# RHSA-2025:21140: Security update for 30 packages RHSA-2025:21140, released November 12, 2025, fixes 2 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/rhsa-2025-21140 - Platform: Linux - Released: Nov 12, 2025 - Priority: High (Closes CVE-2025-59089, high severity) - CVEs: 2, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2025:21140 ## Applies to | Product | Release | Fixed in | |---|---|---| | [bind-dyndb-ldap](https://patchblox.com/security/data/product/linux/bind-dyndb-ldap.md) | RHEL 8 | 0:11.6-6.module+el8.10.0+23009+91fb337e | | [custodia](https://patchblox.com/security/data/product/linux/custodia.md) | RHEL 8 | 0:0.6.0-3.module+el8.9.0+18911+94941f82 | | [ipa-client](https://patchblox.com/security/data/product/linux/ipa-client.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23617+3e211261 | | [ipa-client-common](https://patchblox.com/security/data/product/linux/ipa-client-common.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23617+3e211261 | | [ipa-client-epn](https://patchblox.com/security/data/product/linux/ipa-client-epn.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23617+3e211261 | | [ipa-client-samba](https://patchblox.com/security/data/product/linux/ipa-client-samba.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23617+3e211261 | | [ipa-common](https://patchblox.com/security/data/product/linux/ipa-common.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23617+3e211261 | | [ipa-healthcheck](https://patchblox.com/security/data/product/linux/ipa-healthcheck.md) | RHEL 8 | 0:0.12-6.module+el8.10.0+23403+cc1f9b40 | | [ipa-healthcheck-core](https://patchblox.com/security/data/product/linux/ipa-healthcheck-core.md) | RHEL 8 | 0:0.12-6.module+el8.10.0+23404+f6b3454f | | [ipa-python-compat](https://patchblox.com/security/data/product/linux/ipa-python-compat.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23617+3e211261 | | [ipa-selinux](https://patchblox.com/security/data/product/linux/ipa-selinux.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23617+3e211261 | | [ipa-server](https://patchblox.com/security/data/product/linux/ipa-server.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23610+7d6e87e5 | | [ipa-server-common](https://patchblox.com/security/data/product/linux/ipa-server-common.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23610+7d6e87e5 | | [ipa-server-dns](https://patchblox.com/security/data/product/linux/ipa-server-dns.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23610+7d6e87e5 | | [ipa-server-trust-ad](https://patchblox.com/security/data/product/linux/ipa-server-trust-ad.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23610+7d6e87e5 | | [opendnssec](https://patchblox.com/security/data/product/linux/opendnssec.md) | RHEL 8 | 0:2.1.7-2.module+el8.10.0+22913+7aa1a207 | | [python3-custodia](https://patchblox.com/security/data/product/linux/python3-custodia.md) | RHEL 8 | 0:0.6.0-3.module+el8.9.0+18911+94941f82 | | [python3-ipaclient](https://patchblox.com/security/data/product/linux/python3-ipaclient.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23617+3e211261 | | [python3-ipalib](https://patchblox.com/security/data/product/linux/python3-ipalib.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23617+3e211261 | | [python3-ipaserver](https://patchblox.com/security/data/product/linux/python3-ipaserver.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23610+7d6e87e5 | | [python3-ipatests](https://patchblox.com/security/data/product/linux/python3-ipatests.md) | RHEL 8 | 0:4.9.13-20.module+el8.10.0+23610+7d6e87e5 | | [python3-jwcrypto](https://patchblox.com/security/data/product/linux/python3-jwcrypto.md) | RHEL 8 | 0:0.5.0-2.module+el8.10.0+21692+c9b201bc | | [python3-kdcproxy](https://patchblox.com/security/data/product/linux/python3-kdcproxy.md) | RHEL 8 | 0:0.4-5.module+el8.10.0+23610+7d6e87e5.2 | | [python3-pyusb](https://patchblox.com/security/data/product/linux/python3-pyusb.md) | RHEL 8 | 0:1.0.0-9.1.module+el8.9.0+18920+2223d05e | | [python3-qrcode](https://patchblox.com/security/data/product/linux/python3-qrcode.md) | RHEL 8 | 0:5.3-1.module+el8.10.0+22544+6a7f07c2 | | [python3-qrcode-core](https://patchblox.com/security/data/product/linux/python3-qrcode-core.md) | RHEL 8 | 0:5.3-1.module+el8.10.0+22544+6a7f07c2 | | [python3-yubico](https://patchblox.com/security/data/product/linux/python3-yubico.md) | RHEL 8 | 0:1.3.2-9.1.module+el8.9.0+18920+2223d05e | | [slapi-nis](https://patchblox.com/security/data/product/linux/slapi-nis.md) | RHEL 8 | 0:0.60.0-4.module+el8.10.0+20723+03062ebd | | [softhsm](https://patchblox.com/security/data/product/linux/softhsm.md) | RHEL 8 | 0:2.6.0-5.module+el8.9.0+18911+94941f82 | | [softhsm-devel](https://patchblox.com/security/data/product/linux/softhsm-devel.md) | RHEL 8 | 0:2.6.0-5.module+el8.9.0+18911+94941f82 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-59089](https://patchblox.com/security/data/cve/CVE-2025-59089.md) | High | bind-dyndb-ldap: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution fo... | 8.6 | 0.0056 | | | [CVE-2025-59088](https://patchblox.com/security/data/cve/CVE-2025-59088.md) | High | bind-dyndb-ldap: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution fo... | 8.6 | 0.0049 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo