Every CVE Search/ Get API key

CVE-2025-4404

Freeipa: idm: privilege escalation from host to domain admin in freeipa

9.1 CriticalPublic exploitFix available

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.99%Up 1.9 points since Jun 18, 2025
90%50%10%1%

What each source reports

CVE List Score used 9.1

Freeipa: idm: privilege escalation from host to domain admin in freeipa

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

Record
CVE-2025-4404
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-1220
Updated
2026-11-04
EUVDEUVD-2025-18495 9.1

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

Record
EUVD-2025-18495
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-04
GitHub AdvisoriesGHSA-w66p-wgwc-mqmw 9.1

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The...

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

Record
GHSA-w66p-wgwc-mqmw
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-1220
Updated
2026-11-02
NVD 9.1

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

Record
CVE-2025-4404
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-1220
Updated
2026-11-04
OSVDEBIAN-CVE-2025-4404 9.1

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

Record
DEBIAN-CVE-2025-4404
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-07
OSVRHSA-2025:9184 9.1

Red Hat Security Advisory: ipa security update

Record
RHSA-2025:9184
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
Show 18 moreShow less
OSVRHSA-2025:9185 9.1

Red Hat Security Advisory: ipa security update

Record
RHSA-2025:9185
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:9186 9.1

Red Hat Security Advisory: ipa security update

Record
RHSA-2025:9186
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:9187 9.1

Red Hat Security Advisory: ipa security update

Record
RHSA-2025:9187
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:9188 9.1

Red Hat Security Advisory: idm:DL1 security update

Record
RHSA-2025:9188
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:9189 9.1

Red Hat Security Advisory: ipa security update

Record
RHSA-2025:9189
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:9190 9.1

Red Hat Security Advisory: ipa security update

Record
RHSA-2025:9190
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:9191 9.1

Red Hat Security Advisory: idm:DL1 security update

Record
RHSA-2025:9191
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:9192 9.1

Red Hat Security Advisory: idm:DL1 security update

Record
RHSA-2025:9192
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:9193 9.1

Red Hat Security Advisory: idm:client security update

Record
RHSA-2025:9193
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:9194 9.1

Red Hat Security Advisory: idm:DL1 security update

Record
RHSA-2025:9194
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:9184 9.1

Important: ipa security update

Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:9184
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:9188 9.1

Important: idm:DL1 security update

Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:9188
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:9190 9.1

Important: ipa security update

Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:9190
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-4404 9.1

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

Record
UBUNTU-CVE-2025-4404
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:9184 No score

Important: ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:9184
Updated
2026-11-02
OSVALSA-2025:9188 No score

Important: idm:DL1 security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:9188
Updated
2026-11-02
OSVALSA-2025:9190 No score

Important: ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:9190
Updated
2026-11-02
OSV No score

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

Record
CVE-2025-4404
Updated
2026-11-02

Affected products

Show 3 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
ipa-client
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
ipa-client-common
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
ipa-client-encrypted-dns
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
ipa-client-epn
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
ipa-client-samba
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
ipa-common
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
ipa-selinux
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
ipa-selinux-luna
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
ipa-selinux-nfast
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
ipa-server
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
ipa-server-common
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
ipa-server-dns
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
ipa-server-encrypted-dns
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
ipa-server-trust-ad
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
python3-ipaclient
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
python3-ipalib
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
python3-ipaserver
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
python3-ipatests
AlmaLinux:9
 before 4.12.2-14.el9_6.1
4.12.2-14.el9_6.1
bind-dyndb-ldap
AlmaLinux:8
 before 11.6-6.module_el8.10.0+3980+d78e8e90
11.6-6.module_el8.10.0+3980+d78e8e90
custodia
AlmaLinux:8
 before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
ipa-client
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
ipa-client-common
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
ipa-client-epn
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
ipa-client-samba
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
ipa-common
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
ipa-healthcheck
AlmaLinux:8
 before 0.12-5.module_el8.10.0+3980+d78e8e90
0.12-5.module_el8.10.0+3980+d78e8e90
ipa-healthcheck-core
AlmaLinux:8
 before 0.12-5.module_el8.10.0+3980+d78e8e90
0.12-5.module_el8.10.0+3980+d78e8e90
ipa-python-compat
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
ipa-selinux
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
ipa-server
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
ipa-server-common
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
ipa-server-dns
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
ipa-server-trust-ad
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
opendnssec
AlmaLinux:8
 before 2.1.7-2.module_el8.10.0+3980+d78e8e90
2.1.7-2.module_el8.10.0+3980+d78e8e90
python3-custodia
AlmaLinux:8
 before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
python3-ipaclient
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
python3-ipalib
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
python3-ipaserver
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
python3-ipatests
AlmaLinux:8
 before 4.9.13-18.module_el8.10.0+4018+32aeeb28
4.9.13-18.module_el8.10.0+4018+32aeeb28
python3-jwcrypto
AlmaLinux:8
 before 0.5.0-2.module_el8.10.0+3844+20e075e5
0.5.0-2.module_el8.10.0+3844+20e075e5
python3-kdcproxy
AlmaLinux:8
 before 0.4-5.module_el8.10.0+3942+63b39a46.1
0.4-5.module_el8.10.0+3942+63b39a46.1
python3-pyusb
AlmaLinux:8
 before 1.0.0-9.1.module_el8.7.0+3349+cfeff52e
1.0.0-9.1.module_el8.7.0+3349+cfeff52e
python3-qrcode
AlmaLinux:8
 before 5.3-1.module_el8.10.0+3942+63b39a46
5.3-1.module_el8.10.0+3942+63b39a46
python3-qrcode-core
AlmaLinux:8
 before 5.3-1.module_el8.10.0+3942+63b39a46
5.3-1.module_el8.10.0+3942+63b39a46
python3-yubico
AlmaLinux:8
 before 1.3.2-9.1.module_el8.7.0+3349+cfeff52e
1.3.2-9.1.module_el8.7.0+3349+cfeff52e
slapi-nis
AlmaLinux:8
 before 0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1
0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1
softhsm
AlmaLinux:8
 before 2.6.0-5.module_el8.6.0+2881+2f24dc92
2.6.0-5.module_el8.6.0+2881+2f24dc92
softhsm
AlmaLinux:8
 before 2.6.0-5.module_el8.6.0+3031+2f24dc92
2.6.0-5.module_el8.6.0+3031+2f24dc92
softhsm-devel
AlmaLinux:8
 before 2.6.0-5.module_el8.6.0+2881+2f24dc92
2.6.0-5.module_el8.6.0+2881+2f24dc92
softhsm-devel
AlmaLinux:8
 before 2.6.0-5.module_el8.6.0+3031+2f24dc92
2.6.0-5.module_el8.6.0+3031+2f24dc92
ipa-client-common
AlmaLinux:10
 before 4.12.2-15.el10_0.1
4.12.2-15.el10_0.1
ipa-common
AlmaLinux:10
 before 4.12.2-15.el10_0.1
4.12.2-15.el10_0.1
ipa-selinux
AlmaLinux:10
 before 4.12.2-15.el10_0.1
4.12.2-15.el10_0.1
ipa-selinux-luna
AlmaLinux:10
 before 4.12.2-15.el10_0.1
4.12.2-15.el10_0.1
ipa-selinux-nfast
AlmaLinux:10
 before 4.12.2-15.el10_0.1
4.12.2-15.el10_0.1
ipa-server-common
AlmaLinux:10
 before 4.12.2-15.el10_0.1
4.12.2-15.el10_0.1
ipa-server-dns
AlmaLinux:10
 before 4.12.2-15.el10_0.1
4.12.2-15.el10_0.1
python3-ipaclient
AlmaLinux:10
 before 4.12.2-15.el10_0.1
4.12.2-15.el10_0.1
python3-ipalib
AlmaLinux:10
 before 4.12.2-15.el10_0.1
4.12.2-15.el10_0.1
python3-ipaserver
AlmaLinux:10
 before 4.12.2-15.el10_0.1
4.12.2-15.el10_0.1
python3-ipatests
AlmaLinux:10
 before 4.12.2-15.el10_0.1
4.12.2-15.el10_0.1
freeipa
Debian:12
 All versions, plus listed versions
4.10.1+dfsg1-1+exp14.10.1-1+exp14.10.2-14.10.2-24.10.2-2+exp1
