/security/data/fix/linux/alsa-2025-20994.md) | Nov 11, 2025 | | Linux | ipa-selinux-nfast almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-selinux-nfast ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-selinux-nfast ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-server RHEL 8 | 0:4.9.13-20.module+el8.10.0+23534+744f3864 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-server RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-server almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-server almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-server ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-server ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-server ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-server-common RHEL 8 | 0:4.9.13-20.module+el8.10.0+23534+744f3864 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-server-common RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-server-common almalinux 10 | 4.12.2-24.el10_1.1 | [ALSA-2025:20994](https://patchblox.com/security/data/fix/linux/alsa-2025-20994.md) | Nov 11, 2025 | | Linux | ipa-server-common almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-server-common almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-server-common ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-server-common ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-server-common ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-server-dns RHEL 8 | 0:4.9.13-20.module+el8.10.0+23534+744f3864 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-server-dns RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-server-dns almalinux 10 | 4.12.2-24.el10_1.1 | [ALSA-2025:20994](https://patchblox.com/security/data/fix/linux/alsa-2025-20994.md) | Nov 11, 2025 | | Linux | ipa-server-dns almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-server-dns almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-server-dns ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-server-dns ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-server-dns ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-server-encrypted-dns RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-server-encrypted-dns almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-server-encrypted-dns ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-server-encrypted-dns ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | ipa-server-trust-ad RHEL 8 | 0:4.9.13-20.module+el8.10.0+23534+744f3864 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-server-trust-ad RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-server-trust-ad almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-server-trust-ad almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | ipa-server-trust-ad ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | ipa-server-trust-ad ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | ipa-server-trust-ad ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | opendnssec RHEL 8 | 0:2.1.7-2.module+el8.10.0+22913+7aa1a207 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | opendnssec almalinux 8 | 2.1.7-2.module_el8.10.0+3980+d78e8e90 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | opendnssec ol 8 | 0:2.1.7-2.module+el8.10.0+90553+1bd85afa | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | opendnssec rocky 8 | 0:2.1.7-2.module+el8.10.0+1960+1ed527b3 | [RLSA-2025:17129](https://patchblox.com/security/data/fix/linux/rlsa-2025-17129.md) | Mar 18, 2026 | | Linux | python-jwcrypto rocky 8 | 0:0.5.0-2.module+el8.10.0+1819+0aeba2f1 | [RLSA-2025:17129](https://patchblox.com/security/data/fix/linux/rlsa-2025-17129.md) | Mar 18, 2026 | | Linux | python-kdcproxy rocky 8 | 0:0.4-5.module+el8.10.0+2094+d7886766.2 | [RLSA-2025:17129](https://patchblox.com/security/data/fix/linux/rlsa-2025-17129.md) | Mar 18, 2026 | | Linux | python-qrcode rocky 8 | 0:5.3-1.module+el8.10.0+1916+6bb8cf6b | [RLSA-2025:17129](https://patchblox.com/security/data/fix/linux/rlsa-2025-17129.md) | Mar 18, 2026 | | Linux | python-yubico rocky 8 | 0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9 | [RLSA-2025:17129](https://patchblox.com/security/data/fix/linux/rlsa-2025-17129.md) | Mar 18, 2026 | | Linux | python3-custodia RHEL 8 | 0:0.6.0-3.module+el8.9.0+18911+94941f82 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-custodia almalinux 8 | 0.6.0-3.module_el8.6.0+2881+2f24dc92 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-custodia ol 8 | 0:0.6.0-3.module+el8.9.0+90094+20819f5a | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipaclient RHEL 8 | 0:4.9.13-20.module+el8.10.0+23537+32c82745 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipaclient RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | python3-ipaclient almalinux 10 | 4.12.2-24.el10_1.1 | [ALSA-2025:20994](https://patchblox.com/security/data/fix/linux/alsa-2025-20994.md) | Nov 11, 2025 | | Linux | python3-ipaclient almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipaclient almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | python3-ipaclient ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | python3-ipaclient ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipaclient ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | python3-ipalib RHEL 8 | 0:4.9.13-20.module+el8.10.0+23537+32c82745 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipalib RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | python3-ipalib almalinux 10 | 4.12.2-24.el10_1.1 | [ALSA-2025:20994](https://patchblox.com/security/data/fix/linux/alsa-2025-20994.md) | Nov 11, 2025 | | Linux | python3-ipalib almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipalib almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | python3-ipalib ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | python3-ipalib ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipalib ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | python3-ipaserver RHEL 8 | 0:4.9.13-20.module+el8.10.0+23534+744f3864 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipaserver RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | python3-ipaserver almalinux 10 | 4.12.2-24.el10_1.1 | [ALSA-2025:20994](https://patchblox.com/security/data/fix/linux/alsa-2025-20994.md) | Nov 11, 2025 | | Linux | python3-ipaserver almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipaserver almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | python3-ipaserver ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | python3-ipaserver ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipaserver ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | python3-ipatests RHEL 8 | 0:4.9.13-20.module+el8.10.0+23534+744f3864 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipatests RHEL 9 | 0:4.12.2-22.el9_7.1 | [RHSA-2025:20928](https://patchblox.com/security/data/fix/linux/rhsa-2025-20928.md) | Nov 11, 2025 | | Linux | python3-ipatests almalinux 10 | 4.12.2-24.el10_1.1 | [ALSA-2025:20994](https://patchblox.com/security/data/fix/linux/alsa-2025-20994.md) | Nov 11, 2025 | | Linux | python3-ipatests almalinux 8 | 4.9.13-20.module_el8.10.0+4050+3b475c71 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipatests almalinux 9 | 4.12.2-22.el9_7.1 | [ALSA-2025:20928](https://patchblox.com/security/data/fix/linux/alsa-2025-20928.md) | Nov 11, 2025 | | Linux | python3-ipatests ol 10 | 0:4.12.2-15.0.1.el10_0.4 | [ELSA-2025-17085](https://patchblox.com/security/data/fix/linux/elsa-2025-17085.md) | Oct 2, 2025 | | Linux | python3-ipatests ol 8 | 0:4.9.13-20.0.1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-ipatests ol 9 | 0:4.12.2-14.0.1.el9_6.5 | [ELSA-2025-17084](https://patchblox.com/security/data/fix/linux/elsa-2025-17084.md) | Oct 1, 2025 | | Linux | python3-jwcrypto RHEL 8 | 0:0.5.0-2.module+el8.10.0+21692+c9b201bc | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-jwcrypto almalinux 8 | 0.5.0-2.module_el8.10.0+3844+20e075e5 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-jwcrypto ol 8 | 0:0.5.0-2.module+el8.10.0+90573+7d6bd8da | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-kdcproxy RHEL 8 | 0:0.4-5.module+el8.10.0+22564+098ba143.1 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-kdcproxy almalinux 8 | 0.4-5.module_el8.10.0+3942+63b39a46.1 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-kdcproxy ol 8 | 0:0.4-5.module+el8.10.0+90553+1bd85afa.1 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-pyusb RHEL 8 | 0:1.0.0-9.1.module+el8.9.0+18920+2223d05e | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-pyusb almalinux 8 | 1.0.0-9.1.module_el8.7.0+3349+cfeff52e | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-pyusb ol 8 | 0:1.0.0-9.1.module+el8.9.0+90094+20819f5a | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-qrcode RHEL 8 | 0:5.3-1.module+el8.10.0+22544+6a7f07c2 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-qrcode almalinux 8 | 5.3-1.module_el8.10.0+3942+63b39a46 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-qrcode ol 8 | 0:5.3-1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-qrcode-core RHEL 8 | 0:5.3-1.module+el8.10.0+22544+6a7f07c2 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-qrcode-core almalinux 8 | 5.3-1.module_el8.10.0+3942+63b39a46 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-qrcode-core ol 8 | 0:5.3-1.module+el8.10.0+90676+16d53ab4 | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-yubico RHEL 8 | 0:1.3.2-9.1.module+el8.9.0+18920+2223d05e | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-yubico almalinux 8 | 1.3.2-9.1.module_el8.7.0+3349+cfeff52e | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | python3-yubico ol 8 | 0:1.3.2-9.1.module+el8.9.0+90094+20819f5a | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | pyusb rocky 8 | 0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9 | [RLSA-2025:17129](https://patchblox.com/security/data/fix/linux/rlsa-2025-17129.md) | Mar 18, 2026 | | Linux | slapi-nis RHEL 8 | 0:0.60.0-4.module+el8.10.0+20723+03062ebd | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | slapi-nis almalinux 8 | 0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | slapi-nis ol 8 | 0:0.60.0-4.module+el8.10.0+90297+bfe93ccc | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | slapi-nis rocky 8 | 0:0.60.0-4.module+el8.9.0+1573+39ab85f4 | [RLSA-2025:17129](https://patchblox.com/security/data/fix/linux/rlsa-2025-17129.md) | Mar 18, 2026 | | Linux | softhsm RHEL 8 | 0:2.6.0-5.module+el8.9.0+18911+94941f82 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | softhsm almalinux 8 | 2.6.0-5.module_el8.6.0+2881+2f24dc92 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | softhsm ol 8 | 0:2.6.0-5.module+el8.9.0+90094+20819f5a | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | | Linux | softhsm rocky 8 | 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9 | [RLSA-2025:17129](https://patchblox.com/security/data/fix/linux/rlsa-2025-17129.md) | Mar 18, 2026 | | Linux | softhsm-devel RHEL 8 | 0:2.6.0-5.module+el8.9.0+18911+94941f82 | [RHSA-2025:17129](https://patchblox.com/security/data/fix/linux/rhsa-2025-17129.md) | Oct 1, 2025 | | Linux | softhsm-devel almalinux 8 | 2.6.0-5.module_el8.6.0+2881+2f24dc92 | [ALSA-2025:17129](https://patchblox.com/security/data/fix/linux/alsa-2025-17129.md) | Oct 1, 2025 | | Linux | softhsm-devel ol 8 | 0:2.6.0-5.module+el8.9.0+90094+20819f5a | [ELSA-2025-17129](https://patchblox.com/security/data/fix/linux/elsa-2025-17129.md) | Oct 1, 2025 | --- Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.