{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"critical"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2025-7493","title":"Title"},{"category":"description","text":"A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2025-7493","url":"https://www.suse.com/security/cve/CVE-2025-7493"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"Advisory link for ESSA-2025:3454","url":"https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002053.html"},{"category":"external","summary":"Advisory link for ESSA-2025:3455","url":"https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002054.html"},{"category":"external","summary":"Advisory link for RHSA-2025:17084","url":"https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002051.html"}],"title":"SUSE CVE CVE-2025-7493","tracking":{"current_release_date":"2025-10-02T23:31:44Z","generator":{"date":"2025-10-01T23:26:07Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2025-7493","initial_release_date":"2025-10-01T23:26:07Z","revision_history":[{"date":"2025-10-01T23:26:07Z","number":"2","summary":"Current version"},{"date":"2025-10-02T23:31:44Z","number":"3","summary":"Current version"}],"status":"interim","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"SUSE Liberty Linux 8","product":{"name":"SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8","product_identification_helper":{"cpe":"cpe:/o:suse:sll:8"}}},{"category":"product_name","name":"SUSE Liberty Linux 9","product":{"name":"SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9","product_identification_helper":{"cpe":"cpe:/o:suse:sll:9"}}},{"category":"product_version","name":"bind-dyndb-ldap-11.6-6.module+el8.10.0+23009+91fb337e","product":{"name":"bind-dyndb-ldap-11.6-6.module+el8.10.0+23009+91fb337e","product_id":"bind-dyndb-ldap-11.6-6.module+el8.10.0+23009+91fb337e","product_identification_helper":{"purl":"pkg:rpm/suse/bind-dyndb-ldap-11.6-6.module+el8.10.0+23009+91fb337e@"}}},{"category":"product_version","name":"custodia-0.6.0-3.module+el8.9.0+18911+94941f82","product":{"name":"custodia-0.6.0-3.module+el8.9.0+18911+94941f82","product_id":"custodia-0.6.0-3.module+el8.9.0+18911+94941f82","product_identification_helper":{"purl":"pkg:rpm/suse/custodia-0.6.0-3.module+el8.9.0+18911+94941f82@"}}},{"category":"product_version","name":"ipa-client-4.12.2-14.el9_6.5","product":{"name":"ipa-client-4.12.2-14.el9_6.5","product_id":"ipa-client-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-client@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-client-4.9.13-20.module+el8.10.0+23537+32c82745","product":{"name":"ipa-client-4.9.13-20.module+el8.10.0+23537+32c82745","product_id":"ipa-client-4.9.13-20.module+el8.10.0+23537+32c82745","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-client-4.9.13-20.module+el8.10.0+23537+32c82745@"}}},{"category":"product_version","name":"ipa-client-common-4.12.2-14.el9_6.5","product":{"name":"ipa-client-common-4.12.2-14.el9_6.5","product_id":"ipa-client-common-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-client-common@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-client-common-4.9.13-20.module+el8.10.0+23537+32c82745","product":{"name":"ipa-client-common-4.9.13-20.module+el8.10.0+23537+32c82745","product_id":"ipa-client-common-4.9.13-20.module+el8.10.0+23537+32c82745","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-client-common-4.9.13-20.module+el8.10.0+23537+32c82745@"}}},{"category":"product_version","name":"ipa-client-encrypted-dns-4.12.2-14.el9_6.5","product":{"name":"ipa-client-encrypted-dns-4.12.2-14.el9_6.5","product_id":"ipa-client-encrypted-dns-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-client-encrypted-dns@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-client-epn-4.12.2-14.el9_6.5","product":{"name":"ipa-client-epn-4.12.2-14.el9_6.5","product_id":"ipa-client-epn-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-client-epn@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-client-epn-4.9.13-20.module+el8.10.0+23537+32c82745","product":{"name":"ipa-client-epn-4.9.13-20.module+el8.10.0+23537+32c82745","product_id":"ipa-client-epn-4.9.13-20.module+el8.10.0+23537+32c82745","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-client-epn-4.9.13-20.module+el8.10.0+23537+32c82745@"}}},{"category":"product_version","name":"ipa-client-samba-4.12.2-14.el9_6.5","product":{"name":"ipa-client-samba-4.12.2-14.el9_6.5","product_id":"ipa-client-samba-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-client-samba@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-client-samba-4.9.13-20.module