Critical RHSA-2025:17649 1 CVE

Red Hat Security Advisory: ipa security update

Published Oct 10, 2025 · Updated Jul 12, 2026

Ecosystem: Red Hat

Fixed packages 13

Release	Package	Fixed in
Red Hat · RHEL 7 ELS rhel_els:7	ipa	0:4.6.8-5.el7_9.23
Red Hat · RHEL 7 ELS rhel_els:7	ipa-client	0:4.6.8-5.el7_9.23
Red Hat · RHEL 7 ELS rhel_els:7	ipa-client-common	0:4.6.8-5.el7_9.23
Red Hat · RHEL 7 ELS rhel_els:7	ipa-common	0:4.6.8-5.el7_9.23
Red Hat · RHEL 7 ELS rhel_els:7	ipa-debuginfo	0:4.6.8-5.el7_9.23
Red Hat · RHEL 7 ELS rhel_els:7	ipa-python-compat	0:4.6.8-5.el7_9.23
Red Hat · RHEL 7 ELS rhel_els:7	ipa-server	0:4.6.8-5.el7_9.23
Red Hat · RHEL 7 ELS rhel_els:7	ipa-server-common	0:4.6.8-5.el7_9.23
Red Hat · RHEL 7 ELS rhel_els:7	ipa-server-dns	0:4.6.8-5.el7_9.23
Red Hat · RHEL 7 ELS rhel_els:7	ipa-server-trust-ad	0:4.6.8-5.el7_9.23
Red Hat · RHEL 7 ELS rhel_els:7	python2-ipaclient	0:4.6.8-5.el7_9.23
Red Hat · RHEL 7 ELS rhel_els:7	python2-ipalib	0:4.6.8-5.el7_9.23
Red Hat · RHEL 7 ELS rhel_els:7	python2-ipaserver	0:4.6.8-5.el7_9.23

Vulnerabilities 1

Critical 9.1

CVE-2025-7493

Freeipa: idm: privilege escalation from host to domain admin in freeipa

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux

Sep 30, 2025

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2389448
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17649.json
report
https://access.redhat.com/security/cve/CVE-2025-7493
advisory
https://www.cve.org/CVERecord?id=CVE-2025-7493
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-7493
article
https://www.freeipa.org/release-notes/4-12-5.html