[CLSA-2025:1763391572] ipa: Fix of CVE-2025-7493
Type:
security
Severity:
Critical
Release date:
2025-11-17 14:59:36 UTC
Description:
- CVE-2025-7493: fix privilege escalation, validate krbCanonicalName to prevent host-to-realm admin escalation, blocks unauthorized admin actions and data exfiltration
Updated packages:
  • ipa-client-4.10.1-9.el9_2.alma.1.tuxcare.els2.x86_64.rpm
    sha:a2df0373b0cf9f673a36d0a3f87e180b2d88fad1982b8913e1c6ea2b35de36d8
  • ipa-client-common-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm
    sha:055aef5e3f3d3e2b9011e2257df66d6b58013fb26be932d15c12cf10cf389091
  • ipa-client-epn-4.10.1-9.el9_2.alma.1.tuxcare.els2.x86_64.rpm
    sha:25b775bb8ce986134c9c8f8d464fea261409f985ad407a1bb7c5e5ba47bdcc57
  • ipa-client-samba-4.10.1-9.el9_2.alma.1.tuxcare.els2.x86_64.rpm
    sha:eb485085ce2c6d4e75631ae703e70c5e29902b1f26868ab1ef8a1535c88c2ee3
  • ipa-common-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm
    sha:57a6a2d77cd22d05880eb0dd2d077705e4627b69ad9425cabc0a7708e78f6972
  • ipa-python-compat-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm
    sha:947fe21d259b913df3558461ca9c1d099c66c849b15c409ed281243c8d9c165d
  • ipa-selinux-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm
    sha:2362ee4e7893202a970c0cc340198e92d94375dc780ef0d7e3bd6e25b0e2f4d8
  • ipa-server-4.10.1-9.el9_2.alma.1.tuxcare.els2.x86_64.rpm
    sha:30be9b4eebe4e3fd14238f500a941cfee9420dd46e92b87886dcc22be731708d
  • ipa-server-common-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm
    sha:3e4942312291b33cb59b5306240308a5dfd977a1458dd4ff88365bf56c12d570
  • ipa-server-dns-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm
    sha:4db8b4a5f18756653bd1facb266aea16ff48ef51c7de6883d1a3e7930a27038c
  • ipa-server-trust-ad-4.10.1-9.el9_2.alma.1.tuxcare.els2.x86_64.rpm
    sha:84a74054aac1b631592b3e6d672e6d885f0733f3dc787cb06059cd033ee320e5
  • python3-ipaclient-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm
    sha:29dccc38ebe65beb094fd1ed078a1e9460b2799c6e25b523738ab455d0180778
  • python3-ipalib-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm
    sha:f9ffab5a7bbb7fae0df1bba2eab186d4e9adea6de49f9d5fff3e021cc06bd5fb
  • python3-ipaserver-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm
    sha:1033a5f7f167e8b777b0750f2515dc673aec8a5ba85d9ac5d9d3365d0b5ff65d
  • python3-ipatests-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm
    sha:7b9706910c00ad95e16f8ce0502ff1bb4ff9626fa7cdbdab9c909146d0a52af8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.