Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 86 articles for you...
172
security advisorydenial of serviceUbuntuUbuntu 26.04 LTS sssd Important Denial of Service Vuln 2026-6245
SSSD could be made to crash if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-8355-1 June 01, 2026 sssd vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS Summary: SSSD could be made to crash if it received specially crafted input. Software Description: - sssd: System Security Services Daemon Details: It was discovered that SSSD did not properly handle raw bytes in the PAM passkey responder. A local attacker could possibly use this issue to cause the SSSD PAM responder to crash, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS sssd 2.12.0-1ubuntu5.1 Ubuntu 25.10 sssd 2.10.1-2ubuntu5.2 Ubuntu 24.04 LTS sssd 2.9.4-1.1ubuntu6.5 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8355-1 CVE-2026-6245 Package Information: https://launchpad.net/ubuntu/+source/sssd/2.12.0-1ubuntu5.1 https://launchpad.net/ubuntu/+source/sssd/2.10.1-2ubuntu5.2 https://launchpad.net/ubuntu/+source/sssd/2.9.4-1.1ubuntu6.5 . A critical advisory for Ubuntu users regarding an important sssd issue leading to potential denial of service.. Ubuntu Advisory SSSD Security Denial Service. . Severity: Important. LinuxSecurity.com Team
Jun 01, 2026
•Important
Ubuntu
100
security advisorySuSEprivilege escalationSUSE: sssd Important Privilege Escalation Fix CVE-2025-11561 2026:20019-1
An update that solves one vulnerability and has one fix can now be installed.. # Security update for sssd Announcement ID: SUSE-SU-2026:20019-1 Release Date: 2026-01-02T16:58:16Z Rating: important References: * bsc#1244325 * bsc#1251827 Cross-References: * CVE-2025-11561 CVSS scores: * CVE-2025-11561 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-11561 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-11561 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP Applications 16.0 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for sssd fixes the following issues: * CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-119=1 * SUSE Linux Enterprise Server for SAP Applications 16.0 zypper in -t patch SUSE-SLES-16.0-119=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libipa_hbac-devel-2.9.5-160000.3.1 * libsss_idmap-devel-2.9.5-160000.3.1 * libipa_hbac0-debuginfo-2.9.5-160000.3.1 * sssd-ipa-debuginfo-2.9.5-160000.3.1 * sssd-ad-2.9.5-160000.3.1 * libsss_certmap0-2.9.5-160000.3.1 * libipa_hbac0-2.9.5-160000.3.1 * sssd-krb5-common-2.9.5-160000.3.1 * sssd-ldap-2.9.5-160000.3.1 * sssd-tools-debuginfo-2.9.5-160000.3.1 * libsss_nss_idmap0-debuginfo-2.9.5-160000.3.1 * libsss_certmap0-debuginfo-2.9.5-160000.3.1 * python3-sssd-config-2.9.5-160000.3.1 * sssd-krb5-2.9.5-160000.3.1 *sssd-proxy-2.9.5-160000.3.1 * sssd-ipa-2.9.5-160000.3.1 * sssd-kcm-debuginfo-2.9.5-160000.3.1 * sssd-krb5-common-debuginfo-2.9.5-160000.3.1 * python3-ipa_hbac-debuginfo-2.9.5-160000.3.1 * sssd-debugsource-2.9.5-160000.3.1 * python3-sss_nss_idmap-debuginfo-2.9.5-160000.3.1 * sssd-winbind-idmap-2.9.5-160000.3.1 * libnfsidmap-sss-debuginfo-2.9.5-160000.3.1 * sssd-ad-debuginfo-2.9.5-160000.3.1 * libsss_idmap0-2.9.5-160000.3.1 * libsss_nss_idmap0-2.9.5-160000.3.1 * sssd-ldap-debuginfo-2.9.5-160000.3.1 * sssd-debuginfo-2.9.5-160000.3.1 * python3-sss-murmur-2.9.5-160000.3.1 * sssd-winbind-idmap-debuginfo-2.9.5-160000.3.1 * libnfsidmap-sss-2.9.5-160000.3.1 * libsss_nss_idmap-devel-2.9.5-160000.3.1 * libsss_idmap0-debuginfo-2.9.5-160000.3.1 * python3-sss_nss_idmap-2.9.5-160000.3.1 * libsss_certmap-devel-2.9.5-160000.3.1 * sssd-2.9.5-160000.3.1 * python3-sss-murmur-debuginfo-2.9.5-160000.3.1 * sssd-dbus-2.9.5-160000.3.1 * sssd-proxy-debuginfo-2.9.5-160000.3.1 * sssd-krb5-debuginfo-2.9.5-160000.3.1 * sssd-kcm-2.9.5-160000.3.1 * sssd-dbus-debuginfo-2.9.5-160000.3.1 * python3-ipa_hbac-2.9.5-160000.3.1 * sssd-tools-2.9.5-160000.3.1 * python3-sssd-config-debuginfo-2.9.5-160000.3.1 * SUSE Linux Enterprise Server for SAP Applications 16.0 (ppc64le x86_64) * libipa_hbac-devel-2.9.5-160000.3.1 * libsss_idmap-devel-2.9.5-160000.3.1 * libipa_hbac0-debuginfo-2.9.5-160000.3.1 * sssd-ipa-debuginfo-2.9.5-160000.3.1 * sssd-ad-2.9.5-160000.3.1 * libsss_certmap0-2.9.5-160000.3.1 * libipa_hbac0-2.9.5-160000.3.1 * sssd-krb5-common-2.9.5-160000.3.1 * sssd-ldap-2.9.5-160000.3.1 * sssd-tools-debuginfo-2.9.5-160000.3.1 * libsss_nss_idmap0-debuginfo-2.9.5-160000.3.1 * libsss_certmap0-debuginfo-2.9.5-160000.3.1 * python3-sssd-config-2.9.5-160000.3.1 * sssd-krb5-2.9.5-160000.3.1 * sssd-proxy-2.9.5-160000.3.1 * sssd-ipa-2.9.5-160000.3.1 *sssd-kcm-debuginfo-2.9.5-160000.3.1 * sssd-krb5-common-debuginfo-2.9.5-160000.3.1 * python3-ipa_hbac-debuginfo-2.9.5-160000.3.1 * sssd-debugsource-2.9.5-160000.3.1 * python3-sss_nss_idmap-debuginfo-2.9.5-160000.3.1 * sssd-winbind-idmap-2.9.5-160000.3.1 * libnfsidmap-sss-debuginfo-2.9.5-160000.3.1 * sssd-ad-debuginfo-2.9.5-160000.3.1 * libsss_idmap0-2.9.5-160000.3.1 * libsss_nss_idmap0-2.9.5-160000.3.1 * sssd-ldap-debuginfo-2.9.5-160000.3.1 * sssd-debuginfo-2.9.5-160000.3.1 * python3-sss-murmur-2.9.5-160000.3.1 * sssd-winbind-idmap-debuginfo-2.9.5-160000.3.1 * libnfsidmap-sss-2.9.5-160000.3.1 * libsss_nss_idmap-devel-2.9.5-160000.3.1 * libsss_idmap0-debuginfo-2.9.5-160000.3.1 * python3-sss_nss_idmap-2.9.5-160000.3.1 * libsss_certmap-devel-2.9.5-160000.3.1 * sssd-2.9.5-160000.3.1 * python3-sss-murmur-debuginfo-2.9.5-160000.3.1 * sssd-dbus-2.9.5-160000.3.1 * sssd-proxy-debuginfo-2.9.5-160000.3.1 * sssd-krb5-debuginfo-2.9.5-160000.3.1 * sssd-kcm-2.9.5-160000.3.1 * sssd-dbus-debuginfo-2.9.5-160000.3.1 * python3-ipa_hbac-2.9.5-160000.3.1 * sssd-tools-2.9.5-160000.3.1 * python3-sssd-config-debuginfo-2.9.5-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-11561.html * https://bugzilla.suse.com/show_bug.cgi?id=1244325 * https://bugzilla.suse.com/show_bug.cgi?id=1251827 . Discover a security update for SUSE addressing an important privilege escalation issue in sssd software. Update now!. SUSE security advisory, sssd update, privilege escalation fix. . Severity: Important. LinuxSecurity.com Team
Jan 09, 2026
•Important
SuSE
100
security advisorySuSEprivilege escalationSUSE Linux Micro: Crucial Patch for Privilege Escalation CVE-2025-11561
