Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 471
Alerts This Week
Warning Icon 1 471

Oracle Linux 10 SSSD Important Cache Traversal Risk ELSA-2026-41937

oracle
Calendar Grey July 22, 2026
Scroller Oracle
Oracle Linux 10 released updates for SSSD addressing important issues including GPO cache path traversal vulnerabilities.
Oracle Linux 10 has received updated RPM packages addressing security vulnerabilities related to sudo LDAP provider and GPO cache path traversal, along with other enhancements.

Summary

[2.12.0-3.0.1.el10_2.1] - Restore default debug level for sss_cache [Orabug: 32810448] [2.12.0-3.1] - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole - Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass

Topics%20covered

Topics Covered

security advisory important Oracle sssd cache traversal authenticated bypass

SRPMs

http://oss.oracle.com/ol10/SRPMS-updates/sssd-2.12.0-3.0.1.el10_2.1.src.rpm

x86_64

libipa_hbac-2.12.0-3.0.1.el10_2.1.x86_64.rpm libsss_autofs-2.12.0-3.0.1.el10_2.1.x86_64.rpm libsss_certmap-2.12.0-3.0.1.el10_2.1.x86_64.rpm libsss_idmap-2.12.0-3.0.1.el10_2.1.x86_64.rpm libsss_nss_idmap-2.12.0-3.0.1.el10_2.1.x86_64.rpm libsss_nss_idmap-devel-2.12.0-3.0.1.el10_2.1.x86_64.rpm libsss_sudo-2.12.0-3.0.1.el10_2.1.x86_64.rpm python3-libipa_hbac-2.12.0-3.0.1.el10_2.1.x86_64.rpm python3-libsss_nss_idmap-2.12.0-3.0.1.el10_2.1.x86_64.rpm python3-sss-2.12.0-3.0.1.el10_2.1.x86_64.rpm python3-sss-murmur-2.12.0-3.0.1.el10_2.1.x86_64.rpm python3-sssdconfig-2.12.0-3.0.1.el10_2.1.noarch.rpm sssd-2.12.0-3.0.1.el10_2.1.x86_64.rpm sssd-ad-2.12.0-3.0.1.el10_2.1.x86_64.rpm sssd-client-2.12.0-3.0.1.el10_2.1.x86_64.rpm sssd-common-2.12.0-3.0.1.el10_2.1.x86_64.rpm sssd-common-pac-2.12.0-3.0.1.el10_2.1.x86_64.rpm sssd-dbus-2.12.0-3.0.1.el10_2.1.x86_64.rpm sssd-idp-2.12.0-3.0.1.el10_2.1.x86_64.rpm sssd-ipa-2.12.0-3.0.1.el10_2.1.x86_64.rpm sssd-kcm-2.12.0-3.0.1.el10_2.1.x86_64.rpm sssd-krb5-2.1...

Read the Full Advisory

aarch64

libipa_hbac-2.12.0-3.0.1.el10_2.1.aarch64.rpm libsss_autofs-2.12.0-3.0.1.el10_2.1.aarch64.rpm libsss_certmap-2.12.0-3.0.1.el10_2.1.aarch64.rpm libsss_idmap-2.12.0-3.0.1.el10_2.1.aarch64.rpm libsss_nss_idmap-2.12.0-3.0.1.el10_2.1.aarch64.rpm libsss_nss_idmap-devel-2.12.0-3.0.1.el10_2.1.aarch64.rpm libsss_sudo-2.12.0-3.0.1.el10_2.1.aarch64.rpm python3-libipa_hbac-2.12.0-3.0.1.el10_2.1.aarch64.rpm python3-libsss_nss_idmap-2.12.0-3.0.1.el10_2.1.aarch64.rpm python3-sss-2.12.0-3.0.1.el10_2.1.aarch64.rpm python3-sss-murmur-2.12.0-3.0.1.el10_2.1.aarch64.rpm python3-sssdconfig-2.12.0-3.0.1.el10_2.1.noarch.rpm sssd-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-ad-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-client-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-common-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-common-pac-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-dbus-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-idp-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-ipa-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-kcm-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-krb5-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-krb5-common-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-ldap-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-nfs-idmap-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-passkey-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-proxy-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-tools-2.12.0-3.0.1.el10_2.1.aarch64.rpm sssd-winbind-idmap-2.12.0-3.0.1.el10_2.1.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2026-14474 CVE-2026-14476

Topics%20covered

Topics Covered

security advisory important Oracle sssd cache traversal authenticated bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.