Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 538
Alerts This Week
Warning Icon 1 538

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Podman Important Security Issue Update 2026-3126-1

Calendar White Jul 20, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE shibboleth-sp Important SQL Injection Vulnerability CVE-2025-9943

Calendar White Jul 20, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE gstreamer-plugins-bad Important Buffer Overflow Issues 2026-3125-1

Calendar White Jul 20, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 24.04 LTS Linux Kernel Important Security Advisory USN-8569-1

Calendar White Jul 20, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 LTS Linux Kernel Critical Security Update 8570-1

Calendar White Jul 20, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu libXfont Important Denial Of Service Heap Overflow Vuln 8560-1

Calendar White Jul 20, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 LTS rlottie Critical Denial of Service USN-8559-1

Calendar White Jul 20, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 Linux Kernel Privilege Escalation Vulnerabilities USN-8568-1

Calendar White Jul 20, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 22.04 Kernel Important Security Flaws Fix USN-8567-1

Calendar White Jul 20, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 16 articles for you...
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisoryprivilege escalationimportant

Oracle Linux 10: ELSA-2025-20994 IPA Important Privilege Escalation Fix

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-20994 http://linux.oracle.com/errata/ELSA-2025-20994.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable LinuxNetwork: x86_64: ipa-client-4.12.2-24.0.1.el10_1.1.x86_64.rpm ipa-client-common-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-client-encrypted-dns-4.12.2-24.0.1.el10_1.1.x86_64.rpm ipa-client-epn-4.12.2-24.0.1.el10_1.1.x86_64.rpm ipa-client-samba-4.12.2-24.0.1.el10_1.1.x86_64.rpm ipa-common-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-selinux-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-selinux-luna-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-selinux-nfast-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-server-4.12.2-24.0.1.el10_1.1.x86_64.rpm ipa-server-common-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-server-dns-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-server-encrypted-dns-4.12.2-24.0.1.el10_1.1.x86_64.rpm ipa-server-trust-ad-4.12.2-24.0.1.el10_1.1.x86_64.rpm python3-ipaclient-4.12.2-24.0.1.el10_1.1.noarch.rpm python3-ipalib-4.12.2-24.0.1.el10_1.1.noarch.rpm python3-ipaserver-4.12.2-24.0.1.el10_1.1.noarch.rpm python3-ipatests-4.12.2-24.0.1.el10_1.1.noarch.rpm aarch64: ipa-client-4.12.2-24.0.1.el10_1.1.aarch64.rpm ipa-client-common-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-client-encrypted-dns-4.12.2-24.0.1.el10_1.1.aarch64.rpm ipa-client-epn-4.12.2-24.0.1.el10_1.1.aarch64.rpm ipa-client-samba-4.12.2-24.0.1.el10_1.1.aarch64.rpm ipa-common-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-selinux-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-selinux-luna-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-selinux-nfast-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-server-4.12.2-24.0.1.el10_1.1.aarch64.rpm ipa-server-common-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-server-dns-4.12.2-24.0.1.el10_1.1.noarch.rpm ipa-server-encrypted-dns-4.12.2-24.0.1.el10_1.1.aarch64.rpm ipa-server-trust-ad-4.12.2-24.0.1.el10_1.1.aarch64.rpm python3-ipaclient-4.12.2-24.0.1.el10_1.1.noarch.rpm python3-ipalib-4.12.2-24.0.1.el10_1.1.noarch.rpm python3-ipaserver-4.12.2-24.0.1.el10_1.1.noarch.rpm python3-ipatests-4.12.2-24.0.1.el10_1.1.noarch.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/ipa-4.12.2-24.0.1.el10_1.1.src.rpm Related CVEs: CVE-2025-7493 Description of changes: [4.12.2-24.0.1.1] - Set IPAPLATFORM=rhelwhen build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-24.1] - Resolves: RHEL-118447 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Updated Oracl Linux 10 rpms address privilege escalation issues with ipa; high importance for security compliance and patching.. Oracle Linux, privilege escalation, ipa, security advisory, update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Dec 05, 2025 •Important Oracle
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorysecurity issueprivilege escalation