An update that solves one vulnerability and has one fix can now be installed.. # Security update for sssd Announcement ID: SUSE-SU-2026:20014-1 Release Date: 2026-01-02T16:58:31Z Rating: important References: * bsc#1244325 * bsc#1251827 Cross-References: * CVE-2025-11561 CVSS scores: * CVE-2025-11561 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-11561 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-11561 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for sssd fixes the following issues: * CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-119=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * sssd-ad-2.9.5-160000.3.1 * libsss_certmap0-2.9.5-160000.3.1 * sssd-krb5-common-2.9.5-160000.3.1 * sssd-ldap-2.9.5-160000.3.1 * sssd-tools-debuginfo-2.9.5-160000.3.1 * python3-sssd-config-2.9.5-160000.3.1 * libsss_certmap0-debuginfo-2.9.5-160000.3.1 * sssd-krb5-2.9.5-160000.3.1 * sssd-krb5-common-debuginfo-2.9.5-160000.3.1 * sssd-debugsource-2.9.5-160000.3.1 * sssd-ad-debuginfo-2.9.5-160000.3.1 * libsss_idmap0-2.9.5-160000.3.1 * sssd-ldap-debuginfo-2.9.5-160000.3.1 * sssd-debuginfo-2.9.5-160000.3.1 * libsss_idmap0-debuginfo-2.9.5-160000.3.1 * sssd-2.9.5-160000.3.1 * sssd-dbus-2.9.5-160000.3.1 * sssd-krb5-debuginfo-2.9.5-160000.3.1 * sssd-dbus-debuginfo-2.9.5-160000.3.1 *sssd-tools-2.9.5-160000.3.1 * python3-sssd-config-debuginfo-2.9.5-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-11561.html * https://bugzilla.suse.com/show_bug.cgi?id=1244325 * https://bugzilla.suse.com/show_bug.cgi?id=1251827 . A security update for SUSE addresses a critical issue in sssd, resolving privilege escalation vulnerabilities.. sssd security update, SUSE Linux Micro threat, privilege escalation fix, sssd vulnerability management. . Severity: Important. LinuxSecurity.com Team
Jan 09, 2026
•Important
SuSE
100
security advisorySuSEprivilege escalationSUSE: Critical Privilege Escalation CVE-2025-11561 Advisory 2025:21084-1
* bsc#1244325 * bsc#1251827 Cross-References: * CVE-2025-11561 . # Security update for sssd Announcement ID: SUSE-SU-2025:21084-1 Release Date: 2025-11-27T11:12:20Z Rating: important References: * bsc#1244325 * bsc#1251827 Cross-References: * CVE-2025-11561 CVSS scores: * CVE-2025-11561 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-11561 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-11561 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for sssd fixes the following issues: * CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1251827) Other fixes: \- Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-527=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * sssd-ad-debuginfo-2.8.2-7.1 * libsss_nss_idmap0-debuginfo-2.8.2-7.1 * libsss_idmap0-2.8.2-7.1 * sssd-krb5-debuginfo-2.8.2-7.1 * libsss_nss_idmap0-2.8.2-7.1 * python3-sssd-config-2.8.2-7.1 * sssd-ldap-debuginfo-2.8.2-7.1 * python3-sssd-config-debuginfo-2.8.2-7.1 * sssd-ad-2.8.2-7.1 * sssd-krb5-common-debuginfo-2.8.2-7.1 * sssd-dbus-debuginfo-2.8.2-7.1 * sssd-krb5-common-2.8.2-7.1 * libsss_certmap0-2.8.2-7.1 * libsss_idmap0-debuginfo-2.8.2-7.1 * sssd-krb5-2.8.2-7.1 * sssd-dbus-2.8.2-7.1 * libsss_certmap0-debuginfo-2.8.2-7.1 * sssd-debuginfo-2.8.2-7.1 * sssd-2.8.2-7.1 * sssd-debugsource-2.8.2-7.1 * sssd-ldap-2.8.2-7.1 * sssd-tools-2.8.2-7.1 * sssd-tools-debuginfo-2.8.2-7.1 ## References: * https://www.suse.com/security/cve/CVE-2025-11561.html * https://bugzilla.suse.com/show_bug.cgi?id=1244325 * https://bugzilla.suse.com/show_bug.cgi?id=1251827 . SUSE's critical sssd update addresses privilege escalation and important fixes for system security. Essential for AD-connected systems.. sssd security update, SUSE Linux Micro patch, privileged access control, security advisory details. . Severity: Important. LinuxSecurity.com Team
Dec 09, 2025
•Important
SuSE
217
security advisoryupdatethreatOracle Linux 7 Advisory ELSA-2025-19847 Important SSSD Security Update
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-19847 http://linux.oracle.com/errata/ELSA-2025-19847.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable LinuxNetwork: x86_64: libipa_hbac-1.16.5-10.0.5.el7_9.16.i686.rpm libipa_hbac-1.16.5-10.0.5.el7_9.16.x86_64.rpm libipa_hbac-devel-1.16.5-10.0.5.el7_9.16.i686.rpm libipa_hbac-devel-1.16.5-10.0.5.el7_9.16.x86_64.rpm libsss_autofs-1.16.5-10.0.5.el7_9.16.x86_64.rpm libsss_certmap-1.16.5-10.0.5.el7_9.16.i686.rpm libsss_certmap-1.16.5-10.0.5.el7_9.16.x86_64.rpm libsss_certmap-devel-1.16.5-10.0.5.el7_9.16.i686.rpm libsss_certmap-devel-1.16.5-10.0.5.el7_9.16.x86_64.rpm libsss_idmap-1.16.5-10.0.5.el7_9.16.i686.rpm libsss_idmap-1.16.5-10.0.5.el7_9.16.x86_64.rpm libsss_idmap-devel-1.16.5-10.0.5.el7_9.16.i686.rpm libsss_idmap-devel-1.16.5-10.0.5.el7_9.16.x86_64.rpm libsss_nss_idmap-1.16.5-10.0.5.el7_9.16.i686.rpm libsss_nss_idmap-1.16.5-10.0.5.el7_9.16.x86_64.rpm libsss_nss_idmap-devel-1.16.5-10.0.5.el7_9.16.i686.rpm libsss_nss_idmap-devel-1.16.5-10.0.5.el7_9.16.x86_64.rpm libsss_simpleifp-1.16.5-10.0.5.el7_9.16.i686.rpm libsss_simpleifp-1.16.5-10.0.5.el7_9.16.x86_64.rpm libsss_simpleifp-devel-1.16.5-10.0.5.el7_9.16.i686.rpm libsss_simpleifp-devel-1.16.5-10.0.5.el7_9.16.x86_64.rpm libsss_sudo-1.16.5-10.0.5.el7_9.16.x86_64.rpm python-libipa_hbac-1.16.5-10.0.5.el7_9.16.x86_64.rpm python-libsss_nss_idmap-1.16.5-10.0.5.el7_9.16.x86_64.rpm python-sss-1.16.5-10.0.5.el7_9.16.x86_64.rpm python-sss-murmur-1.16.5-10.0.5.el7_9.16.x86_64.rpm python-sssdconfig-1.16.5-10.0.5.el7_9.16.noarch.rpm sssd-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-ad-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-client-1.16.5-10.0.5.el7_9.16.i686.rpm sssd-client-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-common-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-common-pac-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-dbus-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-ipa-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-kcm-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-krb5-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-krb5-common-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-ldap-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-libwbclient-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-libwbclient-devel-1.16.5-10.0.5.el7_9.16.i686.rpm sssd-libwbclient-devel-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-polkit-rules-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-proxy-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-tools-1.16.5-10.0.5.el7_9.16.x86_64.rpm sssd-winbind-idmap-1.16.5-10.0.5.el7_9.16.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/sssd-1.16.5-10.0.5.el7_9.16.src.rpm Related CVEs: CVE-2025-11561 Description of changes: [1.16.5-10.0.5.16] - krb5: disable Kerberos localauth an2ln plugin for AD/IPA [Orabug: 38621159] _______________________________________________ El-errata mailing list
Dec 09, 2025
•Important
Oracle
217
security advisoryprivilege escalationremote accessOracle Linux 10: ELSA-2025-21020 sssd Important Privilege Escalation