+el8.10.0+23537+32c82745","product":{"name":"ipa-client-samba-4.9.13-20.module+el8.10.0+23537+32c82745","product_id":"ipa-client-samba-4.9.13-20.module+el8.10.0+23537+32c82745","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-client-samba-4.9.13-20.module+el8.10.0+23537+32c82745@"}}},{"category":"product_version","name":"ipa-common-4.12.2-14.el9_6.5","product":{"name":"ipa-common-4.12.2-14.el9_6.5","product_id":"ipa-common-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-common@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-common-4.9.13-20.module+el8.10.0+23537+32c82745","product":{"name":"ipa-common-4.9.13-20.module+el8.10.0+23537+32c82745","product_id":"ipa-common-4.9.13-20.module+el8.10.0+23537+32c82745","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-common-4.9.13-20.module+el8.10.0+23537+32c82745@"}}},{"category":"product_version","name":"ipa-healthcheck-0.12-6.module+el8.10.0+23403+cc1f9b40","product":{"name":"ipa-healthcheck-0.12-6.module+el8.10.0+23403+cc1f9b40","product_id":"ipa-healthcheck-0.12-6.module+el8.10.0+23403+cc1f9b40","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-healthcheck-0.12-6.module+el8.10.0+23403+cc1f9b40@"}}},{"category":"product_version","name":"ipa-healthcheck-core-0.12-6.module+el8.10.0+23404+f6b3454f","product":{"name":"ipa-healthcheck-core-0.12-6.module+el8.10.0+23404+f6b3454f","product_id":"ipa-healthcheck-core-0.12-6.module+el8.10.0+23404+f6b3454f","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-healthcheck-core-0.12-6.module+el8.10.0+23404+f6b3454f@"}}},{"category":"product_version","name":"ipa-python-compat-4.9.13-20.module+el8.10.0+23537+32c82745","product":{"name":"ipa-python-compat-4.9.13-20.module+el8.10.0+23537+32c82745","product_id":"ipa-python-compat-4.9.13-20.module+el8.10.0+23537+32c82745","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-python-compat-4.9.13-20.module+el8.10.0+23537+32c82745@"}}},{"category":"product_version","name":"ipa-selinux-4.12.2-14.el9_6.5","product":{"name":"ipa-selinux-4.12.2-14.el9_6.5","product_id":"ipa-selinux-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-selinux@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-selinux-4.9.13-20.module+el8.10.0+23537+32c82745","product":{"name":"ipa-selinux-4.9.13-20.module+el8.10.0+23537+32c82745","product_id":"ipa-selinux-4.9.13-20.module+el8.10.0+23537+32c82745","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-selinux-4.9.13-20.module+el8.10.0+23537+32c82745@"}}},{"category":"product_version","name":"ipa-selinux-luna-4.12.2-14.el9_6.5","product":{"name":"ipa-selinux-luna-4.12.2-14.el9_6.5","product_id":"ipa-selinux-luna-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-selinux-luna@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-selinux-nfast-4.12.2-14.el9_6.5","product":{"name":"ipa-selinux-nfast-4.12.2-14.el9_6.5","product_id":"ipa-selinux-nfast-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-selinux-nfast@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-server-4.12.2-14.el9_6.5","product":{"name":"ipa-server-4.12.2-14.el9_6.5","product_id":"ipa-server-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-server@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-server-4.9.13-20.module+el8.10.0+23534+744f3864","product":{"name":"ipa-server-4.9.13-20.module+el8.10.0+23534+744f3864","product_id":"ipa-server-4.9.13-20.module+el8.10.0+23534+744f3864","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-server-4.9.13-20.module+el8.10.0+23534+744f3864@"}}},{"category":"product_version","name":"ipa-server-common-4.12.2-14.el9_6.5","product":{"name":"ipa-server-common-4.12.2-14.el9_6.5","product_id":"ipa-server-common-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-server-common@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-server-common-4.9.13-20.module+el8.10.0+23534+744f3864","product":{"name":"ipa-server-common-4.9.13-20.module+el8.10.0+23534+744f3864","product_id":"ipa-server-common-4.9.13-20.module+el8.10.0+23534+744f3864","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-server-common-4.9.13-20.module+el8.10.0+23534+744f3864@"}}},{"category":"product_version","name":"ipa-server-dns-4.12.2-14.el9_6.5","product":{"name":"ipa-server-dns-4.12.2-14.el9_6.5","product_id":"ipa-server-dns-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-server-dns@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-server-dns-4.9.13-20.module+el8.10.0+23534+744f3864","product":{"name":"ipa-server-dns-4.9.13-20.module+el8.10.0+23534+744f3864","product_id":"ipa-server-dns-4.9.13-20.module+el8.10.0+23534+