p PatchFirst

ALSA-2025:21140

ALSA-2025:21140 · Important: idm:DL1 security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV (CVE-2025-59088) * python-kdcproxy: Remote DoS via unbounded TCP upstream buffering (CVE-2025-59089) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind-dyndb-ldap AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 11.6-6.module_el8.10.0+3980+d78e8e90

    Update to 11.6-6.module_el8.10.0+3980+d78e8e90

  • custodia AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.6.0-3.module_el8.6.0+2881+2f24dc92

    Update to 0.6.0-3.module_el8.6.0+2881+2f24dc92

  • ipa-client AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • ipa-client-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • ipa-client-epn AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • ipa-client-samba AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • ipa-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • ipa-healthcheck AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.12-6.module_el8.10.0+4036+84b152d9

    Update to 0.12-6.module_el8.10.0+4036+84b152d9

  • ipa-healthcheck-core AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.12-6.module_el8.10.0+4036+84b152d9

    Update to 0.12-6.module_el8.10.0+4036+84b152d9

  • ipa-python-compat AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • ipa-selinux AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • ipa-server AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • ipa-server-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • ipa-server-dns AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • ipa-server-trust-ad AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • opendnssec AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 2.1.7-2.module_el8.10.0+3980+d78e8e90

    Update to 2.1.7-2.module_el8.10.0+3980+d78e8e90

  • python3-custodia AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.6.0-3.module_el8.6.0+2881+2f24dc92

    Update to 0.6.0-3.module_el8.6.0+2881+2f24dc92

  • python3-ipaclient AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • python3-ipalib AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • python3-ipaserver AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • python3-ipatests AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-20.module_el8.10.0+4050+3b475c71

    Update to 4.9.13-20.module_el8.10.0+4050+3b475c71

  • python3-jwcrypto AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.5.0-2.module_el8.10.0+3844+20e075e5

    Update to 0.5.0-2.module_el8.10.0+3844+20e075e5

  • python3-kdcproxy AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.4-5.module_el8.10.0+4069+1d9eaa78.2

    Update to 0.4-5.module_el8.10.0+4069+1d9eaa78.2

  • python3-pyusb AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1.0.0-9.1.module_el8.7.0+3349+cfeff52e

    Update to 1.0.0-9.1.module_el8.7.0+3349+cfeff52e

Original sources

Check your server →