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-21020 http://linux.oracle.com/errata/ELSA-2025-21020.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable LinuxNetwork: x86_64: libipa_hbac-2.11.1-2.0.1.el10_1.1.x86_64.rpm libsss_autofs-2.11.1-2.0.1.el10_1.1.x86_64.rpm libsss_certmap-2.11.1-2.0.1.el10_1.1.x86_64.rpm libsss_idmap-2.11.1-2.0.1.el10_1.1.x86_64.rpm libsss_nss_idmap-2.11.1-2.0.1.el10_1.1.x86_64.rpm libsss_nss_idmap-devel-2.11.1-2.0.1.el10_1.1.x86_64.rpm libsss_sudo-2.11.1-2.0.1.el10_1.1.x86_64.rpm python3-libipa_hbac-2.11.1-2.0.1.el10_1.1.x86_64.rpm python3-libsss_nss_idmap-2.11.1-2.0.1.el10_1.1.x86_64.rpm python3-sss-2.11.1-2.0.1.el10_1.1.x86_64.rpm python3-sss-murmur-2.11.1-2.0.1.el10_1.1.x86_64.rpm python3-sssdconfig-2.11.1-2.0.1.el10_1.1.noarch.rpm sssd-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-ad-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-client-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-common-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-common-pac-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-dbus-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-idp-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-ipa-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-kcm-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-krb5-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-krb5-common-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-ldap-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-nfs-idmap-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-passkey-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-proxy-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-tools-2.11.1-2.0.1.el10_1.1.x86_64.rpm sssd-winbind-idmap-2.11.1-2.0.1.el10_1.1.x86_64.rpm aarch64: libipa_hbac-2.11.1-2.0.1.el10_1.1.aarch64.rpm libsss_autofs-2.11.1-2.0.1.el10_1.1.aarch64.rpm libsss_certmap-2.11.1-2.0.1.el10_1.1.aarch64.rpm libsss_idmap-2.11.1-2.0.1.el10_1.1.aarch64.rpm libsss_nss_idmap-2.11.1-2.0.1.el10_1.1.aarch64.rpm libsss_nss_idmap-devel-2.11.1-2.0.1.el10_1.1.aarch64.rpm libsss_sudo-2.11.1-2.0.1.el10_1.1.aarch64.rpm python3-libipa_hbac-2.11.1-2.0.1.el10_1.1.aarch64.rpm python3-libsss_nss_idmap-2.11.1-2.0.1.el10_1.1.aarch64.rpm python3-sss-2.11.1-2.0.1.el10_1.1.aarch64.rpm python3-sss-murmur-2.11.1-2.0.1.el10_1.1.aarch64.rpm python3-sssdconfig-2.11.1-2.0.1.el10_1.1.noarch.rpm sssd-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-ad-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-client-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-common-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-common-pac-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-dbus-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-idp-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-ipa-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-kcm-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-krb5-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-krb5-common-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-ldap-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-nfs-idmap-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-passkey-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-proxy-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-tools-2.11.1-2.0.1.el10_1.1.aarch64.rpm sssd-winbind-idmap-2.11.1-2.0.1.el10_1.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/sssd-2.11.1-2.0.1.el10_1.1.src.rpm Related CVEs: CVE-2025-11561 Description of changes: [2.11.1-2.0.1.1] - Restore default debug level for sss_cache [Orabug: 32810448] [2.11.1-2.1] - Resovles: RHEL-120288 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.1.z] _______________________________________________ El-errata mailing list