744f3864","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-server-dns-4.9.13-20.module+el8.10.0+23534+744f3864@"}}},{"category":"product_version","name":"ipa-server-encrypted-dns-4.12.2-14.el9_6.5","product":{"name":"ipa-server-encrypted-dns-4.12.2-14.el9_6.5","product_id":"ipa-server-encrypted-dns-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-server-encrypted-dns@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-server-trust-ad-4.12.2-14.el9_6.5","product":{"name":"ipa-server-trust-ad-4.12.2-14.el9_6.5","product_id":"ipa-server-trust-ad-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-server-trust-ad@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"ipa-server-trust-ad-4.9.13-20.module+el8.10.0+23534+744f3864","product":{"name":"ipa-server-trust-ad-4.9.13-20.module+el8.10.0+23534+744f3864","product_id":"ipa-server-trust-ad-4.9.13-20.module+el8.10.0+23534+744f3864","product_identification_helper":{"purl":"pkg:rpm/suse/ipa-server-trust-ad-4.9.13-20.module+el8.10.0+23534+744f3864@"}}},{"category":"product_version","name":"opendnssec-2.1.7-2.module+el8.10.0+22913+7aa1a207","product":{"name":"opendnssec-2.1.7-2.module+el8.10.0+22913+7aa1a207","product_id":"opendnssec-2.1.7-2.module+el8.10.0+22913+7aa1a207","product_identification_helper":{"purl":"pkg:rpm/suse/opendnssec-2.1.7-2.module+el8.10.0+22913+7aa1a207@"}}},{"category":"product_version","name":"python3-custodia-0.6.0-3.module+el8.9.0+18911+94941f82","product":{"name":"python3-custodia-0.6.0-3.module+el8.9.0+18911+94941f82","product_id":"python3-custodia-0.6.0-3.module+el8.9.0+18911+94941f82","product_identification_helper":{"purl":"pkg:rpm/suse/python3-custodia-0.6.0-3.module+el8.9.0+18911+94941f82@"}}},{"category":"product_version","name":"python3-ipaclient-4.12.2-14.el9_6.5","product":{"name":"python3-ipaclient-4.12.2-14.el9_6.5","product_id":"python3-ipaclient-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/python3-ipaclient@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"python3-ipaclient-4.9.13-20.module+el8.10.0+23537+32c82745","product":{"name":"python3-ipaclient-4.9.13-20.module+el8.10.0+23537+32c82745","product_id":"python3-ipaclient-4.9.13-20.module+el8.10.0+23537+32c82745","product_identification_helper":{"purl":"pkg:rpm/suse/python3-ipaclient-4.9.13-20.module+el8.10.0+23537+32c82745@"}}},{"category":"product_version","name":"python3-ipalib-4.12.2-14.el9_6.5","product":{"name":"python3-ipalib-4.12.2-14.el9_6.5","product_id":"python3-ipalib-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/python3-ipalib@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"python3-ipalib-4.9.13-20.module+el8.10.0+23537+32c82745","product":{"name":"python3-ipalib-4.9.13-20.module+el8.10.0+23537+32c82745","product_id":"python3-ipalib-4.9.13-20.module+el8.10.0+23537+32c82745","product_identification_helper":{"purl":"pkg:rpm/suse/python3-ipalib-4.9.13-20.module+el8.10.0+23537+32c82745@"}}},{"category":"product_version","name":"python3-ipaserver-4.12.2-14.el9_6.5","product":{"name":"python3-ipaserver-4.12.2-14.el9_6.5","product_id":"python3-ipaserver-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/python3-ipaserver@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"python3-ipaserver-4.9.13-20.module+el8.10.0+23534+744f3864","product":{"name":"python3-ipaserver-4.9.13-20.module+el8.10.0+23534+744f3864","product_id":"python3-ipaserver-4.9.13-20.module+el8.10.0+23534+744f3864","product_identification_helper":{"purl":"pkg:rpm/suse/python3-ipaserver-4.9.13-20.module+el8.10.0+23534+744f3864@"}}},{"category":"product_version","name":"python3-ipatests-4.12.2-14.el9_6.5","product":{"name":"python3-ipatests-4.12.2-14.el9_6.5","product_id":"python3-ipatests-4.12.2-14.el9_6.5","product_identification_helper":{"purl":"pkg:rpm/suse/python3-ipatests@4.12.2-14.el9_6.5"}}},{"category":"product_version","name":"python3-ipatests-4.9.13-20.module+el8.10.0+23534+744f3864","product":{"name":"python3-ipatests-4.9.13-20.module+el8.10.0+23534+744f3864","product_id":"python3-ipatests-4.9.13-20.module+el8.10.0+23534+744f3864","product_identification_helper":{"purl":"pkg:rpm/suse/python3-ipatests-4.9.13-20.module+el8.10.0+23534+744f3864@"}}},{"category":"product_version","name":"python3-jwcrypto-0.5.0-2.module+el8.10.0+21692+c9b201bc","product":{"name":"python3-jwcrypto-0.5.0-2.module+el8.10.0+21692+c9b201bc","product_id":"python3-jwcrypto-0.5.0-2.module+el8.10.0+21692+c9b201bc","product_identification_helper":{"purl":"pkg:rpm/suse/python3-jwcrypto-0.5.0-2.module+el8.10.0+21692+c9b201bc@"}}},{"category":"product_version","name":"python3-kdcproxy-0.4-5.module+el8.10.0+22564+098ba143.1","product":{"name":"python3-kdcproxy-0.4-5.module+el8.10.0+22564+098ba143.1","product_id":"python3-kdcproxy-0.4-5.module+el8.10.0+22564+098ba143.1","product_identification_helper":{"purl":"pkg:rpm/suse/python3-kdcproxy-0.4-5.module+el8.10.0+22564+098ba143.1@"}}},{"category":"product_version","name":"python3-pyusb-1.0.0-9.1.module+el8.9.0+18920+2223d05e","product":{"name":"python3-pyusb-1.0.0-9.1.module+el8.9.0+18920+2223d05e","product_id":"python3-pyusb-1.0.0-9.1.module+el8.9.0+18920+2223d05e","product_identification_helper":{"purl":"pkg:rpm/suse/python3-pyusb-1.0.0-9.1.module+el8.9.0+18920+2223d05e@"}}},{"category":"product_version","name":"python3-qrcode-5.3-1.module+el8.10.0+22544+6a7f07c2","product":{"name":"python3-qrcode-5.3-1.module+el8.10.0+22544+6a7f07c2","product_id":"python3-qrcode-5.3-1.module+el8.10.0+22544+6a7f07c2","product_identification_helper":{"purl":"pkg:rpm/suse/python3-qrcode-5.3-1.module+el8.10.0+22544+6a7f07c2@"}}},{"category":"product_version","name":"python3-qrcode-core-5.3-1.module+el8.10.0+22544+6a7f07c2","product":{"name":"python3-qrcode-core-5.3-1.module+el8.10.0+22544+6a7f07c2","product_id":"python3-qrcode-core-5.3-1.module+el8.10.0+22544+6a7f07c2","product_identification_helper":{"purl":"pkg:rpm/suse/python3-qrcode-core-5.3-1.module+el8.10.0+22544+6a7f07c2@"}}},{"category":"product_version","name":"python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e","product":{"name":"python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e","product_id":"python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e","product_identification_helper":{"purl":"pkg:rpm/suse/python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e@"}}},{"category":"product_version","name":"slapi-nis-0.60.0-4.module+el8.10.0+20723+03062ebd","product":{"name":"slapi-nis-0.60.0-4.module+el8.10.0+20723+03062ebd","product_id":"slapi-nis-0.60.0-4.module+el8.10.0+20723+03062ebd","product_identification_helper":{"purl":"pkg:rpm/suse/slapi-nis-0.60.0-4.module+el8.10.0+20723+03062ebd@"}}},{"category":"product_version","name":"softhsm-2.6.0-5.module+el8.9.0+18911+94941f82","product":{"name":"softhsm-2.6.0-5.module+el8.9.0+18911+94941f82","product_id":"softhsm-2.6.0-5.module+el8.9.0+18911+94941f82","product_identification_helper":{"purl":"pkg:rpm/suse/softhsm-2.6.0-5.module+el8.9.0+18911+94941f82@"}}},{"category":"product_version","name":"softhsm-devel-2.6.0-5.module+el8.9.0+18911+94941f82","product":{"name":"softhsm-devel-2.6.0-5.module+el8.9.0+18911+94941f82","product_id":"softhsm-devel-2.6.0-5.module+el8.9.0+18911+94941f82","product_identification_helper":{"purl":"pkg:rpm/suse/softhsm-devel-2.6.0-5.module+el8.9.0+18911+94941f82@"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"bind-dyndb-ldap-11.6-6.module+el8.10.0+23009+91fb337e as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:bind-dyndb-ldap-11.6-6.module+el8.10.0+23009+91fb337e"},"product_reference":"bind-dyndb-ldap-11.6-6.module+el8.10.0+23009+91fb337e","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"custodia-0.6.0-3.module+el8.9.0+18911+94941f82 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:custodia-0.6.0-3.module+el8.9.0+18911+94941f82"},"product_reference":"custodia-0.6.0-3.module+el8.9.0+18911+94941f82","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-client-4.9.13-20.module+el8.10.0+23537+32c82745 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-client-4.9.13-20.module+el8.10.0+23537+32c82745"},"product_reference":"ipa-client-4.9.13-20.module+el8.10.0+23537+32c82745","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-client-common-4.9.13-20.module+el8.10.0+23537+32c82745 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-client-common-4.9.13-20.module+el8.10.0+23537+32c82745"},"product_reference":"ipa-client-common-4.9.13-20.module+el8.10.0+23537+32c82745","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-client-epn-4.9.13-20.module+el8.10.0+23537+32c82745 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-client-epn-4.9.13-20.module+el8.10.0+23537+32c82745"},"product_reference":"ipa-client-epn-4.9.13-20.module+el8.10.0+23537+32c82745","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-client-samba-4.9.13-20.module+el8.10.0+23537+32c82745 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-client-samba-4.9.13-20.module+el8.10.0+23537+32c82745"},"product_reference":"ipa-client-samba-4.9.13-20.module+el8.10.0+23537+32c82745","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-common-4.9.13-20.module+el8.10.0+23537+32c82745 