Oracle Linux 9: ELSA-2025-20928 ipa Important Privilege Escalation Risk

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-20928 http://linux.oracle.com/errata/ELSA-2025-20928.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable LinuxNetwork: x86_64: ipa-client-4.12.2-22.0.1.el9_7.1.x86_64.rpm ipa-client-common-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-client-encrypted-dns-4.12.2-22.0.1.el9_7.1.x86_64.rpm ipa-client-epn-4.12.2-22.0.1.el9_7.1.x86_64.rpm ipa-client-samba-4.12.2-22.0.1.el9_7.1.x86_64.rpm ipa-common-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-selinux-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-selinux-luna-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-selinux-nfast-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-server-4.12.2-22.0.1.el9_7.1.x86_64.rpm ipa-server-common-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-server-dns-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-server-encrypted-dns-4.12.2-22.0.1.el9_7.1.x86_64.rpm ipa-server-trust-ad-4.12.2-22.0.1.el9_7.1.x86_64.rpm python3-ipaclient-4.12.2-22.0.1.el9_7.1.noarch.rpm python3-ipalib-4.12.2-22.0.1.el9_7.1.noarch.rpm python3-ipaserver-4.12.2-22.0.1.el9_7.1.noarch.rpm python3-ipatests-4.12.2-22.0.1.el9_7.1.noarch.rpm aarch64: ipa-client-4.12.2-22.0.1.el9_7.1.aarch64.rpm ipa-client-common-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-client-encrypted-dns-4.12.2-22.0.1.el9_7.1.aarch64.rpm ipa-client-epn-4.12.2-22.0.1.el9_7.1.aarch64.rpm ipa-client-samba-4.12.2-22.0.1.el9_7.1.aarch64.rpm ipa-common-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-selinux-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-selinux-luna-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-selinux-nfast-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-server-4.12.2-22.0.1.el9_7.1.aarch64.rpm ipa-server-common-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-server-dns-4.12.2-22.0.1.el9_7.1.noarch.rpm ipa-server-encrypted-dns-4.12.2-22.0.1.el9_7.1.aarch64.rpm ipa-server-trust-ad-4.12.2-22.0.1.el9_7.1.aarch64.rpm python3-ipaclient-4.12.2-22.0.1.el9_7.1.noarch.rpm python3-ipalib-4.12.2-22.0.1.el9_7.1.noarch.rpm python3-ipaserver-4.12.2-22.0.1.el9_7.1.noarch.rpm python3-ipatests-4.12.2-22.0.1.el9_7.1.noarch.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/ipa-4.12.2-22.0.1.el9_7.1.src.rpm Related CVEs: CVE-2025-7493 Description of changes: [4.12.2-22.0.1.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug:29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-22.1] - Resolves: RHEL-118449 ipa: Privilege escalation from host to domain admin in FreeIPA [4.12.2-22] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 9 updates address significant issues in IPA components to enhance overall system integrity and security.. Oracle Linux ELSA-2025-20928, Important IPA Issue, System Updates for Oracle, Privilege Escalation Security Issue. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 27, 2025 •Important Oracle
Banner 4 1028x280 1708121825 1771600306
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorysecurity issueprivilege escalation

