sssd security update

2.12.0-3.0.1.el102.2 - Restore default debug level for ssscache Orabug: 32810448 2.12.0-3.2 - Resolves: RHEL-257112 - CVE-2026-87853 sssd: IDP prefix-match bypass in evalaccesstokenbuf 2.12.0-3.1 - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tre...

Rocky Linux 9 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc Multiple Vulnerabilities (crlsa-2026_42122)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202642122 advisory. sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation CVE-2026-14474 sssd: sssd: GP...

CLSA-2026-1788433999 sssd: Fix of CVE-2023-3758

CVE-2026-14474: warn when ldapsudosearchbase falls back to the directory root DN - CVE-2026-14476: reject path traversal in gPCFileSysPath to prevent escaping the GPO cache directory...

CLSA-2026-1785845028 sssd: Fix of 2 CVEs

CVE-2026-14474: warn when ldapsudosearchbase falls back to the directory root DN - CVE-2026-14476: reject path traversal in gPCFileSysPath to prevent escaping the GPO cache directory...

sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass

A path traversal flaw was found in SSSD's AD GPO provider. The adgpoextractsmbcomponents function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL...

CLSA-2026-1785345275 sssd: Fix of 2 CVEs

CVE-2026-14474: warn when ldapsudosearchbase falls back to the root DN, where the whole directory tree is searched for injectable sudoRole objects - CVE-2026-14476: reject ".." path traversal in the AD GPO gPCFileSysPath attribute to prevent writing files outside the GPO cache directory...

sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass

A path traversal flaw was found in SSSD's AD GPO provider. The adgpoextractsmbcomponents function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL...

Important: Red Hat Security Advisory: sssd security update

An update for sssd is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CLSA-2026-1784804056 sssd: Fix of 2 CVEs

CVE-2026-14476: reject path traversal in the AD GPO gPCFileSysPath attribute, preventing writes outside the GPO cache directory - CVE-2026-14474: warn when ldapsudosearchbase is unset and the sudo provider falls back to searching the entire directory tree for sudoRole objects...

SUSE SLES12: libipa_hbac-devel / libipa_hbac0 / libsss_certmap0 / etc (SUSE-SU-2026:3131-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3131-1 advisory. This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by...

CVE-2026-14476

A path traversal flaw was found in SSSD's AD GPO provider. The adgpoextractsmbcomponents function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL...