[ALSA-2025:19610] Important: sssd security update
Type:
security
Severity:
important
Release date:
2025-11-07
Description:
The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 libsss_sudo-2.9.4-5.el8_10.3.aarch64.rpm 087ac513feda3ebf8b27437b3258c61de62a525c45e23d81488c7b3006fba366
aarch64 sssd-polkit-rules-2.9.4-5.el8_10.3.aarch64.rpm 0a09655d64570505894676ec3e3fe9e0e1565dac97ef1ffb8581a5d261a41619
aarch64 sssd-proxy-2.9.4-5.el8_10.3.aarch64.rpm 0e640a75a0239d6e64cf73768e824f1e1869fb79ef3297bea1b215d2cfa8f33e
aarch64 sssd-dbus-2.9.4-5.el8_10.3.aarch64.rpm 322535612f5b3f1acd71d4866653677bbc27a56018da28bd2d02b800f1716b62
aarch64 sssd-common-pac-2.9.4-5.el8_10.3.aarch64.rpm 33f3531dbeb2fea22e3521cb3d8b8442985c9e4b4ea6a46b72649a02a468514d
aarch64 sssd-nfs-idmap-2.9.4-5.el8_10.3.aarch64.rpm 37fe04380969ee7f81c6512d5893744d6543974cc4c74f886007c3b9f81fe44e
aarch64 sssd-krb5-2.9.4-5.el8_10.3.aarch64.rpm 3ac8ebf4f8e1566a87544687d6a6f1847276b789321800ebe591267da7dbf7aa
aarch64 sssd-kcm-2.9.4-5.el8_10.3.aarch64.rpm 408425c5b9532bad7fb7e334ece7fa64a0095f5f34fcb1101934761c17eeff60
aarch64 sssd-tools-2.9.4-5.el8_10.3.aarch64.rpm 501b41cb9e647dcda743156ce70357335d81caa3026f6b7928485729c8c5d12a
aarch64 sssd-client-2.9.4-5.el8_10.3.aarch64.rpm 5b34f9a23d318a060dfb35c108ea650dab47d0f4d26c52b8bddb116cfab896b1
aarch64 libsss_nss_idmap-2.9.4-5.el8_10.3.aarch64.rpm 6417ee1513d6b36cfa39ab08d82be178624609479ad1281558add70d3788867a
aarch64 libsss_idmap-2.9.4-5.el8_10.3.aarch64.rpm 645a7c5ce5f6bbd66c6790ff79a050e55028aa01946b7ae1d8cb76fe6935ec76
aarch64 sssd-ldap-2.9.4-5.el8_10.3.aarch64.rpm 6c41c91b9a48c5cabb38ea53f23f6c16e32b6c77454ff1c84c47c5f34b36154d
aarch64 libsss_nss_idmap-devel-2.9.4-5.el8_10.3.aarch64.rpm 6c61ec5877c2a102f848c0a5f589729f7c0bf1d6b78c515a280acff8d02f6534
aarch64 sssd-2.9.4-5.el8_10.3.aarch64.rpm 75c28f013139ddedf1cede901dd2d51378a0b773ce1a398aff05c53eb71962f4
aarch64 sssd-idp-2.9.4-5.el8_10.3.aarch64.rpm a9383d2202c540c72f3bdb486d3986f99bfdf7655c0e91608e31e67d17ee2c65
aarch64 python3-sss-murmur-2.9.4-5.el8_10.3.aarch64.rpm aabdecbf865b52cc8ef8a02d1c964b1bdd4b0195b71a8bd5d1ab211dd732de74
aarch64 python3-libipa_hbac-2.9.4-5.el8_10.3.aarch64.rpm aac88337dea586c5879eb998433abe6d786885305ff11e133945005f5abb1c2c
aarch64 libsss_autofs-2.9.4-5.el8_10.3.aarch64.rpm adc2e17aadd07c6a02888140809c8af7ada88e53cc8e21bbc7340a52d199070c
