# How to make the upgrade python 3.12.8 working with FreeIPA server

**URL:** <https://forums.rockylinux.org/t/how-to-make-the-upgrade-python-3-12-8-working-with-freeipa-server/20131>\
**Category:** Rocky Linux Help & Support\
**Tags:** rocky-linux-9\
**Created:** [January 15, 2026, 9:38pm UTC](https://forums.rockylinux.org/t/how-to-make-the-upgrade-python-3-12-8-working-with-freeipa-server/20131 "2026-01-15T21:38:46Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![sharon](https://avatars.discourse-cdn.com/v4/letter/s/67e7ee/32.png) [@sharon](https://forums.rockylinux.org/u/sharon)\
**Post date:** [January 15, 2026, 9:38pm UTC](https://forums.rockylinux.org/t/how-to-make-the-upgrade-python-3-12-8-working-with-freeipa-server/20131/1 "2026-01-15T21:38:46Z")

</div>

I have installed FreeIPA server version 4.12.2 onto Rocky Linux 9.7 with default python 3.9.25.

Getting the security scan report that python 3.9 is EOL and should upgraded to python 3.10 and above.

I’ve successfully installed python 3.12.12 using dnf install python 3.12 on the Rocky Linux IPA server but when I made the change to link python → python3.12 so that the security scan should pass on checking the python version. The IPA commands are not working anymore.

what is wrong here and thanks for your help.

​​​

> ****
>

> ****
>

​​​​​​​​​on 3.9.25

---

<div class="post-metadata">

**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\
**Post date:** [January 15, 2026, 9:47pm UTC](https://forums.rockylinux.org/t/how-to-make-the-upgrade-python-3-12-8-working-with-freeipa-server/20131/2 "2026-01-15T21:47:52Z")

</div>

> [@sharon](#):
>
> I’ve successfully installed python 3.12.12 using dnf install python 3.12 on the Rocky Linux IPA server but when I made the change to link python → python3.12 so that the security scan should pass on checking the python version. The IPA commands are not working anymore

Not sure what you’re expecting here. The system python version is 3.9. Upgrading it or attempting to switch to a newer version is simply going to break several tools on your system, not just ipa, but dnf will likely be broken too.

And those are just _two_; there are much more you will break by doing this. You really should switch it back to avoid further problems.

* * *

IMO: Whoever or whatever runs the scans needs to be told that their scans need to understand how RHEL and derivatives work. Python 3.9 is the system python and _will not change_ for the life of EL9.

> **[What is backporting, and how does it apply to RHEL and other Red Hat products?](https://www.redhat.com/en/blog/what-backporting-and-how-does-it-apply-rhel-and-other-red-hat-products)**
>
> Version numbers are important, but aren't always what they seem at first glance. Red Hat, for example, often backports updates to the software we ship in Red Hat Enterprise Linux (RHEL) to maintain the version that we shipped.

> **[When will the Red Hat Enterprise Linux package be updated to the upstream...](https://access.redhat.com/solutions/2074)**
>
> Package provided in Red Hat Enterprise Linux (RHEL) is not latest, when the latest package will be available? OpenSSL package provided in Red Hat Enterprise Linux 4 is old, when new package will be released? The Python version that comes with RHEL...

---

<div class="post-metadata">

**Author:** ![dali](https://avatars.discourse-cdn.com/v4/letter/d/c68b51/32.png) [@dali](https://forums.rockylinux.org/u/dali)\
**Post date:** [January 17, 2026, 6:18pm UTC](https://forums.rockylinux.org/t/how-to-make-the-upgrade-python-3-12-8-working-with-freeipa-server/20131/3 "2026-01-17T18:18:04Z")

</div>

All security scanners I’ve seen have failed to identify that RHEL packages have backported fixes and can be secure even if the version is supposedly “insecure” or EOL. If anyone knows of a security scanner that understands RHEL I would be interested.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [March 18, 2026, 6:19pm UTC](https://forums.rockylinux.org/t/how-to-make-the-upgrade-python-3-12-8-working-with-freeipa-server/20131/4 "2026-03-18T18:19:05Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.