Linux · Security advisory · October 2, 2025

ELSA-2025-17085: Security update for 18 packages

ELSA-2025-17085, released October 2, 2025, fixes 1 CVE across 18 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0056
46th percentile

Fixed package versions

ProductReleaseFixed in
ipa-clientol 100:4.12.2-15.0.1.el10_0.4
ipa-client-commonol 100:4.12.2-15.0.1.el10_0.4
ipa-client-encrypted-dnsol 100:4.12.2-15.0.1.el10_0.4
ipa-client-epnol 100:4.12.2-15.0.1.el10_0.4
ipa-client-sambaol 100:4.12.2-15.0.1.el10_0.4
ipa-commonol 100:4.12.2-15.0.1.el10_0.4
ipa-selinuxol 100:4.12.2-15.0.1.el10_0.4
ipa-selinux-lunaol 100:4.12.2-15.0.1.el10_0.4
ipa-selinux-nfastol 100:4.12.2-15.0.1.el10_0.4
ipa-serverol 100:4.12.2-15.0.1.el10_0.4
ipa-server-commonol 100:4.12.2-15.0.1.el10_0.4
ipa-server-dnsol 100:4.12.2-15.0.1.el10_0.4
ipa-server-encrypted-dnsol 100:4.12.2-15.0.1.el10_0.4
ipa-server-trust-adol 100:4.12.2-15.0.1.el10_0.4
python3-ipaclientol 100:4.12.2-15.0.1.el10_0.4
python3-ipalibol 100:4.12.2-15.0.1.el10_0.4
python3-ipaserverol 100:4.12.2-15.0.1.el10_0.4
python3-ipatestsol 100:4.12.2-15.0.1.el10_0.4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-7493 ipa: A privilege escalation flaw from host to domain administrator was found in FreeIPA 9.1 0.0056 None reported
Showing 1 to 1 of 1 1