aarch64 libsss_simpleifp-2.9.4-5.el8_10.3.aarch64.rpm b6a6d70e0d2f038b9a39c93f88229e12fb309e562e463e15fc0ff311470b99f9
aarch64 sssd-ad-2.9.4-5.el8_10.3.aarch64.rpm bb883508253f391351481a5f7ec764356c305eb12b849c62231233ebe03a3c62
aarch64 sssd-krb5-common-2.9.4-5.el8_10.3.aarch64.rpm c7e588d51f1d4dce490a157cd172b6a5276f015a41fbd1b456b7a53e30016f98
aarch64 sssd-ipa-2.9.4-5.el8_10.3.aarch64.rpm cb9257b34548321a473ce783fdbb0c7eb00e924ce941f948dd0fd1a3f65447af
aarch64 sssd-winbind-idmap-2.9.4-5.el8_10.3.aarch64.rpm cfb90450dbd60150ccbe47b3e74c5b7622a35ce929e49ccb6d4c7d78a150961a
aarch64 libsss_certmap-2.9.4-5.el8_10.3.aarch64.rpm d489d21de61a96c67b0229b76b3671ccfffca36baafb207be1cce16386dada8a
aarch64 python3-sss-2.9.4-5.el8_10.3.aarch64.rpm e9d41ceb53909a7bfa585c8da8bb4fc6ef8288703b41f1ef883ae35155b0df8b
aarch64 python3-libsss_nss_idmap-2.9.4-5.el8_10.3.aarch64.rpm eb84e6a465e9b109d88097450d15456ef1971d2b219657190b12e4decd9c1b3c
aarch64 sssd-common-2.9.4-5.el8_10.3.aarch64.rpm eddf1a886008bfabf6af4e19e094668974aa1e4ef22f8b4739fa562ad9b2b4e8
aarch64 libipa_hbac-2.9.4-5.el8_10.3.aarch64.rpm f8246de656d2f45b923ab5b1a3808dff8c7ba8e6a4677a9c5b3eae032a8cd772
i686 libsss_certmap-2.9.4-5.el8_10.3.i686.rpm 03d2db30e1b3de6dd6930f381b2c2123187709875ca91e477c848deda395b6ed
i686 libsss_simpleifp-2.9.4-5.el8_10.3.i686.rpm 2e7265ef80de3230dc2a65cfa3f9dd8c2232e9448472b5f12498d1a16cb133f0
i686 sssd-client-2.9.4-5.el8_10.3.i686.rpm 2edbe6e59dcb72e092ac0967529ba6616c79d8917cbc895b49717799c4c3e661
i686 libsss_nss_idmap-2.9.4-5.el8_10.3.i686.rpm 5d88b2761a1c0d51525c7e74268affe93b9feebf2ae2ac7f7798f0ba231c4ce5
i686 libipa_hbac-2.9.4-5.el8_10.3.i686.rpm 84278ad62d98f89d9709949691e60c6019ee75b963cb0434c8e18eb0d47730ab
i686 libsss_idmap-2.9.4-5.el8_10.3.i686.rpm d6d221783e80bd8d5e096e7e7f9f1ff8820788dccb83dc177c2f1ee1dd4b4ee3
i686 libsss_nss_idmap-devel-2.9.4-5.el8_10.3.i686.rpm f0f82fd8a4f8c2bb3cafe176ec2533bbcbca641d05820fa2591256674b5d32aa
noarch python3-sssdconfig-2.9.4-5.el8_10.3.noarch.rpm cac71a86aa26cddab844b4278c089d6cc1880dd514821a688b2f67f26e5f78eb
ppc64le libsss_nss_idmap-2.9.4-5.el8_10.3.ppc64le.rpm 03ae2b7c218e4131f586763112adf8e3abea859d1357f962bfb12f5307fe2a24
ppc64le sssd-polkit-rules-2.9.4-5.el8_10.3.ppc64le.rpm 09c208a9e32c6623a2aced99274782b7bc90040c2c7283eff148a378f4847c70
ppc64le sssd-proxy-2.9.4-5.el8_10.3.ppc64le.rpm 0a25a4d55971fec1be19a457ff191538d44cf584994644f6451db28209f49fae