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-common-4.9.13-20.module+el8.10.0+23537+32c82745"},"product_reference":"ipa-common-4.9.13-20.module+el8.10.0+23537+32c82745","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-healthcheck-0.12-6.module+el8.10.0+23403+cc1f9b40 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-healthcheck-0.12-6.module+el8.10.0+23403+cc1f9b40"},"product_reference":"ipa-healthcheck-0.12-6.module+el8.10.0+23403+cc1f9b40","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-healthcheck-core-0.12-6.module+el8.10.0+23404+f6b3454f as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-healthcheck-core-0.12-6.module+el8.10.0+23404+f6b3454f"},"product_reference":"ipa-healthcheck-core-0.12-6.module+el8.10.0+23404+f6b3454f","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-python-compat-4.9.13-20.module+el8.10.0+23537+32c82745 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-python-compat-4.9.13-20.module+el8.10.0+23537+32c82745"},"product_reference":"ipa-python-compat-4.9.13-20.module+el8.10.0+23537+32c82745","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-selinux-4.9.13-20.module+el8.10.0+23537+32c82745 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-selinux-4.9.13-20.module+el8.10.0+23537+32c82745"},"product_reference":"ipa-selinux-4.9.13-20.module+el8.10.0+23537+32c82745","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-server-4.9.13-20.module+el8.10.0+23534+744f3864 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-server-4.9.13-20.module+el8.10.0+23534+744f3864"},"product_reference":"ipa-server-4.9.13-20.module+el8.10.0+23534+744f3864","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-server-common-4.9.13-20.module+el8.10.0+23534+744f3864 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-server-common-4.9.13-20.module+el8.10.0+23534+744f3864"},"product_reference":"ipa-server-common-4.9.13-20.module+el8.10.0+23534+744f3864","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-server-dns-4.9.13-20.module+el8.10.0+23534+744f3864 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-server-dns-4.9.13-20.module+el8.10.0+23534+744f3864"},"product_reference":"ipa-server-dns-4.9.13-20.module+el8.10.0+23534+744f3864","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-server-trust-ad-4.9.13-20.module+el8.10.0+23534+744f3864 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:ipa-server-trust-ad-4.9.13-20.module+el8.10.0+23534+744f3864"},"product_reference":"ipa-server-trust-ad-4.9.13-20.module+el8.10.0+23534+744f3864","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"opendnssec-2.1.7-2.module+el8.10.0+22913+7aa1a207 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:opendnssec-2.1.7-2.module+el8.10.0+22913+7aa1a207"},"product_reference":"opendnssec-2.1.7-2.module+el8.10.0+22913+7aa1a207","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"python3-custodia-0.6.0-3.module+el8.9.0+18911+94941f82 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:python3-custodia-0.6.0-3.module+el8.9.0+18911+94941f82"},"product_reference":"python3-custodia-0.6.0-3.module+el8.9.0+18911+94941f82","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"python3-ipaclient-4.9.13-20.module+el8.10.0+23537+32c82745 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:python3-ipaclient-4.9.13-20.module+el8.10.0+23537+32c82745"},"product_reference":"python3-ipaclient-4.9.13-20.module+el8.10.0+23537+32c82745","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"python3-ipalib-4.9.13-20.module+el8.10.0+23537+32c82745 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:python3-ipalib-4.9.13-20.module+el8.10.0+23537+32c82745"},"product_reference":"python3-ipalib-4.9.13-20.module+el8.10.0+23537+32c82745","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"python3-ipaserver-4.9.13-20.module+el8.10.0+23534+744f3864 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:python3-ipaserver-4.9.13-20.module+el8.10.0+23534+744f3864"},"product_reference":"python3-ipaserver-4.9.13-20.module+el8.10.0+23534+744f3864","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"python3-ipatests-4.9.13-20.module+el8.10.0+23534+744f3864 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:python3-ipatests-4.9.13-20.module+el8.10.0+23534+744f3864"},"product_reference":"python3-ipatests-4.9.13-20.module+el8.10.0+23534+744f3864","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"python3-jwcrypto-0.5.0-2.module+el8.10.0+21692+c9b201bc as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:python3-jwcrypto-0.5.0-2.module+el8.10.0+21692+c9b201bc"},"product_reference":"python3-jwcrypto-0.5.0-2.module+el8.10.0+21692+c9b201bc","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"python3-kdcproxy-0.4-5.module+el8.10.0+22564+098ba143.1 