[CLSA-2025:1763397525] sssd: Fix of CVE-2025-11561
Type:
security
Severity:
Important
Release date:
2025-11-17 16:38:49 UTC
Description:
- CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal
Updated packages:
  • libipa_hbac-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:368fee9aebf9b6334383e821bb8bc74e428dca07190a2060848a2ceae553e13f
  • libipa_hbac-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:c5d0b2ed7b97d9dc48617dd582fd88a943a9416b94e94c9c8fe0cec151f02611
  • libipa_hbac-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:a8cf986c8093316ac1d5da1e1e44c08b2a3c4e31375ee4293067328d0e45e218
  • libipa_hbac-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:eae16f5cea020df38e5126e9ea41943b4b585623e3b862a636fcb985f80dc841
  • libsss_autofs-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:2737a8e2275578b1fe7e5083edb93f8a05ec5e123bfc520c44abe70fd3740efb
  • libsss_certmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:57ea758b3cda4690c19d2cd559abbb65b316750914a5629e9082d358697b94c4
  • libsss_certmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:2162bbaa0e0904c4fd2d1659b2eb9263aab65764913bd96544281540b6ea3cf9
  • libsss_certmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:6a3a2e07ad872d8878cf46aa1611570654c9493e3fe4263cf065bb64824697cc
  • libsss_certmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:304f3df2cb670932455902cb77a06be9ebd146faae7efa49f55587e89bc3aba5
  • libsss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:376b9af04a80557de47b926325006222d55ccad669fd31ef59497952f6bc0a6b
  • libsss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:2ad016c7d528957a786128267865be208a387d9ef51b07746bf9c8998ccf1823
  • libsss_idmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:21fea3aac543a3c7e553e49fec56c14f9b642f13ef7b5cc4e2918319d8d3fbf0
  • libsss_idmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:627079356390241fb5d699f746f9f09db01f74ae8cb43f8b07e78cd30094b112
  • libsss_nss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:56cfaf7b8f71a057c836a393cb31026776dfd9cd8c14d5ac84e734b3cb072a2c
  • libsss_nss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:8877e1110829f9b7c7d0a5a812e2ffb2fd889f1ef4a270af7539650b1bd18953
  • libsss_nss_idmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:74d64d8493bd9aa978d358d29795a9f07da374febad0432c2a22cd3af95ff9e7
  • libsss_nss_idmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:0f08428758ce7127f1885ac9c22664dcd5a9fb8f11c0391751b1597e05afc854
  • libsss_simpleifp-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:72000a89ca763a80aaa32870224cfbbef19d55cf56de1177555bf1d82b6b3b4d
  • libsss_simpleifp-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:6758226768ff235380bd1fb624d09c192fa023a58f89a88e6b5a6bd471856ebe
  • libsss_simpleifp-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:efbf8ebd600b81bd97190493fe928e1d7f7dbfeb5c985033bb39c9cb1e97bd6b
  • libsss_simpleifp-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:332fe5509939b7591c1e48e061b26924034f00d501e4415e8191c66f258a46d4
  • libsss_sudo-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:02163908df7101c3866a6674610fd5e0b91ff9d67c00afa5b4e45a9336496292
  • python-libipa_hbac-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:2f877bf5a2926d2be487b5d270bc3b5a92ff89e0d2a9c3c87115e5b2dd98391c
  • python-libsss_nss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:d27e3a4da4a3b5a7ef60a044f86cd1073bf7df5cd9a715cc209291495b5ad1ca
  • python-sss-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:7f5e8c29a8c8b86042e3d20e8eda8df88f82b0e9a2ad6067d796b56c95e45745
  • python-sss-murmur-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:a7d05aa369056cd48f4686451696f46972e19990809af4a149675eb74f05e5f1
  • python-sssdconfig-1.16.5-10.0.3.el7_9.16.tuxcare.els1.noarch.rpm
    sha:5c4d65cf4bc14eebe1744efcf072173ee15a6148bc761c010a57bedf1a57a131
  • sssd-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:dc86a24c5ce7f26cb3442b4b2a1ab7ed731739d1eb020eb05a304ffd9773226a
  • sssd-ad-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:c8b475a9495a1138432501a220005952f4801c6c0dce0931fdd5366a2658d76d
  • sssd-client-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:d9131a040adb3a84fb4c824e45a9a6e2f589752adb83f3ba627be6011b2548b3
  • sssd-client-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:b1ca0ef5a9966e0399338539c294a3ac14f1fd762b277d574f9810efe2273d94
  • sssd-common-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:e45e68ad0b4b96cdb448507da544c534a10c073814bdb3778d52d22a43f1a560
  • sssd-common-pac-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:432d9da383a636a595337d09a5b45a220b350ad5b2cab8f7574e777bef3e5a95
  • sssd-dbus-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:311df0a4c10165b0654239204d6ba2a4da985ed232f02571f699ab723ca4aecb
  • sssd-ipa-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:4de4918570a76581ce5f32bb55a2dcff8e98f06cc80ca43a3cf2a89d552e18ba
  • sssd-kcm-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:f21b69f051ecb8605af7af951164734ec812745e6405c448b08751333a8bd96d
  • sssd-krb5-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:0fdfdde20e4f69ae1b9df13ea6fb5f302646ab4c45c2a7385d91d00b00517f05
  • sssd-krb5-common-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:8b5fc779c73b0f7384da7f28dd90cfcc69314bda18de186b9ce890af091cc48c
  • sssd-ldap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:82df5c21a9f1a5e9bc37aef04bb74d7e90f53365b793b30d00d18955f936eba0
  • sssd-libwbclient-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:fc7a1ad9906f3f527ca6c1cd13592155e7cf581d2f5564f0e7ac970509dd632b
  • sssd-libwbclient-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:674d7f26a81343de0eda22d358848c13e44c79dc69cca05081bf8c9a6d662900
  • sssd-libwbclient-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:f30cedf3becea762422c919b2df8bb07fc3241b94944bad87662f939c13e0f24
  • sssd-polkit-rules-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:aa1bf409e039582e5ed7fef2ff96bbcc3bc8ae41fdc919d9703dc608c55a343d
  • sssd-proxy-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:d964e263055e793c59d90a55926e1fa3131405626c7b1b901eb84c8ba00207e1
  • sssd-tools-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:0d9c83415b3f4b69d9094cfd3ac3f6927217f02efaf25ccf6cb1064c02325dc7
  • sssd-winbind-idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:cebd4ad047454bc7c8aba4f5490e338352ccf4103fd54f4c5a64d54952c952cf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.