Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 561
Alerts This Week
Warning Icon 1 561

Oracle Linux 9 sssd Important Privilege Escalation ELSA-2026-42122

oracle
Calendar Grey July 28, 2026
Scroller Oracle
Critical updates for Oracle Linux 9 sssd tackle privilege escalation and path traversal vulnerabilities effectively.
Oracle Linux 9 has received updates addressing CVEs 2026-14474 and 2026-14476, mitigating privilege escalation and path traversal vulnerabilities in SSSD-related packages.

Summary

[2.9.8-4.0.1.el9_8.1] - Restore default debug level for sss_cache [Orabug: 32810448] [2.9.8-5] - Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation - Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root

Topics%20covered

Topics Covered

security advisory privilege escalation important path traversal Oracle sssd

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates/sssd-2.9.8-4.0.1.el9_8.1.src.rpm

x86_64

libipa_hbac-2.9.8-4.0.1.el9_8.1.i686.rpm libipa_hbac-2.9.8-4.0.1.el9_8.1.x86_64.rpm libsss_autofs-2.9.8-4.0.1.el9_8.1.x86_64.rpm libsss_certmap-2.9.8-4.0.1.el9_8.1.i686.rpm libsss_certmap-2.9.8-4.0.1.el9_8.1.x86_64.rpm libsss_idmap-2.9.8-4.0.1.el9_8.1.i686.rpm libsss_idmap-2.9.8-4.0.1.el9_8.1.x86_64.rpm libsss_nss_idmap-2.9.8-4.0.1.el9_8.1.i686.rpm libsss_nss_idmap-2.9.8-4.0.1.el9_8.1.x86_64.rpm libsss_nss_idmap-devel-2.9.8-4.0.1.el9_8.1.i686.rpm libsss_nss_idmap-devel-2.9.8-4.0.1.el9_8.1.x86_64.rpm libsss_simpleifp-2.9.8-4.0.1.el9_8.1.i686.rpm libsss_simpleifp-2.9.8-4.0.1.el9_8.1.x86_64.rpm libsss_sudo-2.9.8-4.0.1.el9_8.1.x86_64.rpm python3-libipa_hbac-2.9.8-4.0.1.el9_8.1.x86_64.rpm python3-libsss_nss_idmap-2.9.8-4.0.1.el9_8.1.x86_64.rpm python3-sss-2.9.8-4.0.1.el9_8.1.x86_64.rpm python3-sss-murmur-2.9.8-4.0.1.el9_8.1.x86_64.rpm python3-sssdconfig-2.9.8-4.0.1.el9_8.1.noarch.rpm sssd-2.9.8-4.0.1.el9_8.1.x86_64.rpm sssd-ad-2.9.8-4.0.1.el9_8.1.x86_64.rpm sssd-client-2.9.8-4.0.1.el9_8....

Read the Full Advisory

aarch64

libipa_hbac-2.9.8-4.0.1.el9_8.1.aarch64.rpm libsss_autofs-2.9.8-4.0.1.el9_8.1.aarch64.rpm libsss_certmap-2.9.8-4.0.1.el9_8.1.aarch64.rpm libsss_idmap-2.9.8-4.0.1.el9_8.1.aarch64.rpm libsss_nss_idmap-2.9.8-4.0.1.el9_8.1.aarch64.rpm libsss_nss_idmap-devel-2.9.8-4.0.1.el9_8.1.aarch64.rpm libsss_simpleifp-2.9.8-4.0.1.el9_8.1.aarch64.rpm libsss_sudo-2.9.8-4.0.1.el9_8.1.aarch64.rpm python3-libipa_hbac-2.9.8-4.0.1.el9_8.1.aarch64.rpm python3-libsss_nss_idmap-2.9.8-4.0.1.el9_8.1.aarch64.rpm python3-sss-2.9.8-4.0.1.el9_8.1.aarch64.rpm python3-sss-murmur-2.9.8-4.0.1.el9_8.1.aarch64.rpm python3-sssdconfig-2.9.8-4.0.1.el9_8.1.noarch.rpm sssd-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-ad-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-client-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-common-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-common-pac-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-dbus-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-idp-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-ipa-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-kcm-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-krb5-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-krb5-common-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-ldap-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-nfs-idmap-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-passkey-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-polkit-rules-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-proxy-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-tools-2.9.8-4.0.1.el9_8.1.aarch64.rpm sssd-winbind-idmap-2.9.8-4.0.1.el9_8.1.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2026-14474 CVE-2026-14476

Topics%20covered

Topics Covered

security advisory privilege escalation important path traversal Oracle sssd

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.