Show 14 moreShow less
4.11.1-14.11.1-1+exp14.11.1-24.11.1-2+exp14.11.1-2.14.12.2-14.12.2-24.12.2-34.12.4-14.12.4-24.13.1-14.9.11-14.9.11-1+exp14.9.11-2
 None known
freeipa
Debian:13
 before 4.12.4-1
4.12.4-1
freeipa
Debian:14
 before 4.12.4-1
4.12.4-1
ipa
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-client
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-client-common
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-client-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-client-encrypted-dns
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-client-epn
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-client-samba
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-common
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-selinux
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-selinux-luna
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-selinux-nfast
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-server
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-server-common
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-server-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-server-dns
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-server-encrypted-dns
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-server-trust-ad
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa-server-trust-ad-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
python3-ipaclient
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
python3-ipalib
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
python3-ipaserver
Red Hat:enterprise_linux:9::appstream
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
python3-ipatests
Red Hat:enterprise_linux:9::crb
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
ipa
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-client
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-client-common
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-client-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-client-epn
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-client-samba
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-common
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-debugsource
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-selinux
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-server
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-server-common
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-server-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-server-dns
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-server-trust-ad
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa-server-trust-ad-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
python3-ipaclient
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
python3-ipalib
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
python3-ipaserver
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.9.8-11.el9_0.4
0:4.9.8-11.el9_0.4
ipa
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-client
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-client-common
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-client-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-client-epn
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-client-samba
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-common
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-selinux
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-server
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-server-common
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-server-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-server-dns
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-server-trust-ad
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa-server-trust-ad-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
python3-ipaclient
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
python3-ipalib
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
python3-ipaserver
Red Hat:rhel_eus:9.4::appstream
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
python3-ipatests
Red Hat:rhel_eus:9.4::crb
 before 0:4.11.0-15.el9_4.5
0:4.11.0-15.el9_4.5
ipa
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-client
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-client-common
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-client-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-client-epn
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-client-samba
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-common
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-debugsource
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-selinux
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-server
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-server-common
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-server-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-server-dns
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-server-trust-ad
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
ipa-server-trust-ad-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
python3-ipaclient
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