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:python3-kdcproxy-0.4-5.module+el8.10.0+22564+098ba143.1"},"product_reference":"python3-kdcproxy-0.4-5.module+el8.10.0+22564+098ba143.1","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"python3-pyusb-1.0.0-9.1.module+el8.9.0+18920+2223d05e as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:python3-pyusb-1.0.0-9.1.module+el8.9.0+18920+2223d05e"},"product_reference":"python3-pyusb-1.0.0-9.1.module+el8.9.0+18920+2223d05e","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"python3-qrcode-5.3-1.module+el8.10.0+22544+6a7f07c2 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:python3-qrcode-5.3-1.module+el8.10.0+22544+6a7f07c2"},"product_reference":"python3-qrcode-5.3-1.module+el8.10.0+22544+6a7f07c2","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"python3-qrcode-core-5.3-1.module+el8.10.0+22544+6a7f07c2 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:python3-qrcode-core-5.3-1.module+el8.10.0+22544+6a7f07c2"},"product_reference":"python3-qrcode-core-5.3-1.module+el8.10.0+22544+6a7f07c2","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e"},"product_reference":"python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"slapi-nis-0.60.0-4.module+el8.10.0+20723+03062ebd as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:slapi-nis-0.60.0-4.module+el8.10.0+20723+03062ebd"},"product_reference":"slapi-nis-0.60.0-4.module+el8.10.0+20723+03062ebd","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"softhsm-2.6.0-5.module+el8.9.0+18911+94941f82 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:softhsm-2.6.0-5.module+el8.9.0+18911+94941f82"},"product_reference":"softhsm-2.6.0-5.module+el8.9.0+18911+94941f82","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"softhsm-devel-2.6.0-5.module+el8.9.0+18911+94941f82 as component of SUSE Liberty Linux 8","product_id":"SUSE Liberty Linux 8:softhsm-devel-2.6.0-5.module+el8.9.0+18911+94941f82"},"product_reference":"softhsm-devel-2.6.0-5.module+el8.9.0+18911+94941f82","relates_to_product_reference":"SUSE Liberty Linux 8"},{"category":"default_component_of","full_product_name":{"name":"ipa-client-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-client-4.12.2-14.el9_6.5"},"product_reference":"ipa-client-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-client-common-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-client-common-4.12.2-14.el9_6.5"},"product_reference":"ipa-client-common-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-client-encrypted-dns-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-client-encrypted-dns-4.12.2-14.el9_6.5"},"product_reference":"ipa-client-encrypted-dns-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-client-epn-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-client-epn-4.12.2-14.el9_6.5"},"product_reference":"ipa-client-epn-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-client-samba-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-client-samba-4.12.2-14.el9_6.5"},"product_reference":"ipa-client-samba-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-common-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-common-4.12.2-14.el9_6.5"},"product_reference":"ipa-common-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-selinux-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-selinux-4.12.2-14.el9_6.5"},"product_reference":"ipa-selinux-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-selinux-luna-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-selinux-luna-4.12.2-14.el9_6.5"},"product_reference":"ipa-selinux-luna-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-selinux-nfast-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-selinux-nfast-4.12.2-14.el9_6.5"},"product_reference":"ipa-selinux-nfast-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-server-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-server-4.12.2-14.el9_6.5"},"product_reference":"ipa-server-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-server-common-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-server-common-4.12.2-14.el9_6.5"},"product_reference":"ipa-server-common-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-server-dns-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-server-dns-4.12.2-14.el9_6.5"},"product_reference":"ipa-server-dns-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-server-encrypted-dns-