RLSA-2025:21140
RLSA-2025:21140 · Important: idm:DL1 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV (CVE-2025-59088) * python-kdcproxy: Remote DoS via unbounded TCP upstream buffering (CVE-2025-59089) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 8.6 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
bind-dyndb-ldap Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:11.6-6.module+el8.10.0+1960+1ed527b3
Update to 0:11.6-6.module+el8.10.0+1960+1ed527b3
custodia Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:0.6.0-3.module+el8.9.0+1371+ffa84eb9
Update to 0:0.6.0-3.module+el8.9.0+1371+ffa84eb9
ipa Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:4.9.13-20.module+el8.10.0+2067+377bdd64
Update to 0:4.9.13-20.module+el8.10.0+2067+377bdd64
ipa Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:4.9.13-20.module+el8.10.0+2066+d74ade98
Update to 0:4.9.13-20.module+el8.10.0+2066+d74ade98
ipa-healthcheck Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:0.12-6.module+el8.10.0+2053+a0a9dc19
Update to 0:0.12-6.module+el8.10.0+2053+a0a9dc19
ipa-healthcheck Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:0.12-6.module+el8.10.0+2054+aa003774
Update to 0:0.12-6.module+el8.10.0+2054+aa003774
opendnssec Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:2.1.7-2.module+el8.10.0+1960+1ed527b3
Update to 0:2.1.7-2.module+el8.10.0+1960+1ed527b3
python-jwcrypto Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:0.5.0-2.module+el8.10.0+1818+2dfda7a6
Update to 0:0.5.0-2.module+el8.10.0+1818+2dfda7a6
python-jwcrypto Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:0.5.0-2.module+el8.10.0+1819+0aeba2f1
Update to 0:0.5.0-2.module+el8.10.0+1819+0aeba2f1
python-kdcproxy Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:0.4-5.module+el8.9.0+1371+ffa84eb9
Update to 0:0.4-5.module+el8.9.0+1371+ffa84eb9
python-kdcproxy Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:0.4-5.module+el8.10.0+1915+3c70f7d9.1
Update to 0:0.4-5.module+el8.10.0+1915+3c70f7d9.1
python-kdcproxy Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:0.4-5.module+el8.10.0+2094+d7886766.2
Update to 0:0.4-5.module+el8.10.0+2094+d7886766.2
python-qrcode Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:5.3-1.module+el8.10.0+1915+3c70f7d9
Update to 0:5.3-1.module+el8.10.0+1915+3c70f7d9
python-qrcode Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:5.3-1.module+el8.10.0+1916+6bb8cf6b
Update to 0:5.3-1.module+el8.10.0+1916+6bb8cf6b
python-yubico Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:1.3.2-9.1.module+el8.9.0+1372+09f67869
Update to 0:1.3.2-9.1.module+el8.9.0+1372+09f67869
python-yubico Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
Update to 0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
pyusb Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:1.0.0-9.1.module+el8.9.0+1372+09f67869
Update to 0:1.0.0-9.1.module+el8.9.0+1372+09f67869
pyusb Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9
Update to 0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9
slapi-nis Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:0.60.0-4.module+el8.9.0+1573+39ab85f4
Update to 0:0.60.0-4.module+el8.9.0+1573+39ab85f4
softhsm Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
Update to 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9