Oracle Linux 7: ELSA-2025-17649 ipa Important Fix Details

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-17649 http://linux.oracle.com/errata/ELSA-2025-17649.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: ipa-client-4.6.8-5.0.5.el7_9.17.x86_64.rpm ipa-client-common-4.6.8-5.0.5.el7_9.17.noarch.rpm ipa-common-4.6.8-5.0.5.el7_9.17.noarch.rpm ipa-python-compat-4.6.8-5.0.5.el7_9.17.noarch.rpm ipa-server-4.6.8-5.0.5.el7_9.17.x86_64.rpm ipa-server-common-4.6.8-5.0.5.el7_9.17.noarch.rpm ipa-server-dns-4.6.8-5.0.5.el7_9.17.noarch.rpm ipa-server-trust-ad-4.6.8-5.0.5.el7_9.17.x86_64.rpm python2-ipaclient-4.6.8-5.0.5.el7_9.17.noarch.rpm python2-ipalib-4.6.8-5.0.5.el7_9.17.noarch.rpm python2-ipaserver-4.6.8-5.0.5.el7_9.17.noarch.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/ipa-4.6.8-5.0.5.el7_9.17.src.rpm Related CVEs: CVE-2025-7493 Description of changes: [4.6.8-5.0.5.el7_9.17] - Fixes CVE-2025-7493 Enforce uniqueness across krbprincipalname - and krbcanonicalname [Orabug: 38520120] [4.6.8-5.0.3.el7_9.17] - Fix privilege escalation from host to domain vulnerability - CVE-2025-4404 [Orabug: 38085890] _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Updated rpms for Oracle Linux 7 addressing security issues in the ipa suite, including important fixes for privilege escalation.. Oracle Linux, ipa, security advisory, privilege escalation, ELSA-2025-17649. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 12, 2025 •Important Oracle
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisoryprivilege escalationthreat

Oracle Linux 10: ipa Important Privilege Escalation ELSA-2025-17085

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-17085 http://linux.oracle.com/errata/ELSA-2025-17085.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable LinuxNetwork: x86_64: ipa-client-4.12.2-15.0.1.el10_0.4.x86_64.rpm ipa-client-common-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-client-encrypted-dns-4.12.2-15.0.1.el10_0.4.x86_64.rpm ipa-client-epn-4.12.2-15.0.1.el10_0.4.x86_64.rpm ipa-client-samba-4.12.2-15.0.1.el10_0.4.x86_64.rpm ipa-common-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-selinux-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-selinux-luna-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-selinux-nfast-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-server-4.12.2-15.0.1.el10_0.4.x86_64.rpm ipa-server-common-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-server-dns-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-server-encrypted-dns-4.12.2-15.0.1.el10_0.4.x86_64.rpm ipa-server-trust-ad-4.12.2-15.0.1.el10_0.4.x86_64.rpm python3-ipaclient-4.12.2-15.0.1.el10_0.4.noarch.rpm python3-ipalib-4.12.2-15.0.1.el10_0.4.noarch.rpm python3-ipaserver-4.12.2-15.0.1.el10_0.4.noarch.rpm python3-ipatests-4.12.2-15.0.1.el10_0.4.noarch.rpm aarch64: ipa-client-4.12.2-15.0.1.el10_0.4.aarch64.rpm ipa-client-common-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-client-encrypted-dns-4.12.2-15.0.1.el10_0.4.aarch64.rpm ipa-client-epn-4.12.2-15.0.1.el10_0.4.aarch64.rpm ipa-client-samba-4.12.2-15.0.1.el10_0.4.aarch64.rpm ipa-common-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-selinux-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-selinux-luna-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-selinux-nfast-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-server-4.12.2-15.0.1.el10_0.4.aarch64.rpm ipa-server-common-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-server-dns-4.12.2-15.0.1.el10_0.4.noarch.rpm ipa-server-encrypted-dns-4.12.2-15.0.1.el10_0.4.aarch64.rpm ipa-server-trust-ad-4.12.2-15.0.1.el10_0.4.aarch64.rpm python3-ipaclient-4.12.2-15.0.1.el10_0.4.noarch.rpm python3-ipalib-4.12.2-15.0.1.el10_0.4.noarch.rpm python3-ipaserver-4.12.2-15.0.1.el10_0.4.noarch.rpm python3-ipatests-4.12.2-15.0.1.el10_0.4.noarch.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/ipa-4.12.2-15.0.1.el10_0.4.src.rpm Related CVEs: CVE-2025-7493 Description of changes: [4.12.2-15.0.1.el10_0.4] - SetIPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-15.el10_0.4] - Resolves: RHEL-113245 EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Important update for Oracle Linux 10 addressing privilege escalation in FreeIPA with advisory ID ELSA-2025-17085.. Oracle Linux 10, ipa, security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 03, 2025 •Important Oracle
Banner 4 1028x280 1708121825 1771600306
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisoryprivilege escalationimportant

