Upstream release 4.12.4 contains a fix for CVE-2025-4404. More details at https://www.freeipa.org/release-notes/4-12-4.html
This update includes backported fix for CVE-2025-4404 and a fix for a potential crash in a KDB driver.
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2025-6339666d82Please log in to add feedback.
This update has been submitted for testing by abbra.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'passed'.
LGTM!
Correctly sets krbCanonicalName as described in the changelog
CVE properly fixed, tested server + replica installation with no issue
This update has been submitted for stable by bodhi.
Fixes CVE, passes ansible-freeipa tests.
This update has been pushed to stable.