ppc64le python3-sss-murmur-2.9.4-5.el8_10.3.ppc64le.rpm 0e237b0c1b5b9ec2fa649c4830eb6a43b7cb6e4f855bde418240824f3c733ede
ppc64le sssd-ldap-2.9.4-5.el8_10.3.ppc64le.rpm 131fe50fe8008bedc07d8ca40e7dc95f6446d799e8f5088e10c1b619456dbe83
ppc64le sssd-krb5-common-2.9.4-5.el8_10.3.ppc64le.rpm 1a897ad14bb85d8655f75e0e0ae804ad0f83f6a810d87651f4b120ad5c1c42ba
ppc64le sssd-ipa-2.9.4-5.el8_10.3.ppc64le.rpm 1ce9748231513486ae8bc3e4eb1ebb0715a34557fb3b7958dd00f714d1100b8c
ppc64le libsss_certmap-2.9.4-5.el8_10.3.ppc64le.rpm 2131a3e150e042c454cfeea1c4f21c02af8a506b08261a214aa7182cadea2195
ppc64le libsss_sudo-2.9.4-5.el8_10.3.ppc64le.rpm 246a6018afc61d8dbca49a0c52162fd53dc359d6a74c8fd95bb29de58426df2a
ppc64le libsss_nss_idmap-devel-2.9.4-5.el8_10.3.ppc64le.rpm 2dbbf95f380528095079e1665b401cd959bfe2df0dd3aaafb95c78ee87209c8f
ppc64le sssd-tools-2.9.4-5.el8_10.3.ppc64le.rpm 34d8d3099a31fcee4cdfd84890ece72b86549e2473f6b3b2443acb6ea7c41d72
ppc64le sssd-dbus-2.9.4-5.el8_10.3.ppc64le.rpm 4b42006328d531c6e52af61890fa2ea028b890ced417d1f9451fd92d1d158ab2
ppc64le libipa_hbac-2.9.4-5.el8_10.3.ppc64le.rpm 553fb841a87b66d809a44348cae68582c31ad333fc073c3529e995c250407d73
ppc64le libsss_autofs-2.9.4-5.el8_10.3.ppc64le.rpm 57d2a3c37b875d1308ab5a0abcdd13bdd3e752955c3b8c0f30ad5ac6be1a8c1d
ppc64le sssd-winbind-idmap-2.9.4-5.el8_10.3.ppc64le.rpm 5c47dec0600ebbc63edc95dc9774b9f4a55db732740dab5071f1c99269df3a10
ppc64le sssd-client-2.9.4-5.el8_10.3.ppc64le.rpm 61d71e75f625654ecd7ebcc4b33378fa5da6cc572a34a6352a6c08faf7facf2f
ppc64le python3-libsss_nss_idmap-2.9.4-5.el8_10.3.ppc64le.rpm 753992c415b378a7fbddddfb34fea3f6004e655d6f44292a0692d8313992795e
ppc64le libsss_simpleifp-2.9.4-5.el8_10.3.ppc64le.rpm 7d241910841a5b9b131225a7f76e12b817807d247518b559cf8fcd2807f5da44
ppc64le sssd-ad-2.9.4-5.el8_10.3.ppc64le.rpm a19119413c394516e7b42b24de14b03a2c794e5b0ce0b0e8abae0060a2e15ae6
ppc64le sssd-common-pac-2.9.4-5.el8_10.3.ppc64le.rpm a40b6900c5c4ea5f39ffb6967847a8bf39360a2fbd45f32cc255eee13dcbb0e4
ppc64le python3-libipa_hbac-2.9.4-5.el8_10.3.ppc64le.rpm b331f957c5a475e866b5590b9a73badc4415482f796380766ba30bdaa6161bd2
ppc64le sssd-kcm-2.9.4-5.el8_10.3.ppc64le.rpm c7f74c8fc095a32a219fa3a30084944c08bfb20a99fc0c35130528b74812b1a2
ppc64le sssd-krb5-2.9.4-5.el8_10.3.ppc64le.rpm cd07a73153292f66ebc7974d734417247586c5be8574a673b127c97e6db7c5bc
ppc64le python3-sss-2.9.4-5.el8_10.3.ppc64le.rpm ced470fc188f6fc3126415333bfc7ef229e828761490a735d02979b610046032