Dec 05, 2025
•Important
Oracle
217
security advisoryprivilege escalationimportantOracle Linux 9 ELSA-2025-20954 sssd Important Privilege Escalation Fix
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-20954 http://linux.oracle.com/errata/ELSA-2025-20954.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable LinuxNetwork: x86_64: libipa_hbac-2.9.7-4.0.1.el9_7.1.i686.rpm libipa_hbac-2.9.7-4.0.1.el9_7.1.x86_64.rpm libsss_autofs-2.9.7-4.0.1.el9_7.1.x86_64.rpm libsss_certmap-2.9.7-4.0.1.el9_7.1.i686.rpm libsss_certmap-2.9.7-4.0.1.el9_7.1.x86_64.rpm libsss_idmap-2.9.7-4.0.1.el9_7.1.i686.rpm libsss_idmap-2.9.7-4.0.1.el9_7.1.x86_64.rpm libsss_nss_idmap-2.9.7-4.0.1.el9_7.1.i686.rpm libsss_nss_idmap-2.9.7-4.0.1.el9_7.1.x86_64.rpm libsss_nss_idmap-devel-2.9.7-4.0.1.el9_7.1.i686.rpm libsss_nss_idmap-devel-2.9.7-4.0.1.el9_7.1.x86_64.rpm libsss_simpleifp-2.9.7-4.0.1.el9_7.1.i686.rpm libsss_simpleifp-2.9.7-4.0.1.el9_7.1.x86_64.rpm libsss_sudo-2.9.7-4.0.1.el9_7.1.x86_64.rpm python3-libipa_hbac-2.9.7-4.0.1.el9_7.1.x86_64.rpm python3-libsss_nss_idmap-2.9.7-4.0.1.el9_7.1.x86_64.rpm python3-sss-2.9.7-4.0.1.el9_7.1.x86_64.rpm python3-sss-murmur-2.9.7-4.0.1.el9_7.1.x86_64.rpm python3-sssdconfig-2.9.7-4.0.1.el9_7.1.noarch.rpm sssd-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-ad-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-client-2.9.7-4.0.1.el9_7.1.i686.rpm sssd-client-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-common-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-common-pac-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-dbus-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-idp-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-ipa-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-kcm-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-krb5-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-krb5-common-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-ldap-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-nfs-idmap-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-passkey-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-polkit-rules-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-proxy-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-tools-2.9.7-4.0.1.el9_7.1.x86_64.rpm sssd-winbind-idmap-2.9.7-4.0.1.el9_7.1.x86_64.rpm aarch64: libipa_hbac-2.9.7-4.0.1.el9_7.1.aarch64.rpm libsss_autofs-2.9.7-4.0.1.el9_7.1.aarch64.rpm libsss_certmap-2.9.7-4.0.1.el9_7.1.aarch64.rpm libsss_idmap-2.9.7-4.0.1.el9_7.1.aarch64.rpm libsss_nss_idmap-2.9.7-4.0.1.el9_7.1.aarch64.rpm libsss_nss_idmap-devel-2.9.7-4.0.1.el9_7.1.aarch64.rpm libsss_simpleifp-2.9.7-4.0.1.el9_7.1.aarch64.rpm libsss_sudo-2.9.7-4.0.1.el9_7.1.aarch64.rpm python3-libipa_hbac-2.9.7-4.0.1.el9_7.1.aarch64.rpm python3-libsss_nss_idmap-2.9.7-4.0.1.el9_7.1.aarch64.rpm python3-sss-2.9.7-4.0.1.el9_7.1.aarch64.rpm python3-sss-murmur-2.9.7-4.0.1.el9_7.1.aarch64.rpm python3-sssdconfig-2.9.7-4.0.1.el9_7.1.noarch.rpm