Oracle Linux 9 Advisory ELSA-2025-17084 IPA Important Privilege Escalation

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-17084 http://linux.oracle.com/errata/ELSA-2025-17084.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable LinuxNetwork: x86_64: ipa-client-4.12.2-14.0.1.el9_6.5.x86_64.rpm ipa-client-common-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-client-encrypted-dns-4.12.2-14.0.1.el9_6.5.x86_64.rpm ipa-client-epn-4.12.2-14.0.1.el9_6.5.x86_64.rpm ipa-client-samba-4.12.2-14.0.1.el9_6.5.x86_64.rpm ipa-common-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-selinux-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-selinux-luna-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-selinux-nfast-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-server-4.12.2-14.0.1.el9_6.5.x86_64.rpm ipa-server-common-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-server-dns-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-server-encrypted-dns-4.12.2-14.0.1.el9_6.5.x86_64.rpm ipa-server-trust-ad-4.12.2-14.0.1.el9_6.5.x86_64.rpm python3-ipaclient-4.12.2-14.0.1.el9_6.5.noarch.rpm python3-ipalib-4.12.2-14.0.1.el9_6.5.noarch.rpm python3-ipaserver-4.12.2-14.0.1.el9_6.5.noarch.rpm python3-ipatests-4.12.2-14.0.1.el9_6.5.noarch.rpm aarch64: ipa-client-4.12.2-14.0.1.el9_6.5.aarch64.rpm ipa-client-common-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-client-encrypted-dns-4.12.2-14.0.1.el9_6.5.aarch64.rpm ipa-client-epn-4.12.2-14.0.1.el9_6.5.aarch64.rpm ipa-client-samba-4.12.2-14.0.1.el9_6.5.aarch64.rpm ipa-common-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-selinux-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-selinux-luna-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-selinux-nfast-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-server-4.12.2-14.0.1.el9_6.5.aarch64.rpm ipa-server-common-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-server-dns-4.12.2-14.0.1.el9_6.5.noarch.rpm ipa-server-encrypted-dns-4.12.2-14.0.1.el9_6.5.aarch64.rpm ipa-server-trust-ad-4.12.2-14.0.1.el9_6.5.aarch64.rpm python3-ipaclient-4.12.2-14.0.1.el9_6.5.noarch.rpm python3-ipalib-4.12.2-14.0.1.el9_6.5.noarch.rpm python3-ipaserver-4.12.2-14.0.1.el9_6.5.noarch.rpm python3-ipatests-4.12.2-14.0.1.el9_6.5.noarch.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/ipa-4.12.2-14.0.1.el9_6.5.src.rpm Related CVEs: CVE-2025-7493 Description of changes: [4.12.2-14.0.1.5] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug:29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-14.5] - Resolves: RHEL-110068 EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA [4.12.2-14.4] - Resolves: RHEL-110068 EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Updated RPMs for Oracle Linux address important privilege escalation issues in FreeIPA with advisory ELSA-2025-17084.. Oracle Linux, ipa, privilege escalation, security advisory, important update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 02, 2025 •Important Oracle
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisoryprivilege escalationimportant

