[ALSA-2026:42122] Important: sssd security update
Type:
security
Severity:
important
Release date:
2026-07-24
Description:
The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (CVE-2026-14474) * sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (CVE-2026-14476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 sssd-ipa-2.9.8-4.el9_8.1.aarch64.rpm 1c97a73ab2c45b585bc80e385a5084fcc77eaaba358bf3810481a8ed8a2d0dca
aarch64 sssd-client-2.9.8-4.el9_8.1.aarch64.rpm 251434a5b52643d1887424b73ef15ba52891d23d2630d8b1dfcc7afdd134cdb8
aarch64 libsss_idmap-2.9.8-4.el9_8.1.aarch64.rpm 2bf37669a6e8a11bf23d3b9d5e091f63528c488a7d0ddbffbcfb6a4ec2b603a3
aarch64 sssd-kcm-2.9.8-4.el9_8.1.aarch64.rpm 374b06efa2b70ba20213a479025d8d851d1db1e282ed53c6eefedde3c39ffc1d
aarch64 sssd-2.9.8-4.el9_8.1.aarch64.rpm 3cb0d64a67271727122136cee03eaa786c9c08b856593b47a79bb426d105d489
aarch64 libsss_simpleifp-2.9.8-4.el9_8.1.aarch64.rpm 493afc3c233cf546274a586973d58c97ad4c681a488c10c147c06522559aa783
aarch64 sssd-nfs-idmap-2.9.8-4.el9_8.1.aarch64.rpm 5dc2f49f3f3b47c309678d304f57296ce3b45471a1bdb2c3ce73bb7ca36e1413
aarch64 python3-libipa_hbac-2.9.8-4.el9_8.1.aarch64.rpm 68564eb49c09536a168528b37a4e9151cb21a820ab01b52f92e814ff5b5cab0b
aarch64 libipa_hbac-2.9.8-4.el9_8.1.aarch64.rpm 8581ca81b06be3604eebf79c6282b51df7a90001eaa1db795fc6836f74fe9a14
aarch64 sssd-krb5-2.9.8-4.el9_8.1.aarch64.rpm 8cfb8e09959a0f5f139a3665cadbb3e7c3565f0c26059ef3eb34f2cfb81503b3
aarch64 sssd-proxy-2.9.8-4.el9_8.1.aarch64.rpm 91018c4d895318812ec8177a7412d2ca7aef6f610469e35ed4f1ee730cbfa6ef
aarch64 libsss_autofs-2.9.8-4.el9_8.1.aarch64.rpm 945beb45d5165404a231fde1b1c514e90936ae9fc6d10cce2b65177256a2ac64
aarch64 python3-sss-2.9.8-4.el9_8.1.aarch64.rpm 94dba723357176935b4da11dea1c94c9181fe65ffeb3664c3e52599fc1061073
aarch64 python3-libsss_nss_idmap-2.9.8-4.el9_8.1.aarch64.rpm 953c9b5ebcc84029c52ddd4c36e4c155516b5b943037babdfe6eb7e431512d7e
aarch64 sssd-common-pac-2.9.8-4.el9_8.1.aarch64.rpm 988279bb178a33f90d8fc25064dea0f00e0bf52c09ed180ca75aac446df0bb19
aarch64 libsss_sudo-2.9.8-4.el9_8.1.aarch64.rpm a8a139a93114e11e81065aa73bad61c81198193e441c7c3d45447b75cfa57ee7
aarch64 libsss_certmap-2.9.8-4.el9_8.1.aarch64.rpm b8497a0754f79a336f7f16664941a09170f8c832e361adfc9114e179ebd8759c
aarch64 sssd-krb5-common-2.9.8-4.el9_8.1.aarch64.rpm cafc99e4912b2c32a5cb43c6317f6a97ce93bb819accb201a9942afdd91e0900