ppc64le sssd-nfs-idmap-2.9.4-5.el8_10.3.ppc64le.rpm d6fc2be307bc7071189c4a23b816d0f2cb0e3b9963a60f115414a79e3c8d6f75
ppc64le sssd-common-2.9.4-5.el8_10.3.ppc64le.rpm d9ceb0f35e373ffe70344ba50118b736b7f181b5d20d7f8e7b7697f0163176e4
ppc64le sssd-idp-2.9.4-5.el8_10.3.ppc64le.rpm e3f79bc1a2fe469d0b8be5b7e5c4677ca7860e4090b529cbd1b66ec2557e1ddd
ppc64le sssd-2.9.4-5.el8_10.3.ppc64le.rpm e77f786dc224928a02d953cc014b255a1c6ded2c57565ac86fefad2f398336f8
ppc64le libsss_idmap-2.9.4-5.el8_10.3.ppc64le.rpm ef49166ba7a2a4c458c87e935cc5694c0eb9cd2cb33a3075778fb79a01fab250
s390x libsss_nss_idmap-2.9.4-5.el8_10.3.s390x.rpm 2df8674371b8d701c990f1aaf8e52433ecb1c75a34a8092c54655a29d28c0e1e
s390x sssd-idp-2.9.4-5.el8_10.3.s390x.rpm 46adc25de0e6e34aafea8609ebf6a5d47ee60c3e66f5a84d27bc9b4fc93dd8bd
s390x sssd-nfs-idmap-2.9.4-5.el8_10.3.s390x.rpm 53d406c24924d587cad76c7d991651abfb34d731f3f0e4c0db8e2b0acf7b0b9f
s390x libsss_simpleifp-2.9.4-5.el8_10.3.s390x.rpm 661e7986fa97ae2f1a030a5ec97edc5f9f62a4600ea60aeea981cbd2e9fed362
s390x sssd-client-2.9.4-5.el8_10.3.s390x.rpm 67c4bf592d263a8357d4617228b283530395a3c0fde6af4cdb4696029f4caa2c
s390x python3-sss-murmur-2.9.4-5.el8_10.3.s390x.rpm 710eefa3e6142980239e67331ca06a72e7ec19a480c01de1b7471bbc066fd5b8
s390x sssd-common-2.9.4-5.el8_10.3.s390x.rpm 8fec0032fe27d5104cd9e848ddabe31bf759f69cec43d24a3bb470137ab31ee3
s390x sssd-ad-2.9.4-5.el8_10.3.s390x.rpm 973c3637aefc1c71d3357bb1efcd508ba463b46ff104aa58ff1241be89558b31
s390x libsss_autofs-2.9.4-5.el8_10.3.s390x.rpm 9e243042fd869ff6cd9b84ff021deb351ea486a28a5df02b602646b41d28151d
s390x sssd-kcm-2.9.4-5.el8_10.3.s390x.rpm a47e840465b6622337bcd87e383ea1389d31e9407834acee8537ee385a26b8c8
s390x libsss_sudo-2.9.4-5.el8_10.3.s390x.rpm a71e37387f733846b6075bbca7804c9c18514d04cce5a82fcd7fdf55db298f58
s390x libsss_nss_idmap-devel-2.9.4-5.el8_10.3.s390x.rpm a891b87de3a37ed5b049fac9f4df7bbc55b0f4a73d2c753666db590d661ac6bd
s390x sssd-common-pac-2.9.4-5.el8_10.3.s390x.rpm bbbb31d7fa619029f6a766d5c59c14a9508b3cfff64d4567a251a599c5b4ade7
s390x libsss_idmap-2.9.4-5.el8_10.3.s390x.rpm c5da5623ffdf99e090d5ff4feecb16b03cb56c6782ce711307c805eb86c8cf6f
s390x sssd-ipa-2.9.4-5.el8_10.3.s390x.rpm cb81be7a6b4c95e92ebb644a0766c9d975bddcc5e8afcdf6ff8045e40e9195b0
s390x sssd-proxy-2.9.4-5.el8_10.3.s390x.rpm cfd22f4d1bab66d2f3aee1271fd0cbfa938d287f2322ac31c4c51c1670cbbe96