Oracle Linux 7 ELSA-2025-9189 important: ipa privilege escalation

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-9189 http://linux.oracle.com/errata/ELSA-2025-9189.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: ipa-client-4.6.8-5.0.3.el7_9.17.x86_64.rpm ipa-client-common-4.6.8-5.0.3.el7_9.17.noarch.rpm ipa-common-4.6.8-5.0.3.el7_9.17.noarch.rpm ipa-python-compat-4.6.8-5.0.3.el7_9.17.noarch.rpm ipa-server-4.6.8-5.0.3.el7_9.17.x86_64.rpm ipa-server-common-4.6.8-5.0.3.el7_9.17.noarch.rpm ipa-server-dns-4.6.8-5.0.3.el7_9.17.noarch.rpm ipa-server-trust-ad-4.6.8-5.0.3.el7_9.17.x86_64.rpm python2-ipaclient-4.6.8-5.0.3.el7_9.17.noarch.rpm python2-ipalib-4.6.8-5.0.3.el7_9.17.noarch.rpm python2-ipaserver-4.6.8-5.0.3.el7_9.17.noarch.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/ipa-4.6.8-5.0.3.el7_9.17.src.rpm Related CVEs: CVE-2025-4404 Description of changes: [4.6.8-5.0.3.el7_9.17] - Fix privilege escalation from host to domain vulnerability - CVE-2025-4404 [Orabug: 38085890] _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . The latest Oracle Linux 7 update features vital RPM packages designed to fix critical privilege escalation vulnerabilities. Implementing these updates is essential for security and compliance. Oracle Linux, privilege escalation, ipa update, security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 08, 2025 •Important Oracle
Banner 4 1028x280 1708121825 1771600306
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisoryprivilege escalationimportant

Oracle 10 ELSA-2025-9190 Important: ipa Privilege Escalation Issue

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-9190 http://linux.oracle.com/errata/ELSA-2025-9190.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable LinuxNetwork: x86_64: ipa-client-4.12.2-15.0.1.el10_0.1.x86_64.rpm ipa-client-common-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-client-encrypted-dns-4.12.2-15.0.1.el10_0.1.x86_64.rpm ipa-client-epn-4.12.2-15.0.1.el10_0.1.x86_64.rpm ipa-client-samba-4.12.2-15.0.1.el10_0.1.x86_64.rpm ipa-common-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-selinux-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-selinux-luna-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-selinux-nfast-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-server-4.12.2-15.0.1.el10_0.1.x86_64.rpm ipa-server-common-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-server-dns-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-server-encrypted-dns-4.12.2-15.0.1.el10_0.1.x86_64.rpm ipa-server-trust-ad-4.12.2-15.0.1.el10_0.1.x86_64.rpm python3-ipaclient-4.12.2-15.0.1.el10_0.1.noarch.rpm python3-ipalib-4.12.2-15.0.1.el10_0.1.noarch.rpm python3-ipaserver-4.12.2-15.0.1.el10_0.1.noarch.rpm python3-ipatests-4.12.2-15.0.1.el10_0.1.noarch.rpm aarch64: ipa-client-4.12.2-15.0.1.el10_0.1.aarch64.rpm ipa-client-common-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-client-encrypted-dns-4.12.2-15.0.1.el10_0.1.aarch64.rpm ipa-client-epn-4.12.2-15.0.1.el10_0.1.aarch64.rpm ipa-client-samba-4.12.2-15.0.1.el10_0.1.aarch64.rpm ipa-common-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-selinux-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-selinux-luna-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-selinux-nfast-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-server-4.12.2-15.0.1.el10_0.1.aarch64.rpm ipa-server-common-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-server-dns-4.12.2-15.0.1.el10_0.1.noarch.rpm ipa-server-encrypted-dns-4.12.2-15.0.1.el10_0.1.aarch64.rpm ipa-server-trust-ad-4.12.2-15.0.1.el10_0.1.aarch64.rpm python3-ipaclient-4.12.2-15.0.1.el10_0.1.noarch.rpm python3-ipalib-4.12.2-15.0.1.el10_0.1.noarch.rpm python3-ipaserver-4.12.2-15.0.1.el10_0.1.noarch.rpm python3-ipatests-4.12.2-15.0.1.el10_0.1.noarch.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/ipa-4.12.2-15.0.1.el10_0.1.src.rpm Related CVEs: CVE-2025-4404 Description of changes: [4.12.2-15.0.1.el10_0.1] - SetIPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-15.el10_0.1] - Resolves: RHEL-89908 EMBARGOED CVE-2025-4404 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-89144 kdb: ipadb_get_connection() succeeds but returns null LDAP context _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Recent RPM updates for Oracle Linux 10 tackle critical security vulnerabilities linked to FreeIPA, incorporating essential patches.. Oracle Linux, RPM updates, FreeIPA, security threats, privilege escalation. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 30, 2025 •Important Oracle
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisoryimportantprivilege-escalation

