[CLSA-2025:1763371827] sssd: Fix of CVE-2025-11561
Type:
security
Severity:
Important
Release date:
2025-11-17 09:30:31 UTC
Description:
- CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal
Updated packages:
  • libipa_hbac-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:2611561a40ea303ebedc6915a7c71ae2f33a950e836e31959ee773f78f6a86cb
  • libipa_hbac-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:eb2d335477c6f8114594312fe4e668995a0faf583ea2bdc35d4787ce33a36ac8
  • libipa_hbac-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:f5ef4b4d7a9c1319df151bed14bd9954caa23121be51d0a6941dff6002d6ccb3
  • libipa_hbac-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:10ca0aea6b74e092b27ddd0002a386eaff80cac4f9e9acc44df62b6ba1bee162
  • libsss_autofs-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:fb2736f0a3996a0fa78329c45d5364688638bf185653d3ea390fa21aedf688fc
  • libsss_certmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:5acfde56dd615deaf4430814f41731a6356c2c25254628fc156fbfdcad01b575
  • libsss_certmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:24cd60498899c0142cd9d22ab3e395e0534f964cbf274e9d3e100cb361bc3043
  • libsss_certmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:9954f6cab2ad1f147a7c83a11bc466c4991221e7f0954d68af797e10d057d7dc
  • libsss_certmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:430572f74505e6130d5452e97d70b4f38b6ea24972f4174ee960b19ceaccdd55
  • libsss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:69090bdb191a8a158d45ea86c79b95eac8e6f81681067c1fbd3c3d63c0573152
  • libsss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:76094e5ddf68cd20e2ba3eedac69e2309ee7d7f36a8582b877b6f75f90fe7b7a
  • libsss_idmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:491b86352de9215c50480fa1ca9d7ddbaf6a005237c040c2b1523e43dbe32b84
  • libsss_idmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:b82f94013d1e709acb0075cfdddd867a3d78b5309b84c28db22d3ecff27fb904
  • libsss_nss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:433b9b421673b58f55d069327b801edc9f59b77b06c6e33bb94a0e452441f07e
  • libsss_nss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:3c35a35a03a94ed26f07a466ed5abe48edd763af5cc17a44eeac8764afdf6bf9
  • libsss_nss_idmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:ed1b1cb64bc848bc4eabdd1a0991d059a16d00e5c7d4ed04572666dc25252b6e
  • libsss_nss_idmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:a46efae62729e52d143051292ab4564a5e34db5a77dc2ceb66a8e2cfa7672ca3
  • libsss_simpleifp-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:4de0869aaf28eba2348354c2dd665807bbac2a1b6943031b26ec35afbb9265b9
  • libsss_simpleifp-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:bc5745f3d9abcb10a78446ba9e88a63e0337e10df572a2733cd2a6a619698161
  • libsss_simpleifp-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:7801cee735287494099286930a6db272a38aa75ef448508b41dafa03d97cdbd4
  • libsss_simpleifp-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:64c64224372fb21372eab8a5ad8798170d43421fba36297af9d62a56247bf3d3
  • libsss_sudo-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:197f5256366455a1980042b9d75ed7f65d473a00147844516164826f02b4e356
  • python-libipa_hbac-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:573e0df46db1a16c10edc5110181e8c0e5fbe5a4960a2621b22cbe7694b032ff
  • python-libsss_nss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:02be8ee8cb2803f2eca9c775a2ee7ab50e8d3505b6bc6656151cc30f81be20f3
  • python-sss-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:b14b0a2c66bb2e28e9516b816c5c15588c6fb88fc06fa6e92e367b5480a0d153
  • python-sss-murmur-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:b958eed67d85785969c35961b36b7bddb1a857ae15f8d5677646cbf9bc9b8e48
  • python-sssdconfig-1.16.5-10.0.3.el7_9.16.tuxcare.els1.noarch.rpm
    sha:c72177e02506a827acfb7085e138f8a3e95f3f4dca17c732f0bff665e3613253
  • sssd-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:549248a0a0822eed17cb4256a06d08a9a8ec0d2a3aa8ed2c909b3640a0e93889
  • sssd-ad-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:b9e7ad2134df9344c07c5f8416c92feda395b7db0493a92676730d690392824e
  • sssd-client-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:b2a45da754a199c73595b41287a7c4d2a1faf377a36babd81d081f821607040e
  • sssd-client-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:d5709659f2a0d103932b3bd80278572cc0588352399d8dcf3710ef858edd9267
  • sssd-common-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:b541bcad9f1916b8638c17c3e7d7fa676891779b8c35e6146e885091422ff265
  • sssd-common-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:7771c677e8174462657d0021930b2e1862b42f5458fbab6a029de44957a8cbfc
  • sssd-common-pac-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:6e5e640b4e9eb22a681491ee5cf934130bff65b1c3ddeab176960734a9c2674f
  • sssd-dbus-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:e2d1c06ecf41a61883c8f9ba64868ac2e23df4270a20eb02c24c729e133a9d67
  • sssd-ipa-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:d8562e2f878dcb0cfe68715017118c34f41fd4fc43a5d1f39ad552cc7fc80ea7
  • sssd-kcm-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:e1d49ea6996f284a0d4df4ed3900f3893d6f9c9fc681a4c14fd2cf9939fe7e0f
  • sssd-krb5-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:f86ce7d4cf92db6ccdff3f195e648759beda93c157643e8418bc3a3989b39fb3
  • sssd-krb5-common-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:43be5107c0999f24b76bc3415b995d8e1f4acafbe6c97634ba60916720478212
  • sssd-ldap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:4261a7fbad71e8f651bb08c8ba0d168cf8a196d71bae3035e0cb6476460e94da
  • sssd-libwbclient-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:c61546c8ec23adebd3076c55202779d10b6eec0f9069e8921e99fa9eab74ade5
  • sssd-libwbclient-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.i686.rpm
    sha:a52a498e15f959ce4abd1471a35e0187e83c506143e706889e12ce4e6aec3eae
  • sssd-libwbclient-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:2ab0154a4a0a5d957b903f5600f70494cfd473c4979825030382db7fd299f174
  • sssd-polkit-rules-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:7454cdfbd257a2fbea5d75d47166e43004c2505a84400d9ff55454382499a231
  • sssd-proxy-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:0487d16666442b14c3245db54a6cd7348290fb86f3da044b6ccafaa3d7ae21c2
  • sssd-tools-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:76fab7d3837ae081c435dd0e8a04915a98f08a99b22ad424e2651aff16bd14a1
  • sssd-winbind-idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els1.x86_64.rpm
    sha:294b989de5de4ea4a987884c077150b45c2c58b69ae44456435c0f9710d07ecd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.