s390x libsss_certmap-2.9.4-5.el8_10.3.s390x.rpm d1cdd3036301656db2376dcc50c399b02b054e180698b2228573ecf5467dc278
s390x python3-sss-2.9.4-5.el8_10.3.s390x.rpm d84273e2ef7b26baf0ba480bd0120dde879c922490832d877992ce9816a3b3eb
s390x sssd-krb5-common-2.9.4-5.el8_10.3.s390x.rpm d8e1a34e6e5f89f8c5bd158258b9bf20ffe1329125d56cc4c677839e3213a206
s390x sssd-tools-2.9.4-5.el8_10.3.s390x.rpm dd45bdb014427f1390abac36ca39f626ed325df2152019575038ac87a1f01eeb
s390x sssd-2.9.4-5.el8_10.3.s390x.rpm e22df57a6d427001bb9f54dc05426f1826b5c68512eba4c242e8768f05cc20fc
s390x python3-libsss_nss_idmap-2.9.4-5.el8_10.3.s390x.rpm e285b9c56a2316a2960048aa96e4fe11be78dd0a02b63f755c2a15f45b5c4b12
s390x sssd-krb5-2.9.4-5.el8_10.3.s390x.rpm e75cb9927c2110e7b04b38f44b2b796cd88f90ec05419bce50ba1e5de08c8772
s390x libipa_hbac-2.9.4-5.el8_10.3.s390x.rpm e98a9cd39f987a4a515e050a7cd6c62831d70a81cf84ca28e801f37742e9ae2d
s390x sssd-ldap-2.9.4-5.el8_10.3.s390x.rpm f3210a16d55b7522906bfccd9a57476ec4bc2106b7a09ca2f00f6ff82b4f63fe
s390x sssd-dbus-2.9.4-5.el8_10.3.s390x.rpm f6267340ad999e9d08567e674ad20512fec4c32a7a5af2e56374e08ce9f93053
s390x python3-libipa_hbac-2.9.4-5.el8_10.3.s390x.rpm fbbcd9d1b6054d9d58639630b27e6dcb05e72c7b9565ee612d3c84309a89b5e4
s390x sssd-polkit-rules-2.9.4-5.el8_10.3.s390x.rpm fe298f4dc1c39c4947f27d0bdb4728a3e0e992a27ce5db8b56dfaee8ef6133fd
s390x sssd-winbind-idmap-2.9.4-5.el8_10.3.s390x.rpm fe583adb7bbb5ddc5e40d9abdb30e05c1b068dd0dc35d3cb4c0a6bab8e1e2886
x86_64 sssd-common-2.9.4-5.el8_10.3.x86_64.rpm 011669e1338548206edaab494f51ad1720594aefe6996adb12f2de5c57007a0f
x86_64 libsss_certmap-2.9.4-5.el8_10.3.x86_64.rpm 20f6995991b1044adfe3a9092acb63697fdc087a32df710c82b1ab492e31b61c
x86_64 libsss_nss_idmap-2.9.4-5.el8_10.3.x86_64.rpm 2a946e0c858c8d0be1768768536f660ea070818bc63dd99978dc1c523dfef3ba
x86_64 sssd-winbind-idmap-2.9.4-5.el8_10.3.x86_64.rpm 2b330de1945a240db2cf6b31acf194bd495a6266065ca9ae74714cb18e0547f7
x86_64 sssd-common-pac-2.9.4-5.el8_10.3.x86_64.rpm 2c18c93b5f8bc14a1e0206d49a4a7c003510f4b35c8b8045b08dd3de6138e08f
x86_64 libipa_hbac-2.9.4-5.el8_10.3.x86_64.rpm 32b93e18ba2a236fc8f32896d040470a681cb5d1d0d5ff3523803a95a495e698
x86_64 libsss_idmap-2.9.4-5.el8_10.3.x86_64.rpm 466f4a521ef673e1ff2bb9ee3499a942d79f7840f5dda7ab5dd969a6b4e9fe8a
x86_64 sssd-kcm-2.9.4-5.el8_10.3.x86_64.rpm 663bc4bf33b22933b8d6f0c83e9eac5c7513f0c52c0f63c0000bfa5acec100ae
x86_64 sssd-tools-2.9.4-5.el8_10.3.x86_64.rpm 79af2bd612dd623df93142dc40a47a6ce0d1030524025163780cb65ff58f3eaf
x86_64 sssd-polkit-rules-2.9.4-5.el8_10.3.x86_64.rpm 823c43944e52c01ddf56f708b3613b461092a9329d81ce88e0f1742334233df6
x86_64 sssd-krb5-2.9.4-5.el8_10.3.x86_64.rpm 9a4150efcdcad46acf537fba49c27804d5a8c4b5edc798df349188cd359aa39c
x86_64 sssd-client-2.9.4-5.el8_10.3.x86_64.rpm 9d420dbe6be11808f3c1e0f63134c1bad4268180527a3a5dbdd965afd2d8cd22
x86_64 sssd-ldap-2.9.4-5.el8_10.3.x86_64.rpm a032caf0001ff8facdea62314c3aa57d2cbfcbec7cd7539a2f556170163e948e
x86_64 sssd-2.9.4-5.el8_10.3.x86_64.rpm aa769cfb93b7c90f1d3449b11a4bba127d39459e13a3e20d3cade0d1465d82ef
x86_64 sssd-krb5-common-2.9.4-5.el8_10.3.x86_64.rpm b48c73125174c9c75d93bd4ccfb075e1488c3e8517df4631c3b429dcd66280b7
x86_64 sssd-idp-2.9.4-5.el8_10.3.x86_64.rpm b82c9d78de2ca56c0ce4f48aaa39f738af481f5d2828c0a3ea5d04964fff176f
x86_64 sssd-proxy-2.9.4-5.el8_10.3.x86_64.rpm bde427c9ee16e5b8c9720cd3005fbe257a7a9187a1174f33fd77b57073f17670
x86_64 sssd-ipa-2.9.4-5.el8_10.3.x86_64.rpm c23aded68521746b6d3afc14dee580529eabb38e54e2e77d2d81ad8aba0dc9ba
x86_64 python3-libipa_hbac-2.9.4-5.el8_10.3.x86_64.rpm cba9617bf5ee3b106b437c41deb8b9a9ca7e9024d8b556a13682357fed65f750
x86_64 sssd-nfs-idmap-2.9.4-5.el8_10.3.x86_64.rpm cf5363311f396195f069bd5b545a982344cab314beacbc7962aea658e31e693c
x86_64 python3-sss-murmur-2.9.4-5.el8_10.3.x86_64.rpm d71c645d26f9a2f0decaa277663f6a658d9c7f502088ca831036b8705c8c5c4d
x86_64 libsss_sudo-2.9.4-5.el8_10.3.x86_64.rpm d84daab74d8564dca7b95f9772f5f1ac29679078b630e99e532d3f3923acec7d
x86_64 libsss_nss_idmap-devel-2.9.4-5.el8_10.3.x86_64.rpm da98f2dff2638d121e7a00a4ce5f32149bd051e1dc82943b1cc765ebda98c7fd
x86_64 libsss_autofs-2.9.4-5.el8_10.3.x86_64.rpm dc897f6c683637ac63d21bd8cea1aa27bed0989873942f8a4b2a5a5a9af29146
x86_64 libsss_simpleifp-2.9.4-5.el8_10.3.x86_64.rpm dcb1f6f6d38422e460c1c3ed4f238aa88841f101a08eea65c2d3a3c3bff6f477
x86_64 sssd-ad-2.9.4-5.el8_10.3.x86_64.rpm df99523c5db743f57ef784416250d5a0925fa41f3206f8736adce0a95f26c7ee
x86_64 python3-sss-2.9.4-5.el8_10.3.x86_64.rpm e380db5c9ba0d2e494b6f7d761ae42a3235f8cc5934e65cb11ed9374b9f557f0
x86_64 sssd-dbus-2.9.4-5.el8_10.3.x86_64.rpm eb0d8fae4c700d486138ecce3f3a1f7a60c838c915372752bf93a12006d08bb7
x86_64 python3-libsss_nss_idmap-2.9.4-5.el8_10.3.x86_64.rpm f764c96cbda928649b7e0e996472e99b8970c4b90e8c867ee0f2d838a5694fd2
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.