python3-ipalib
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
python3-ipaserver
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.10.1-12.el9_2.4
0:4.10.1-12.el9_2.4
bind-dyndb-ldap
Red Hat:enterprise_linux:8::appstream
 before 0:11.6-6.module+el8.10.0+23009+91fb337e
0:11.6-6.module+el8.10.0+23009+91fb337e
bind-dyndb-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:11.6-6.module+el8.10.0+23009+91fb337e
0:11.6-6.module+el8.10.0+23009+91fb337e
bind-dyndb-ldap-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:11.6-6.module+el8.10.0+23009+91fb337e
0:11.6-6.module+el8.10.0+23009+91fb337e
custodia
Red Hat:enterprise_linux:8::appstream
 before 0:0.6.0-3.module+el8.9.0+18911+94941f82
0:0.6.0-3.module+el8.9.0+18911+94941f82
ipa
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
ipa-client
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
ipa-client-common
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
ipa-client-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
ipa-client-epn
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
ipa-client-samba
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
ipa-common
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
ipa-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
ipa-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
ipa-healthcheck
Red Hat:enterprise_linux:8::appstream
 before 0:0.12-5.module+el8.10.0+22922+d6132b45
0:0.12-5.module+el8.10.0+22922+d6132b45
ipa-healthcheck-core
Red Hat:enterprise_linux:8::appstream
 before 0:0.12-5.module+el8.10.0+22922+d6132b45
0:0.12-5.module+el8.10.0+22922+d6132b45
ipa-python-compat
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
ipa-selinux
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
ipa-server
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
ipa-server-common
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
ipa-server-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
ipa-server-dns
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
ipa-server-trust-ad
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
ipa-server-trust-ad-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
opendnssec
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.7-2.module+el8.10.0+22913+7aa1a207
0:2.1.7-2.module+el8.10.0+22913+7aa1a207
opendnssec-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.7-2.module+el8.10.0+22913+7aa1a207
0:2.1.7-2.module+el8.10.0+22913+7aa1a207
opendnssec-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.7-2.module+el8.10.0+22913+7aa1a207
0:2.1.7-2.module+el8.10.0+22913+7aa1a207
python-jwcrypto
Red Hat:enterprise_linux:8::appstream
 before 0:0.5.0-2.module+el8.10.0+21692+c9b201bc
0:0.5.0-2.module+el8.10.0+21692+c9b201bc
python-kdcproxy
Red Hat:enterprise_linux:8::appstream
 before 0:0.4-5.module+el8.10.0+22564+098ba143.1
0:0.4-5.module+el8.10.0+22564+098ba143.1
python-qrcode
Red Hat:enterprise_linux:8::appstream
 before 0:5.3-1.module+el8.10.0+22544+6a7f07c2
0:5.3-1.module+el8.10.0+22544+6a7f07c2
python-yubico
Red Hat:enterprise_linux:8::appstream
 before 0:1.3.2-9.1.module+el8.9.0+18920+2223d05e
0:1.3.2-9.1.module+el8.9.0+18920+2223d05e
python3-custodia
Red Hat:enterprise_linux:8::appstream
 before 0:0.6.0-3.module+el8.9.0+18911+94941f82
0:0.6.0-3.module+el8.9.0+18911+94941f82
python3-ipaclient
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
python3-ipalib
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23183+85190b0c
0:4.9.13-18.module+el8.10.0+23183+85190b0c
python3-ipaserver
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
python3-ipatests
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
0:4.9.13-18.module+el8.10.0+23182+cbb72bb2
python3-jwcrypto
Red Hat:enterprise_linux:8::appstream
 before 0:0.5.0-2.module+el8.10.0+21692+c9b201bc
0:0.5.0-2.module+el8.10.0+21692+c9b201bc
python3-kdcproxy
Red Hat:enterprise_linux:8::appstream
 before 0:0.4-5.module+el8.10.0+22564+098ba143.1
0:0.4-5.module+el8.10.0+22564+098ba143.1
python3-pyusb
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.0-9.1.module+el8.9.0+18920+2223d05e
0:1.0.0-9.1.module+el8.9.0+18920+2223d05e
python3-qrcode
Red Hat:enterprise_linux:8::appstream
 before 0:5.3-1.module+el8.10.0+22544+6a7f07c2
0:5.3-1.module+el8.10.0+22544+6a7f07c2
python3-qrcode-core
Red Hat:enterprise_linux:8::appstream
 before 0:5.3-1.module+el8.10.0+22544+6a7f07c2
0:5.3-1.module+el8.10.0+22544+6a7f07c2
python3-yubico
Red Hat:enterprise_linux:8::appstream
 before 0:1.3.2-9.1.module+el8.9.0+18920+2223d05e
0:1.3.2-9.1.module+el8.9.0+18920+2223d05e
pyusb
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.0-9.1.module+el8.9.0+18920+2223d05e
0:1.0.0-9.1.module+el8.9.0+18920+2223d05e
slapi-nis
Red Hat:enterprise_linux:8::appstream
 before 0:0.60.0-4.module+el8.10.0+20723+03062ebd
0:0.60.0-4.module+el8.10.0+20723+03062ebd
slapi-nis-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:0.60.0-4.module+el8.10.0+20723+03062ebd
0:0.60.0-4.module+el8.10.0+20723+03062ebd
slapi-nis-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:0.60.0-4.module+el8.10.0+20723+03062ebd
0:0.60.0-4.module+el8.10.0+20723+03062ebd
softhsm
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-5.module+el8.9.0+18911+94941f82
0:2.6.0-5.module+el8.9.0+18911+94941f82