aarch64 sssd-common-2.9.8-4.el9_8.1.aarch64.rpm ce76c09b2d61abdb3d5651a124d138e584b9bc809adeae852a82532cef6894bd
aarch64 sssd-ad-2.9.8-4.el9_8.1.aarch64.rpm d50b72dc744eea5b94f156a013de006302952f33b4722d0305f9552c428760e0
aarch64 sssd-ldap-2.9.8-4.el9_8.1.aarch64.rpm d909a4f8fb00047bf9ca2ba9cde79adad6194786acc4c1935d7751787055189b
aarch64 libsss_nss_idmap-2.9.8-4.el9_8.1.aarch64.rpm e241812d186e9b87db8bfcd5dd49b9eeb3ef520041f5de5e0d941874ef218848
aarch64 python3-sss-murmur-2.9.8-4.el9_8.1.aarch64.rpm e3b72b052291a52b793dd9b3c83cc9a36cb8fc82d69a5588d9d3c824cfdf7f74
aarch64 sssd-dbus-2.9.8-4.el9_8.1.aarch64.rpm f017fdfc9b7fb6283fa3bf226ddc96d6b191f35e0030a779fd3dbdab238ec025
i686 libsss_nss_idmap-2.9.8-4.el9_8.1.i686.rpm 4cf36ce09a02ee8f764e38cef2e8fb92e1d5af0314146d5e36d660c2abc86d57
i686 libsss_certmap-2.9.8-4.el9_8.1.i686.rpm 7782c2dcca1448a19f0e5362dc1a3def9daf1a9f69feb5e7e14fdeeb8af3c22d
i686 libsss_idmap-2.9.8-4.el9_8.1.i686.rpm 81ad74422ef05dad7aa758f55e2ff35a6eff5cd8aad895837824dc11bd8ab5b8
i686 sssd-client-2.9.8-4.el9_8.1.i686.rpm 8da589d79751a88488954907723ee2a303071e1c5e32437632701900055ab2ee
i686 libipa_hbac-2.9.8-4.el9_8.1.i686.rpm b8dfde5d9520b66f82aad08f7209b444da29909e76cb1349479396e7edca5686
i686 libsss_simpleifp-2.9.8-4.el9_8.1.i686.rpm c99663d1221d80be8026d6db756a910ab1d6c2d90c3d98aa738c6fd6f3fafedb
noarch python3-sssdconfig-2.9.8-4.el9_8.1.noarch.rpm 28b26073151db0e1c5e86bf07621e25e15336fbce03424532426a208a66f1da2
ppc64le python3-libipa_hbac-2.9.8-4.el9_8.1.ppc64le.rpm 2339681f6cb1c5e41df9c36ff34d341879e83eeba1d8d6cc1d012705eb4abfc2
ppc64le libsss_idmap-2.9.8-4.el9_8.1.ppc64le.rpm 253e04fd5942142ed9d2b10e18312ab1242f0ef04e1b44e2badd247215c9caf9
ppc64le libipa_hbac-2.9.8-4.el9_8.1.ppc64le.rpm 3585bf30c656b808db2d093cb338e5567fb4b25239407326701fce16f75608e5
ppc64le sssd-client-2.9.8-4.el9_8.1.ppc64le.rpm 54d764f73a8f443bf951d8e8a5f7819899aa916f3cafb1e540b12c01330f89b4
ppc64le libsss_sudo-2.9.8-4.el9_8.1.ppc64le.rpm 576364da643a64e90e54398592eacc0cadca09bc4d63a182edf35ab3bbeec91a
ppc64le sssd-2.9.8-4.el9_8.1.ppc64le.rpm 6ab3a33851fd6f2d02e92aabed0e99ce3694a51de14c4278ed4e729fa7b4a0a5
ppc64le sssd-dbus-2.9.8-4.el9_8.1.ppc64le.rpm 749ff1da9be8c6375caabdc5b3772dd9e5dc238bcc40920ac6e48abfd1e4f748
