[CLSA-2025:1766075810] sssd: Fix of CVE-2025-11561
Type:
security
Severity:
Important
Release date:
2025-12-18 16:36:54 UTC
Description:
- CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal
Updated packages:
  • libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els1.i686.rpm
    sha:871c1b6f00b324c874af363b139b4229a6bcf0b74fb02562125c10a9be67a212
  • libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:be3d738b4c9bb1d2e75a845c76b3e48d65244ed5bbd86139e7569e509f7bb2ac
  • libipa_hbac-devel-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:a8911e53e5530066ab3dc461fe6b0dc947d3a92ef9cc20021e315aa182637e5f
  • libsss_autofs-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:64df0f10989ffa0a779ed1edbc2ea42d2a96dc48532a1b9d7e5d314d089df8d2
  • libsss_certmap-2.9.6-4.el9_6.2.tuxcare.els1.i686.rpm
    sha:10e9c4a58dd7242afe0bf047e5f11fdee8252a0cfc46e4faf4a3a86f0079d0ed
  • libsss_certmap-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:0c0ce4d4758ec10b44ac984b03f95792c783445cc273ec4be9ac5baad1ddbc34
  • libsss_certmap-devel-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:8fd6cfe44ebad9a245b58a16af3006ecf7a213eb275452c7cb800dd4c005e9cf
  • libsss_idmap-2.9.6-4.el9_6.2.tuxcare.els1.i686.rpm
    sha:9ea26eb0ac1e4beb268aa23ebe2aa9a56a0bc626f7ab14cd2dd3484fb16ec745
  • libsss_idmap-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:76ff0b1e6116082c14ed50ce834a747189aef89f41b5be471963bab7657ee967
  • libsss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:df1b03a7ef5fedd7bf2a33ace684fa3bf984316152b502720d428f613f34dc8e
  • libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els1.i686.rpm
    sha:0fa18eadce5c0e4c1a142e7ad2e3a1a61d8ad7e105b0783bc9645e726e31b18d
  • libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:f28d44cd085567ba3931b24e78a87418cefbab780ed3c99f2e8aab2126c5ac59
  • libsss_nss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els1.i686.rpm
    sha:fcde296bcf137fd4011289844cfeea31c5156c2e476f14bcdad4539fb381bb39
  • libsss_nss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:4493a218b997337ee23db88ec607fb9805045be0faf26b925b779335f786dcaf
  • libsss_simpleifp-2.9.6-4.el9_6.2.tuxcare.els1.i686.rpm
    sha:1e86e212c293cf775f9252541ac86d38c991b6fa04aef1514d9c68a327140c12
  • libsss_simpleifp-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:7994c7ccdf100296be4f8ca19e92b58cbcb043aec9edcecabc7478e28f77eb2e
  • libsss_simpleifp-devel-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:7b3ee12f4609e4a5dc5d87ce86ac68f354da19dd92561244eabd3f89a458f0a9
  • libsss_sudo-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:4681f9b4c0de48cda036b4d0e5f72a00a4a8485f04bffbc4c45ee286f9eac9ce
  • python3-libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:c5af2086359cf881a6b345812bb8e36ba338e05f08fd595acc7bb3fc430857bd
  • python3-libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:ad3b0e359c3a70177888a647aed2aa156f5c0c84cbbfb34a2fa9e7cf09392430
  • python3-sss-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:1b4b3d990a96bba43e86bd0b29bb7eafa6dbaf478eb4d3a0002c9d14581feddd
  • python3-sss-murmur-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:962845982badb1f65e2839aa7554b7ac246d727afde9071ee344ffc048b1d742
  • python3-sssdconfig-2.9.6-4.el9_6.2.tuxcare.els1.noarch.rpm
    sha:10444862d8dfc5279f3c72c43acf9f7bb35de55e0672449229cc69ee56f30a95
  • sssd-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:d2659398235c438e334896d788f29e13ccb645c69bbfdd42fb4883ae52ad40e8
  • sssd-ad-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:096562ec41f9e34e43736d3b2795c41cf0ae580e969e38842b6f48f2584a426f
  • sssd-client-2.9.6-4.el9_6.2.tuxcare.els1.i686.rpm
    sha:7508951a1ca646dbcb529b6d38512ab9ed71242bbf780e35f9379fc1a5fbe62d
  • sssd-client-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:a8bb525fa5dbbacf9c1a1ad6c51aeabb20f8016554c3d8cdb0f8272ae4be39bd
  • sssd-common-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:6d408149a6f9f246956c669adbdeee44958a5f76401ed091cc75f0911398d63b
  • sssd-common-pac-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:4b535a7911dd10709cc2d4c17165b2b41a709fa7c4850f9cf76c62584bd4695f
  • sssd-dbus-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:e7b844780b7a08ca80310fdd5fe9f1c1bcd7f020b754d9a0cb3df208ecf0613e
  • sssd-idp-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:ff1d7ce2d58d95414a6bf1647d03fa338411b32ee42943d996d968eec715e1eb
  • sssd-ipa-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:6b00fadee0074a344e505811026e9f510d257eb23c2809a9a9e184804c637f90
  • sssd-kcm-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:f8d32a1aa9fa223d35af04beee96e7645372775d2195238ec43efef326b4f2b9
  • sssd-krb5-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:2ccb47b86f39cb048d11fd23b7abd2b329c80a304db6a6d1e2f85d8bbd814fd6
  • sssd-krb5-common-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:7b9747f6b5e9dbae38b18ef09719ed4a4b1e729f37905541d72a871708cc4201
  • sssd-ldap-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:295fe0d81155bd89cccb71a7d26b061ab8cdda2aa5ea2e3b3235422c2548c7ca
  • sssd-nfs-idmap-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:8e277fed321d4386ca0b59bd1e2d0eb047f6db25081c206b5d04c89233b9fab1
  • sssd-passkey-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:63accc2fe12feda67621bc979ac2b87b73d30f3cd4bd4a8623675444a632a434
  • sssd-polkit-rules-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:8c8fbf0cc3c755223855c6d883647780a23a8410432b535af76afb6cd951dda4
  • sssd-proxy-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:b299f610b938987676ee4fc3dcc1f639f68b1cf49b4834c0d9092fdd4ee6ea06
  • sssd-tools-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:a60f5072b954a72622327d2db8d75990c50c6c5bb97e1d7f561ef0b02f3350c8
  • sssd-winbind-idmap-2.9.6-4.el9_6.2.tuxcare.els1.x86_64.rpm
    sha:a512373a16c8c66f65f026e8257cf50d297cd12b9c162b02e590ec0f2f81fe8f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.