Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 735
Alerts This Week
Warning Icon 1 735

Oracle Linux 8 ELSA-2025-19610 sssd Important Privilege Escalation Fix

oracle
Calendar Grey November 6, 2025
Oracle Linux Logo Esm H88
Oracle Linux 8 sssd update addresses privilege escalation issues. Key security advancements for system integrity.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[2.9.4-5.0.2.3] - Missing ntohs to service port [Orabug: 37389651] - Restore default debug level for sss_cache [Orabug: 32810448] [2.9.4-5.3] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] [2.9.4-5.2] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] [2.9.4-5.1] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHE...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security issue privilege escalation important sssd Oracle Linux

SRPMs

http://oss.oracle.com/ol8/SRPMS-updates/sssd-2.9.4-5.0.2.el8_10.3.src.rpm

x86_64

libipa_hbac-2.9.4-5.0.2.el8_10.3.i686.rpm libipa_hbac-2.9.4-5.0.2.el8_10.3.x86_64.rpm libsss_autofs-2.9.4-5.0.2.el8_10.3.x86_64.rpm libsss_certmap-2.9.4-5.0.2.el8_10.3.i686.rpm libsss_certmap-2.9.4-5.0.2.el8_10.3.x86_64.rpm libsss_idmap-2.9.4-5.0.2.el8_10.3.i686.rpm libsss_idmap-2.9.4-5.0.2.el8_10.3.x86_64.rpm libsss_nss_idmap-2.9.4-5.0.2.el8_10.3.i686.rpm libsss_nss_idmap-2.9.4-5.0.2.el8_10.3.x86_64.rpm libsss_nss_idmap-devel-2.9.4-5.0.2.el8_10.3.i686.rpm libsss_nss_idmap-devel-2.9.4-5.0.2.el8_10.3.x86_64.rpm libsss_simpleifp-2.9.4-5.0.2.el8_10.3.i686.rpm libsss_simpleifp-2.9.4-5.0.2.el8_10.3.x86_64.rpm libsss_sudo-2.9.4-5.0.2.el8_10.3.x86_64.rpm python3-libipa_hbac-2.9.4-5.0.2.el8_10.3.x86_64.rpm python3-libsss_nss_idmap-2.9.4-5.0.2.el8_10.3.x86_64.rpm python3-sss-2.9.4-5.0.2.el8_10.3.x86_64.rpm python3-sss-murmur-2.9.4-5.0.2.el8_10.3.x86_64.rpm python3-sssdconfig-2.9.4-5.0.2.el8_10.3.noarch.rpm sssd-2.9.4-5.0.2.el8_10.3.x86_64.rpm sssd-ad-2.9.4-5.0.2.el8_10.3.x86_64.rpm sssd-clie...

Read the Full Advisory

aarch64

libipa_hbac-2.9.4-5.0.2.el8_10.3.aarch64.rpm libsss_autofs-2.9.4-5.0.2.el8_10.3.aarch64.rpm libsss_certmap-2.9.4-5.0.2.el8_10.3.aarch64.rpm libsss_idmap-2.9.4-5.0.2.el8_10.3.aarch64.rpm libsss_nss_idmap-2.9.4-5.0.2.el8_10.3.aarch64.rpm libsss_nss_idmap-devel-2.9.4-5.0.2.el8_10.3.aarch64.rpm libsss_simpleifp-2.9.4-5.0.2.el8_10.3.aarch64.rpm libsss_sudo-2.9.4-5.0.2.el8_10.3.aarch64.rpm python3-libipa_hbac-2.9.4-5.0.2.el8_10.3.aarch64.rpm python3-libsss_nss_idmap-2.9.4-5.0.2.el8_10.3.aarch64.rpm python3-sss-2.9.4-5.0.2.el8_10.3.aarch64.rpm python3-sss-murmur-2.9.4-5.0.2.el8_10.3.aarch64.rpm python3-sssdconfig-2.9.4-5.0.2.el8_10.3.noarch.rpm sssd-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-ad-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-client-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-common-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-common-pac-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-dbus-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-idp-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-ipa-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-kcm-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-krb5-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-krb5-common-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-ldap-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-nfs-idmap-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-polkit-rules-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-proxy-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-tools-2.9.4-5.0.2.el8_10.3.aarch64.rpm sssd-winbind-idmap-2.9.4-5.0.2.el8_10.3.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2025-11561

Topics%20covered

Topics Covered

security advisory security issue privilege escalation important sssd Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.