softhsm-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-5.module+el8.9.0+18911+94941f82
0:2.6.0-5.module+el8.9.0+18911+94941f82
softhsm-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-5.module+el8.9.0+18911+94941f82
0:2.6.0-5.module+el8.9.0+18911+94941f82
softhsm-devel
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-5.module+el8.9.0+18911+94941f82
0:2.6.0-5.module+el8.9.0+18911+94941f82
ipa
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
ipa-client
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
ipa-client-common
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
ipa-common
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
ipa-debuginfo
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
ipa-python-compat
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
ipa-server
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
ipa-server-common
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
ipa-server-dns
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
ipa-server-trust-ad
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
python2-ipaclient
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
python2-ipalib
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
python2-ipaserver
Red Hat:rhel_els:7
 before 0:4.6.8-5.el7_9.18
0:4.6.8-5.el7_9.18
ipa
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-client
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-client-common
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-client-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-client-encrypted-dns
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-client-epn
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-client-samba
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-common
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-debugsource
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-selinux
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-selinux-luna
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-selinux-nfast
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-server
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-server-common
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-server-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-server-dns
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-server-encrypted-dns
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-server-trust-ad
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
ipa-server-trust-ad-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
python3-ipaclient
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
python3-ipalib
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
python3-ipaserver
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
python3-ipatests
Red Hat:enterprise_linux:10.0
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
bind-dyndb-ldap
Red Hat:rhel_e4s:8.8::appstream
 before 0:11.6-4.module+el8.8.0+21675+157fa23b.2
0:11.6-4.module+el8.8.0+21675+157fa23b.2
bind-dyndb-ldap-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:11.6-4.module+el8.8.0+21675+157fa23b.2
0:11.6-4.module+el8.8.0+21675+157fa23b.2
bind-dyndb-ldap-debugsource
Red Hat:rhel_e4s:8.8::appstream
 before 0:11.6-4.module+el8.8.0+21675+157fa23b.2
0:11.6-4.module+el8.8.0+21675+157fa23b.2
custodia
Red Hat:rhel_e4s:8.8::appstream
 before 0:0.6.0-3.module+el8.1.0+4098+f286395e
0:0.6.0-3.module+el8.1.0+4098+f286395e
ipa
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
ipa-client
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
ipa-client-common
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
ipa-client-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
ipa-client-epn
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
ipa-client-samba
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
ipa-common
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
ipa-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
ipa-debugsource
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
ipa-healthcheck
Red Hat:rhel_e4s:8.8::appstream
 before 0:0.12-1.module+el8.8.0+17583+8c783c60
0:0.12-1.module+el8.8.0+17583+8c783c60
ipa-healthcheck-core
Red Hat:rhel_e4s:8.8::appstream
 before 0:0.12-1.module+el8.8.0+17583+8c783c60
0:0.12-1.module+el8.8.0+17583+8c783c60
ipa-python-compat
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
ipa-selinux
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
ipa-server
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
ipa-server-common
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
ipa-server-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
ipa-server-dns
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
ipa-server-trust-ad
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
ipa-server-trust-ad-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
opendnssec
Red Hat:rhel_e4s:8.8::appstream
 before 0:2.1.7-1.module+el8.4.0+9007+5084bdd8
0:2.1.7-1.module+el8.4.0+9007+5084bdd8
opendnssec-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:2.1.7-1.module+el8.4.0+9007+5084bdd8
0:2.1.7-1.module+el8.4.0+9007+5084bdd8
opendnssec-debugsource
Red Hat:rhel_e4s:8.8::appstream
 before 0:2.1.7-1.module+el8.4.0+9007+5084bdd8
0:2.1.7-1.module+el8.4.0+9007+5084bdd8
python-jwcrypto
Red Hat:rhel_e4s:8.8::appstream