ppc64le libsss_simpleifp-2.9.8-4.el9_8.1.ppc64le.rpm 79fe5e05722266771d0b3ea81745fd61591423ce914fefac9b8486714e7b6eb6
ppc64le python3-libsss_nss_idmap-2.9.8-4.el9_8.1.ppc64le.rpm 86c8124165a4f6bec0ae3efa5e60ce5bd9727af2f2c4450a1cc8368357120325
ppc64le python3-sss-2.9.8-4.el9_8.1.ppc64le.rpm 89b3684adc8f75d2588f78282df9e24c1737b2c712cf407835a3cc2c777a6fa4
ppc64le sssd-common-pac-2.9.8-4.el9_8.1.ppc64le.rpm 8aff506ff176a32b2617ea2e2aa1b8e4ae87bd6ae920a71ada6959ae51902148
ppc64le python3-sss-murmur-2.9.8-4.el9_8.1.ppc64le.rpm 981a6495cb29d041c4c0984a928f64bfb3c44ebea8f8735394f049410ccf2a05
ppc64le sssd-kcm-2.9.8-4.el9_8.1.ppc64le.rpm 9ab5ce121b423407e05843481647785152b7e1620e579a21463d0407c77ca5b9
ppc64le sssd-ipa-2.9.8-4.el9_8.1.ppc64le.rpm a53961593acc976d09d603b01ad9d8319e12897ac29a57183beab0109c47873a
ppc64le libsss_nss_idmap-2.9.8-4.el9_8.1.ppc64le.rpm ac189f852eeb6df7fd47fc84b771e0108589bc75e00bc239fc4b3a88b86d958a
ppc64le libsss_certmap-2.9.8-4.el9_8.1.ppc64le.rpm b48e1686a9f09b18db58578fae60919c7bf51658d972c4c06e688deb3cc15fdc
ppc64le sssd-common-2.9.8-4.el9_8.1.ppc64le.rpm c4af2b0135f31daefbfeb8f6c8b1516a9146b89cc221732feb96531bcc64cfaf
ppc64le sssd-krb5-common-2.9.8-4.el9_8.1.ppc64le.rpm ccec53d44a708f02c8f25801ac7e968f5f2b1a17420d9e6b7543756b7cfc5709
ppc64le sssd-ad-2.9.8-4.el9_8.1.ppc64le.rpm d3649eb5b15b712e92f28adee68c28bc1c7238d0a8ee30824362fe4cbb8d6936
ppc64le sssd-ldap-2.9.8-4.el9_8.1.ppc64le.rpm dd6f3e34b1595c702b1c781ab2b7bd917459b80dc2c1914e2fce2902e3958703
ppc64le sssd-nfs-idmap-2.9.8-4.el9_8.1.ppc64le.rpm dd8fe008abd509587b24c618652a01dc80b02df358659a673e16fadae953b606
ppc64le libsss_autofs-2.9.8-4.el9_8.1.ppc64le.rpm ddfff009c83d6f9729da92d1c54e56100f073c817436e9369fb0f9fe0ba335dc
ppc64le sssd-krb5-2.9.8-4.el9_8.1.ppc64le.rpm ee860de09578ecdab96f54c14804c026e869f7cc2e6c01cd32d1a2ac7b73c9d3
s390x libsss_sudo-2.9.8-4.el9_8.1.s390x.rpm 054c6acead48125f40c63f18a54323223e4e77c86cebdd9c78c95848518778be
s390x libipa_hbac-2.9.8-4.el9_8.1.s390x.rpm 07d026afa4245ea82c358f8a33a12156851b7426757fdaa7efe7dc78980ac8b7
s390x sssd-nfs-idmap-2.9.8-4.el9_8.1.s390x.rpm 091b7af329f59a79f86216813eb2302e7cca4ff261ce39034692d199dd168576
s390x python3-sss-2.9.8-4.el9_8.1.s390x.rpm 107a10a713b9ba31eae14f70e459bd7b71bdaa727d31da2bc4173725db2255c8
s390x sssd-dbus-2.9.8-4.el9_8.1.s390x.rpm 2601cdfd92fb6c235d485cdfdc05bf0eb6939b7a33e73331f7b0f484631d29a0
s390x python3-libipa_hbac-2.9.8-4.el9_8.1.s390x.rpm 340a700a74b810c98462a0a15d9b96f63ca470dbcdee72df827621928282b5c1
s390x sssd-kcm-2.9.8-4.el9_8.1.s390x.rpm 397fc64cc337cc07080d246618fe7cc0141481beebc5bb133fd01b6d1a9e97a3
s390x libsss_idmap-2.9.8-4.el9_8.1.s390x.rpm 4048e11dfa8a33648f1f6baa186b4f67ffd26dcdfe35fb21546cfbab16383c0a
s390x sssd-2.9.8-4.el9_8.1.s390x.rpm 40ca49473ae9baed0bf9cefe33260975cec0152a3ff8e62f736b554412aa27f7
s390x libsss_simpleifp-2.9.8-4.el9_8.1.s390x.rpm 467acd883116e5c8b03411cac771be4c4ef1a1d567d1417985dd4b05a4e672f9
s390x libsss_certmap-2.9.8-4.el9_8.1.s390x.rpm 4d1f1d9e9099caa0bba7695aee98199fadd5c4662d855b7eb54b4708fd4f3db2
s390x sssd-ldap-2.9.8-4.el9_8.1.s390x.rpm 764b80b112352cbbbc675a56035e56812a3bfc1e6a56072fbfe0016cffa84c97
s390x sssd-krb5-common-2.9.8-4.el9_8.1.s390x.rpm 9590fe92d1c82322994c5c3e7d11bd276c3efb6efaf05ccda9b39de94f28fc15
s390x sssd-ipa-2.9.8-4.el9_8.1.s390x.rpm 9e446b5b4ffac379f46cc7351042de319900b5ea310e2219f854afad070eac90
s390x python3-sss-murmur-2.9.8-4.el9_8.1.s390x.rpm a2d7c58096c54a43313fc71a4fcdd9a955dfb3fc03881b6e7721ea6d7f43f5ac
s390x libsss_nss_idmap-2.9.8-4.el9_8.1.s390x.rpm b4cce7252f1c2e95593fcd65d68ff11f50d14eeae62898b37fcc3293e100475a
s390x sssd-krb5-2.9.8-4.el9_8.1.s390x.rpm c16f41cc34d8d2c9cefcbf523342afa5552685a03171f9b25e166dccf8b9ce94
s390x libsss_autofs-2.9.8-4.el9_8.1.s390x.rpm d8a38b8a91133b09832e3e13792665cc88ccab32876c67cae5c7e072a89888c2
s390x sssd-client-2.9.8-4.el9_8.1.s390x.rpm e65b220c8c902a26010fcb8902e4852f9277a2c0a67753b4f1f8e2121e77f529
s390x sssd-ad-2.9.8-4.el9_8.1.s390x.rpm f226248c98280cbf64e11bf9394789bfc21caa793cabe8c32253b4837a850369
s390x sssd-common-pac-2.9.8-4.el9_8.1.s390x.rpm f56df23d9fea2abb854e684c16ed229a25ea2aabca2f523844181ce3eb8a0481
s390x sssd-common-2.9.8-4.el9_8.1.s390x.rpm f9429e6e8d421399c89b91bc04b962b9c9a07fd0ef2b37ad2a50dbc7e0ba086b
s390x python3-libsss_nss_idmap-2.9.8-4.el9_8.1.s390x.rpm fca916e15b2766d63a4cd6d78985b186396ae0e90ac33d615bc8f0beb90ab5ec
x86_64 libipa_hbac-2.9.8-4.el9_8.1.x86_64.rpm 051a66d2c230c3102b9cad29162bde4e48f9dde4f0113f76d2967606a1ed683a
x86_64 libsss_simpleifp-2.9.8-4.el9_8.1.x86_64.rpm 0bdd1c1028f5aaaa7d628c935608d571c61a0839ac56fb4e97482143a8a6c65d
x86_64 sssd-common-2.9.8-4.el9_8.1.x86_64.rpm 166281ccc0320033bfe39d6053274dc46072112c36126da57f654e8f21a6803f
x86_64 sssd-common-pac-2.9.8-4.el9_8.1.x86_64.rpm 26146e6141c3e8dbad300ae1c4a800bfa27329bca29d644fb5ec4ecec69c9fc1
x86_64 python3-libsss_nss_idmap-2.9.8-4.el9_8.1.x86_64.rpm 2a36afd6eb070452e7bb519ba1a585cc5250770852b71708b15d0680cf5bbaa1
x86_64 sssd-krb5-common-2.9.8-4.el9_8.1.x86_64.rpm 2c6005326c07ae6932ec8cdd450e9146ddad15959578feab81f62129405fe1b8
x86_64 sssd-ipa-2.9.8-4.el9_8.1.x86_64.rpm 33b346d2e8231dce44369efebab1b83c896f66e615749fb1a6bef546adee1a4d
x86_64 sssd-ad-2.9.8-4.el9_8.1.x86_64.rpm 47f06ef23701a062a144a3834f025fbe09db0c1158eb0c7573bf8e2ef2ec88c6
x86_64 libsss_sudo-2.9.8-4.el9_8.1.x86_64.rpm 492b34ecbf0e7a6169a59096acd40bb97de457b6bb4c147fbc3eb10058ea284c
x86_64 python3-sss-murmur-2.9.8-4.el9_8.1.x86_64.rpm 578df39f08eb77fb31f7a42d2bbf7deaef5eaac64cd6882a432411bcf4819862
x86_64 libsss_nss_idmap-2.9.8-4.el9_8.1.x86_64.rpm 666e05a2c382c7068aec5980c358941441771741bee5214b7957776528a854bd
x86_64 sssd-client-2.9.8-4.el9_8.1.x86_64.rpm 96fd88d0a2223b2cd35463c843dcb2d2fa3bb520b2b891da7cb53b36c006b9df
x86_64 libsss_certmap-2.9.8-4.el9_8.1.x86_64.rpm 9b025324ee38ea380afeea0bdb808f60357553e2d277c0d66bf94553e25f3ddb
x86_64 sssd-2.9.8-4.el9_8.1.x86_64.rpm 9bac472a2a44fcb3898041ec48aa2df60192e008150a6374f448bda904c2a2f8
x86_64 libsss_autofs-2.9.8-4.el9_8.1.x86_64.rpm 9e58a797993bbbdf48ea8e4aafbb659ae54388d7db37eb16268d291ae597f61c
x86_64 sssd-dbus-2.9.8-4.el9_8.1.x86_64.rpm a6e3fa2fd5c077714859aa56ba738fbb27d23228c76e05349c101d507ba8015e
x86_64 sssd-krb5-2.9.8-4.el9_8.1.x86_64.rpm afceabad78e2201155da86094f9d27e7e67bc8cdfd8832f43885d7b2bf1bb352
x86_64 sssd-ldap-2.9.8-4.el9_8.1.x86_64.rpm bd8dce73fb58502e8290e463442d5f02d334ccd918c2263128dc928b61a0890a
x86_64 python3-libipa_hbac-2.9.8-4.el9_8.1.x86_64.rpm c04f7ca050a76ab4f8dfecd44f6c09fb0ceba94561db652646b2a4e2833c227b
x86_64 python3-sss-2.9.8-4.el9_8.1.x86_64.rpm d28b6d921c30c1987969171fe49cccd676d567c7891b501d962f2e094e3da9ff
x86_64 sssd-kcm-2.9.8-4.el9_8.1.x86_64.rpm d46bf5bc8206602d17337af3e3a5a276c7916b189cccb1ea27f4b54953e61e87
x86_64 sssd-nfs-idmap-2.9.8-4.el9_8.1.x86_64.rpm df336ea1d6d3ae1cedf66d6a37d96c9f8f5bee08da3afa4299fad2b272d8f298
x86_64 libsss_idmap-2.9.8-4.el9_8.1.x86_64.rpm f14bfd70e8505de641443fde1b55c0889a22a202f4d25ec1b3e25d38b26f254f
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.