sssd-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-ad-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-client-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-common-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-common-pac-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-dbus-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-idp-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-ipa-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-kcm-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-krb5-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-krb5-common-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-ldap-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-nfs-idmap-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-passkey-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-polkit-rules-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-proxy-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-tools-2.9.7-4.0.1.el9_7.1.aarch64.rpm sssd-winbind-idmap-2.9.7-4.0.1.el9_7.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/sssd-2.9.7-4.0.1.el9_7.1.src.rpm Related CVEs: CVE-2025-11561 Description of changes: [2.9.7-4.0.1.1] - Restore default debug level for sss_cache [Orabug: 32810448] * Fri Oct 17 2025 Tomas Halman
Nov 27, 2025
•Important
Oracle
100
security advisoryupdateSuSESUSE Advisory 2025:21066-1 for sssd: Critical Privilege Escalation Fix
* bsc#1244325 * bsc#1251827 Cross-References: * CVE-2025-11561 . # Security update for sssd Announcement ID: SUSE-SU-2025:21066-1 Release Date: 2025-11-26T14:27:32Z Rating: important References: * bsc#1244325 * bsc#1251827 Cross-References: * CVE-2025-11561 CVSS scores: * CVE-2025-11561 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-11561 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-11561 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for sssd fixes the following issues: * CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1251827) Other fixes: \- Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-344=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * libsss_nss_idmap0-2.9.5-slfo.1.1_4.1 * libsss_certmap0-2.9.5-slfo.1.1_4.1 * sssd-krb5-2.9.5-slfo.1.1_4.1 * sssd-ldap-2.9.5-slfo.1.1_4.1 * sssd-ad-debuginfo-2.9.5-slfo.1.1_4.1 * sssd-ad-2.9.5-slfo.1.1_4.1 * sssd-debugsource-2.9.5-slfo.1.1_4.1 * sssd-2.9.5-slfo.1.1_4.1 * libsss_idmap0-2.9.5-slfo.1.1_4.1 * sssd-dbus-2.9.5-slfo.1.1_4.1 * sssd-krb5-common-2.9.5-slfo.1.1_4.1 * python3-sssd-config-debuginfo-2.9.5-slfo.1.1_4.1 * libsss_certmap0-debuginfo-2.9.5-slfo.1.1_4.1 * sssd-debuginfo-2.9.5-slfo.1.1_4.1 * sssd-krb5-common-debuginfo-2.9.5-slfo.1.1_4.1 * libsss_nss_idmap0-debuginfo-2.9.5-slfo.1.1_4.1 *sssd-tools-2.9.5-slfo.1.1_4.1 * sssd-ldap-debuginfo-2.9.5-slfo.1.1_4.1 * python3-sssd-config-2.9.5-slfo.1.1_4.1 * sssd-tools-debuginfo-2.9.5-slfo.1.1_4.1 * sssd-krb5-debuginfo-2.9.5-slfo.1.1_4.1 * sssd-dbus-debuginfo-2.9.5-slfo.1.1_4.1 * libsss_idmap0-debuginfo-2.9.5-slfo.1.1_4.1 ## References: * https://www.suse.com/security/cve/CVE-2025-11561.html * https://bugzilla.suse.com/show_bug.cgi?id=1244325 * https://bugzilla.suse.com/show_bug.cgi?id=1251827 . Important security update for SUSE sssd addressing a privilege escalation issue linked to CVE-2025-11561. Install now!. SUSE sssd update, privilege escalation, security patch. . Severity: Important. LinuxSecurity.com Team
Nov 27, 2025
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!