# RHSA-2021:5142: Security update for 30 packages

RHSA-2021:5142, released December 15, 2021, fixes 1 CVE across 30 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/rhsa-2021-5142
- Platform: Linux
- Released: Dec 15, 2021
- Priority: High (Closes CVE-2020-25719, high severity)
- CVEs: 1, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://access.redhat.com/errata/RHSA-2021:5142

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bind-dyndb-ldap](https://patchblox.com/security/data/product/linux/bind-dyndb-ldap.md) | RHEL 8 | 0:11.6-2.module+el8.4.0+9328+4ec4e316 |
| [custodia](https://patchblox.com/security/data/product/linux/custodia.md) | RHEL 8 | 0:0.6.0-3.module+el8.1.0+4098+f286395e |
| [ipa-client](https://patchblox.com/security/data/product/linux/ipa-client.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [ipa-client-common](https://patchblox.com/security/data/product/linux/ipa-client-common.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [ipa-client-epn](https://patchblox.com/security/data/product/linux/ipa-client-epn.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [ipa-client-samba](https://patchblox.com/security/data/product/linux/ipa-client-samba.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [ipa-common](https://patchblox.com/security/data/product/linux/ipa-common.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [ipa-healthcheck](https://patchblox.com/security/data/product/linux/ipa-healthcheck.md) | RHEL 8 | 0:0.7-6.module+el8.5.0+11410+91a33fe4 |
| [ipa-healthcheck-core](https://patchblox.com/security/data/product/linux/ipa-healthcheck-core.md) | RHEL 8 | 0:0.7-6.module+el8.5.0+11410+91a33fe4 |
| [ipa-python-compat](https://patchblox.com/security/data/product/linux/ipa-python-compat.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [ipa-selinux](https://patchblox.com/security/data/product/linux/ipa-selinux.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [ipa-server](https://patchblox.com/security/data/product/linux/ipa-server.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [ipa-server-common](https://patchblox.com/security/data/product/linux/ipa-server-common.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [ipa-server-dns](https://patchblox.com/security/data/product/linux/ipa-server-dns.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [ipa-server-trust-ad](https://patchblox.com/security/data/product/linux/ipa-server-trust-ad.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [opendnssec](https://patchblox.com/security/data/product/linux/opendnssec.md) | RHEL 8 | 0:2.1.7-1.module+el8.4.0+9007+5084bdd8 |
| [python3-custodia](https://patchblox.com/security/data/product/linux/python3-custodia.md) | RHEL 8 | 0:0.6.0-3.module+el8.1.0+4098+f286395e |
| [python3-ipaclient](https://patchblox.com/security/data/product/linux/python3-ipaclient.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [python3-ipalib](https://patchblox.com/security/data/product/linux/python3-ipalib.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [python3-ipaserver](https://patchblox.com/security/data/product/linux/python3-ipaserver.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [python3-ipatests](https://patchblox.com/security/data/product/linux/python3-ipatests.md) | RHEL 8 | 0:4.9.6-10.module+el8.5.0+13587+92118e57 |
| [python3-jwcrypto](https://patchblox.com/security/data/product/linux/python3-jwcrypto.md) | RHEL 8 | 0:0.5.0-1.module+el8.1.0+4098+f286395e |
| [python3-kdcproxy](https://patchblox.com/security/data/product/linux/python3-kdcproxy.md) | RHEL 8 | 0:0.4-5.module+el8.2.0+4691+a05b2456 |
| [python3-pyusb](https://patchblox.com/security/data/product/linux/python3-pyusb.md) | RHEL 8 | 0:1.0.0-9.module+el8.1.0+4098+f286395e |
| [python3-qrcode](https://patchblox.com/security/data/product/linux/python3-qrcode.md) | RHEL 8 | 0:5.1-12.module+el8.1.0+4098+f286395e |
| [python3-qrcode-core](https://patchblox.com/security/data/product/linux/python3-qrcode-core.md) | RHEL 8 | 0:5.1-12.module+el8.1.0+4098+f286395e |
| [python3-yubico](https://patchblox.com/security/data/product/linux/python3-yubico.md) | RHEL 8 | 0:1.3.2-9.module+el8.1.0+4098+f286395e |
| [slapi-nis](https://patchblox.com/security/data/product/linux/slapi-nis.md) | RHEL 8 | 0:0.56.6-4.module+el8.5.0+12583+bf7ffcf6 |
| [softhsm](https://patchblox.com/security/data/product/linux/softhsm.md) | RHEL 8 | 0:2.6.0-5.module+el8.4.0+10227+076cd560 |
| [softhsm-devel](https://patchblox.com/security/data/product/linux/softhsm-devel.md) | RHEL 8 | 0:2.6.0-5.module+el8.4.0+10227+076cd560 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2020-25719](https://patchblox.com/security/data/cve/CVE-2020-25719.md) | High | bind-dyndb-ldap: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution fo... | 7.2 | 0.0169 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
