Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 421
Alerts This Week
Warning Icon 1 421

Oracle Linux 9 Advisory ELSA-2025-17084 IPA Important Privilege Escalation

oracle
Calendar Grey October 2, 2025
Scroller Oracle
Updated RPMs for Oracle Linux address important privilege escalation issues in FreeIPA with advisory ELSA-2025-17084.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[4.12.2-14.0.1.5] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-14.5] - Resolves: RHEL-110068 EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA [4.12.2-14.4] - Resolves: RHEL-110068 EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates/ipa-4.12.2-14.0.1.el9_6.5.src.rpm

x86_64

ipa-client-4.12.2-14.0.1.el9_6.5.x86_64.rpm ipa-client-common-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-client-encrypted-dns-4.12.2-14.0.1.el9_6.5.x86_64.rpm ipa-client-epn-4.12.2-14.0.1.el9_6.5.x86_64.rpm ipa-client-samba-4.12.2-14.0.1.el9_6.5.x86_64.rpm ipa-common-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-selinux-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-selinux-luna-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-selinux-nfast-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-server-4.12.2-14.0.1.el9_6.5.x86_64.rpm ipa-server-common-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-server-dns-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-server-encrypted-dns-4.12.2-14.0.1.el9_6.5.x86_64.rpm ipa-server-trust-ad-4.12.2-14.0.1.el9_6.5.x86_64.rpm python3-ipaclient-4.12.2-14.0.1.el9_6.5.noarch.rpm python3-ipalib-4.12.2-14.0.1.el9_6.5.noarch.rpm python3-ipaserver-4.12.2-14.0.1.el9_6.5.noarch.rpm python3-ipatests-4.12.2-14.0.1.el9_6.5.noarch.rpm

aarch64

ipa-client-4.12.2-14.0.1.el9_6.5.aarch64.rpm ipa-client-common-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-client-encrypted-dns-4.12.2-14.0.1.el9_6.5.aarch64.rpm ipa-client-epn-4.12.2-14.0.1.el9_6.5.aarch64.rpm ipa-client-samba-4.12.2-14.0.1.el9_6.5.aarch64.rpm ipa-common-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-selinux-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-selinux-luna-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-selinux-nfast-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-server-4.12.2-14.0.1.el9_6.5.aarch64.rpm ipa-server-common-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-server-dns-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-server-encrypted-dns-4.12.2-14.0.1.el9_6.5.aarch64.rpm ipa-server-trust-ad-4.12.2-14.0.1.el9_6.5.aarch64.rpm python3-ipaclient-4.12.2-14.0.1.el9_6.5.noarch.rpm python3-ipalib-4.12.2-14.0.1.el9_6.5.noarch.rpm python3-ipaserver-4.12.2-14.0.1.el9_6.5.noarch.rpm python3-ipatests-4.12.2-14.0.1.el9_6.5.noarch.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2025-7493

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.