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-server-encrypted-dns-4.12.2-14.el9_6.5"},"product_reference":"ipa-server-encrypted-dns-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"ipa-server-trust-ad-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:ipa-server-trust-ad-4.12.2-14.el9_6.5"},"product_reference":"ipa-server-trust-ad-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"python3-ipaclient-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:python3-ipaclient-4.12.2-14.el9_6.5"},"product_reference":"python3-ipaclient-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"python3-ipalib-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:python3-ipalib-4.12.2-14.el9_6.5"},"product_reference":"python3-ipalib-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"python3-ipaserver-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:python3-ipaserver-4.12.2-14.el9_6.5"},"product_reference":"python3-ipaserver-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"},{"category":"default_component_of","full_product_name":{"name":"python3-ipatests-4.12.2-14.el9_6.5 as component of SUSE Liberty Linux 9","product_id":"SUSE Liberty Linux 9:python3-ipatests-4.12.2-14.el9_6.5"},"product_reference":"python3-ipatests-4.12.2-14.el9_6.5","relates_to_product_reference":"SUSE Liberty Linux 9"}]},"vulnerabilities":[{"cve":"CVE-2025-7493","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2025-7493"}],"notes":[{"category":"general","text":"A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.","title":"CVE description"}],"product_status":{"recommended":["SUSE Liberty Linux 8:bind-dyndb-ldap-11.6-6.module+el8.10.0+23009+91fb337e","SUSE Liberty Linux 8:custodia-0.6.0-3.module+el8.9.0+18911+94941f82","SUSE Liberty Linux 8:ipa-client-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-client-common-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-client-epn-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-client-samba-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-common-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-healthcheck-0.12-6.module+el8.10.0+23403+cc1f9b40","SUSE Liberty Linux 8:ipa-healthcheck-core-0.12-6.module+el8.10.0+23404+f6b3454f","SUSE Liberty Linux 8:ipa-python-compat-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-selinux-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-server-4.9.13-20.module+el8.10.0+23534+744f3864","SUSE Liberty Linux 8:ipa-server-common-4.9.13-20.module+el8.10.0+23534+744f3864","SUSE Liberty Linux 8:ipa-server-dns-4.9.13-20.module+el8.10.0+23534+744f3864","SUSE Liberty Linux 8:ipa-server-trust-ad-4.9.13-20.module+el8.10.0+23534+744f3864","SUSE Liberty Linux 8:opendnssec-2.1.7-2.module+el8.10.0+22913+7aa1a207","SUSE Liberty Linux 8:python3-custodia-0.6.0-3.module+el8.9.0+18911+94941f82","SUSE Liberty Linux 8:python3-ipaclient-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:python3-ipalib-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:python3-ipaserver-4.9.13-20.module+el8.10.0+23534+744f3864","SUSE Liberty Linux 8:python3-ipatests-4.9.13-20.module+el8.10.0+23534+744f3864","SUSE Liberty Linux 8:python3-jwcrypto-0.5.0-2.module+el8.10.0+21692+c9b201bc","SUSE Liberty Linux 8:python3-kdcproxy-0.4-5.module+el8.10.0+22564+098ba143.1","SUSE Liberty Linux 8:python3-pyusb-1.0.0-9.1.module+el8.9.0+18920+2223d05e","SUSE Liberty Linux 8:python3-qrcode-5.3-1.module+el8.10.0+22544+6a7f07c2","SUSE Liberty Linux 8:python3-qrcode-core-5.3-1.module+el8.10.0+22544+6a7f07c2","SUSE Liberty Linux 8:python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e","SUSE Liberty Linux 8:slapi-nis-0.60.0-4.module+el8.10.0+20723+03062ebd","SUSE Liberty Linux 8:softhsm-2.6.0-5.module+el8.9.0+18911+94941f82","SUSE Liberty Linux 8:softhsm-devel-2.6.0-5.module+el8.9.0+18911+94941f82","SUSE Liberty Linux 9:ipa-client-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-client-common-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-client-encrypted-dns-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-client-epn-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-client-samba-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-common-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-selinux-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-selinux-luna-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-selinux-nfast-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-server-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-server-common-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-server-dns-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-server-encrypted-dns-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-server-trust-ad-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:python3-ipaclient-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:python3-ipalib-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:python3-ipaserver-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:python3-ipatests-4.12.2-14.el9_6.5"]},"references":[{"category":"external","summary":"CVE-2025-7493","url":"https://www.suse.com/security/cve/CVE-2025-7493"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"Advisory