 before 0:0.5.0-1.1.module+el8.7.0+15888+685a878f
0:0.5.0-1.1.module+el8.7.0+15888+685a878f
python-kdcproxy
Red Hat:rhel_e4s:8.8::appstream
 before 0:0.4-5.module+el8.2.0+4691+a05b2456
0:0.4-5.module+el8.2.0+4691+a05b2456
python-qrcode
Red Hat:rhel_e4s:8.8::appstream
 before 0:5.1-12.module+el8.1.0+4107+4a66eb87
0:5.1-12.module+el8.1.0+4107+4a66eb87
python-yubico
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5
0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5
python3-custodia
Red Hat:rhel_e4s:8.8::appstream
 before 0:0.6.0-3.module+el8.1.0+4098+f286395e
0:0.6.0-3.module+el8.1.0+4098+f286395e
python3-ipaclient
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
python3-ipalib
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23199+fd568941.2
0:4.9.11-11.module+el8.8.0+23199+fd568941.2
python3-ipaserver
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
python3-ipatests
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
0:4.9.11-11.module+el8.8.0+23198+ce79fbfa.2
python3-jwcrypto
Red Hat:rhel_e4s:8.8::appstream
 before 0:0.5.0-1.1.module+el8.7.0+15888+685a878f
0:0.5.0-1.1.module+el8.7.0+15888+685a878f
python3-kdcproxy
Red Hat:rhel_e4s:8.8::appstream
 before 0:0.4-5.module+el8.2.0+4691+a05b2456
0:0.4-5.module+el8.2.0+4691+a05b2456
python3-pyusb
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5
0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5
ipa
Rocky Linux:9
 before 0:4.12.2-14.el9_6.1
0:4.12.2-14.el9_6.1
bind-dyndb-ldap
Rocky Linux:8
 before 0:11.6-6.module+el8.10.0+1960+1ed527b3
0:11.6-6.module+el8.10.0+1960+1ed527b3
custodia
Rocky Linux:8
 before 0:0.6.0-3.module+el8.9.0+1371+ffa84eb9
0:0.6.0-3.module+el8.9.0+1371+ffa84eb9
ipa
Rocky Linux:8
 before 0:4.9.13-18.module+el8.10.0+2000+979bf254
0:4.9.13-18.module+el8.10.0+2000+979bf254
ipa
Rocky Linux:8
 before 0:4.9.13-18.module+el8.10.0+1999+6893b0f2
0:4.9.13-18.module+el8.10.0+1999+6893b0f2
ipa-healthcheck
Rocky Linux:8
 before 0:0.12-5.module+el8.10.0+1959+be225f41
0:0.12-5.module+el8.10.0+1959+be225f41
ipa-healthcheck
Rocky Linux:8
 before 0:0.12-5.module+el8.10.0+1960+1ed527b3
0:0.12-5.module+el8.10.0+1960+1ed527b3
opendnssec
Rocky Linux:8
 before 0:2.1.7-2.module+el8.10.0+1960+1ed527b3
0:2.1.7-2.module+el8.10.0+1960+1ed527b3
python-jwcrypto
Rocky Linux:8
 before 0:0.5.0-2.module+el8.10.0+1818+2dfda7a6
0:0.5.0-2.module+el8.10.0+1818+2dfda7a6
python-jwcrypto
Rocky Linux:8
 before 0:0.5.0-2.module+el8.10.0+1819+0aeba2f1
0:0.5.0-2.module+el8.10.0+1819+0aeba2f1
python-kdcproxy
Rocky Linux:8
 before 0:0.4-5.module+el8.10.0+1915+3c70f7d9.1
0:0.4-5.module+el8.10.0+1915+3c70f7d9.1
python-kdcproxy
Rocky Linux:8
 before 0:0.4-5.module+el8.9.0+1371+ffa84eb9
0:0.4-5.module+el8.9.0+1371+ffa84eb9
python-qrcode
Rocky Linux:8
 before 0:5.3-1.module+el8.10.0+1915+3c70f7d9
0:5.3-1.module+el8.10.0+1915+3c70f7d9
python-qrcode
Rocky Linux:8
 before 0:5.3-1.module+el8.10.0+1916+6bb8cf6b
0:5.3-1.module+el8.10.0+1916+6bb8cf6b
python-yubico
Rocky Linux:8
 before 0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
python-yubico
Rocky Linux:8
 before 0:1.3.2-9.1.module+el8.9.0+1372+09f67869
0:1.3.2-9.1.module+el8.9.0+1372+09f67869
pyusb
Rocky Linux:8
 before 0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9
0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9
pyusb
Rocky Linux:8
 before 0:1.0.0-9.1.module+el8.9.0+1372+09f67869
0:1.0.0-9.1.module+el8.9.0+1372+09f67869
slapi-nis
Rocky Linux:8
 before 0:0.60.0-4.module+el8.9.0+1573+39ab85f4
0:0.60.0-4.module+el8.9.0+1573+39ab85f4
softhsm
Rocky Linux:8
 before 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
ipa
Rocky Linux:10
 before 0:4.12.2-15.el10_0.1
0:4.12.2-15.el10_0.1
freeipa
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.2.1-0ubuntu13.3.4-0ubuntu13.3.4-0ubuntu23.3.4-0ubuntu33.3.4-0ubuntu3.13.3.4-0ubuntu3.1+esm1
 None known
freeipa
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.1.4-14.3.1-0ubuntu14.3.1-0ubuntu1+esm1
 None known
freeipa
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.4.4-3ubuntu14.4.4-44.7.0~pre1+git20180411-2ubuntu14.7.0~pre1+git20180411-2ubuntu2
 None known
freeipa
Ubuntu:20.04:LTS
 All versions, plus listed versions
4.8.1-2ubuntu14.8.3-14.8.6-1ubuntu2
 None known
freeipa
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.8.6-1ubuntu64.8.6-1ubuntu84.8.6-1ubuntu94.9.8-1
 None known
freeipa
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.10.2-14.10.2-24.10.2-2ubuntu34.11.1-14.11.1-2
 None known
freeipa
Ubuntu:25.10
 All versions, plus listed versions
4.12.2-34.12.4-1
 None known
freeipa
Ubuntu:26.10
 All versions, plus listed versions
4.13.1-14.13.1-1build1
 None known
freeipa
Ubuntu:26.04:LTS
 All versions, plus listed versions
4.12.4-14.12.4-24.13.1-1
 None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubIm10n/CVE-2025-4404-POC2025-08-09

History

History
RecordedChangedSources
affectedEUVD, NVD, OSV
factsCVE List
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-4404 is a critical vulnerability (CVSS 9.1) in Red Hat Enterprise Linux 10, published June 17, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.99%, the 80th percentile. Fixed in ipa-client 4.12.2-14.el9_6.1.

References

Show 34 moreShow less
This page doesn't list everything

Left out here: 304 package rows. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open