Oracle Linux 9 ELSA-2025-9184 Important: ipa Privilege Escalation Detected

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-9184 http://linux.oracle.com/errata/ELSA-2025-9184.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable LinuxNetwork: x86_64: ipa-client-4.12.2-14.0.1.el9_6.1.x86_64.rpm ipa-client-common-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-client-encrypted-dns-4.12.2-14.0.1.el9_6.1.x86_64.rpm ipa-client-epn-4.12.2-14.0.1.el9_6.1.x86_64.rpm ipa-client-samba-4.12.2-14.0.1.el9_6.1.x86_64.rpm ipa-common-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-selinux-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-selinux-luna-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-selinux-nfast-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-server-4.12.2-14.0.1.el9_6.1.x86_64.rpm ipa-server-common-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-server-dns-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-server-encrypted-dns-4.12.2-14.0.1.el9_6.1.x86_64.rpm ipa-server-trust-ad-4.12.2-14.0.1.el9_6.1.x86_64.rpm python3-ipaclient-4.12.2-14.0.1.el9_6.1.noarch.rpm python3-ipalib-4.12.2-14.0.1.el9_6.1.noarch.rpm python3-ipaserver-4.12.2-14.0.1.el9_6.1.noarch.rpm python3-ipatests-4.12.2-14.0.1.el9_6.1.noarch.rpm aarch64: ipa-client-4.12.2-14.0.1.el9_6.1.aarch64.rpm ipa-client-common-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-client-encrypted-dns-4.12.2-14.0.1.el9_6.1.aarch64.rpm ipa-client-epn-4.12.2-14.0.1.el9_6.1.aarch64.rpm ipa-client-samba-4.12.2-14.0.1.el9_6.1.aarch64.rpm ipa-common-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-selinux-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-selinux-luna-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-selinux-nfast-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-server-4.12.2-14.0.1.el9_6.1.aarch64.rpm ipa-server-common-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-server-dns-4.12.2-14.0.1.el9_6.1.noarch.rpm ipa-server-encrypted-dns-4.12.2-14.0.1.el9_6.1.aarch64.rpm ipa-server-trust-ad-4.12.2-14.0.1.el9_6.1.aarch64.rpm python3-ipaclient-4.12.2-14.0.1.el9_6.1.noarch.rpm python3-ipalib-4.12.2-14.0.1.el9_6.1.noarch.rpm python3-ipaserver-4.12.2-14.0.1.el9_6.1.noarch.rpm python3-ipatests-4.12.2-14.0.1.el9_6.1.noarch.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates//ipa-4.12.2-14.0.1.el9_6.1.src.rpm Related CVEs: CVE-2025-4404 Description of changes: [4.12.2-14.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug:29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-14.1] - Resolves: RHEL-89908 EMBARGOED CVE-2025-4404 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-89144 kdb: ipadb_get_connection() succeeds but returns null LDAP context _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . New patches released for Oracle Linux 9 tackling critical vulnerabilities associated with privilege escalation. Take action immediately!. Oracle Linux, ipa update, important security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 19, 2025 •Important Oracle
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics