Linux · Security advisory · October 1, 2025

ELSA-2025-17084: Security update for 18 packages

ELSA-2025-17084, released October 1, 2025, fixes 1 CVE across 18 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0056
46th percentile

Fixed package versions

ProductReleaseFixed in
ipa-clientol 90:4.12.2-14.0.1.el9_6.5
ipa-client-commonol 90:4.12.2-14.0.1.el9_6.5
ipa-client-encrypted-dnsol 90:4.12.2-14.0.1.el9_6.5
ipa-client-epnol 90:4.12.2-14.0.1.el9_6.5
ipa-client-sambaol 90:4.12.2-14.0.1.el9_6.5
ipa-commonol 90:4.12.2-14.0.1.el9_6.5
ipa-selinuxol 90:4.12.2-14.0.1.el9_6.5
ipa-selinux-lunaol 90:4.12.2-14.0.1.el9_6.5
ipa-selinux-nfastol 90:4.12.2-14.0.1.el9_6.5
ipa-serverol 90:4.12.2-14.0.1.el9_6.5
ipa-server-commonol 90:4.12.2-14.0.1.el9_6.5
ipa-server-dnsol 90:4.12.2-14.0.1.el9_6.5
ipa-server-encrypted-dnsol 90:4.12.2-14.0.1.el9_6.5
ipa-server-trust-adol 90:4.12.2-14.0.1.el9_6.5
python3-ipaclientol 90:4.12.2-14.0.1.el9_6.5
python3-ipalibol 90:4.12.2-14.0.1.el9_6.5
python3-ipaserverol 90:4.12.2-14.0.1.el9_6.5
python3-ipatestsol 90:4.12.2-14.0.1.el9_6.5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-7493 ipa: A privilege escalation flaw from host to domain administrator was found in FreeIPA 9.1 0.0056 None reported
Showing 1 to 1 of 1 1