link for ESSA-2025:3454","url":"https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002053.html"},{"category":"external","summary":"Advisory link for ESSA-2025:3455","url":"https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002054.html"},{"category":"external","summary":"Advisory link for RHSA-2025:17084","url":"https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002051.html"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Liberty Linux 8:bind-dyndb-ldap-11.6-6.module+el8.10.0+23009+91fb337e","SUSE Liberty Linux 8:custodia-0.6.0-3.module+el8.9.0+18911+94941f82","SUSE Liberty Linux 8:ipa-client-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-client-common-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-client-epn-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-client-samba-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-common-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-healthcheck-0.12-6.module+el8.10.0+23403+cc1f9b40","SUSE Liberty Linux 8:ipa-healthcheck-core-0.12-6.module+el8.10.0+23404+f6b3454f","SUSE Liberty Linux 8:ipa-python-compat-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-selinux-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:ipa-server-4.9.13-20.module+el8.10.0+23534+744f3864","SUSE Liberty Linux 8:ipa-server-common-4.9.13-20.module+el8.10.0+23534+744f3864","SUSE Liberty Linux 8:ipa-server-dns-4.9.13-20.module+el8.10.0+23534+744f3864","SUSE Liberty Linux 8:ipa-server-trust-ad-4.9.13-20.module+el8.10.0+23534+744f3864","SUSE Liberty Linux 8:opendnssec-2.1.7-2.module+el8.10.0+22913+7aa1a207","SUSE Liberty Linux 8:python3-custodia-0.6.0-3.module+el8.9.0+18911+94941f82","SUSE Liberty Linux 8:python3-ipaclient-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:python3-ipalib-4.9.13-20.module+el8.10.0+23537+32c82745","SUSE Liberty Linux 8:python3-ipaserver-4.9.13-20.module+el8.10.0+23534+744f3864","SUSE Liberty Linux 8:python3-ipatests-4.9.13-20.module+el8.10.0+23534+744f3864","SUSE Liberty Linux 8:python3-jwcrypto-0.5.0-2.module+el8.10.0+21692+c9b201bc","SUSE Liberty Linux 8:python3-kdcproxy-0.4-5.module+el8.10.0+22564+098ba143.1","SUSE Liberty Linux 8:python3-pyusb-1.0.0-9.1.module+el8.9.0+18920+2223d05e","SUSE Liberty Linux 8:python3-qrcode-5.3-1.module+el8.10.0+22544+6a7f07c2","SUSE Liberty Linux 8:python3-qrcode-core-5.3-1.module+el8.10.0+22544+6a7f07c2","SUSE Liberty Linux 8:python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e","SUSE Liberty Linux 8:slapi-nis-0.60.0-4.module+el8.10.0+20723+03062ebd","SUSE Liberty Linux 8:softhsm-2.6.0-5.module+el8.9.0+18911+94941f82","SUSE Liberty Linux 8:softhsm-devel-2.6.0-5.module+el8.9.0+18911+94941f82","SUSE Liberty Linux 9:ipa-client-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-client-common-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-client-encrypted-dns-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-client-epn-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-client-samba-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-common-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-selinux-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-selinux-luna-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-selinux-nfast-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-server-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-server-common-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-server-dns-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-server-encrypted-dns-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:ipa-server-trust-ad-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:python3-ipaclient-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:python3-ipalib-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:python3-ipaserver-4.12.2-14.el9_6.5","SUSE Liberty Linux 9:python3-ipatests-4.12.2-14.el9_6.5"]}],"threats":[{"category":"impact","date":"2025-09-30T16:00:07Z","details":"critical"}],"title":"CVE-2025-7493"}]}