Every CVE Search/ Get API key

CVE-2025-11561

Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

8.8 HighFix available

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.82%Up 0.8 points since Oct 10, 2025
90%50%10%1%

What each source reports

CVE List Score used 8.8

Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.

Record
CVE-2025-11561
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-269
Updated
2026-11-04
EUVDEUVD-2025-33347 8.8

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.

Record
EUVD-2025-33347
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-04
GitHub AdvisoriesGHSA-gj84-8vfx-q3vm 8.8

A flaw was found in the integration of Active Directory and the System Security Services Daemon ...

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, SSSD does not enable the Kerberos local authentication plugin (sssd_krb5_localauth_plugin), allowing an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users. This can result in unauthorized access or privilege escalation on domain-joined Linux hosts.

Record
GHSA-gj84-8vfx-q3vm
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-269
Updated
2026-11-02
NVD 8.8

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.

Record
CVE-2025-11561
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-269
Updated
2026-11-04
OSV 8.8

Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.

Record
CVE-2025-11561
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-269
Updated
2026-11-05
OSVDEBIAN-CVE-2025-11561 8.8

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.

Record
DEBIAN-CVE-2025-11561
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-07
Show 42 moreShow less
OSVOESA-2025-2514 8.8

sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.

Security Fix(es):

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, SSSD does not enable the Kerberos local authentication plugin (sssd_krb5_localauth_plugin), allowing an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users. This can result in unauthorized access or privilege escalation on domain-joined Linux hosts.(CVE-2025-11561)

Record
OESA-2025-2514
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2515 8.8

sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.

Security Fix(es):

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, SSSD does not enable the Kerberos local authentication plugin (sssd_krb5_localauth_plugin), allowing an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users. This can result in unauthorized access or privilege escalation on domain-joined Linux hosts.(CVE-2025-11561)

Record
OESA-2025-2515
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2516 8.8

sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.

Security Fix(es):

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, SSSD does not enable the Kerberos local authentication plugin (sssd_krb5_localauth_plugin), allowing an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users. This can result in unauthorized access or privilege escalation on domain-joined Linux hosts.(CVE-2025-11561)

Record
OESA-2025-2516
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2517 8.8

sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.

Security Fix(es):

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, SSSD does not enable the Kerberos local authentication plugin (sssd_krb5_localauth_plugin), allowing an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users. This can result in unauthorized access or privilege escalation on domain-joined Linux hosts.(CVE-2025-11561)

Record
OESA-2025-2517
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2518 8.8

sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.

Security Fix(es):

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, SSSD does not enable the Kerberos local authentication plugin (sssd_krb5_localauth_plugin), allowing an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users. This can result in unauthorized access or privilege escalation on domain-joined Linux hosts.(CVE-2025-11561)

Record
OESA-2025-2518
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2579 8.8

sssd security update

SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms such as LDAP, Kerberos or FreeIPA. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources.

Security Fix(es):

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, SSSD does not enable the Kerberos local authentication plugin (sssd_krb5_localauth_plugin), allowing an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users. This can result in unauthorized access or privilege escalation on domain-joined Linux hosts.(CVE-2025-11561)

Record
OESA-2025-2579
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19610 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:19610
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19847 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:19847
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19848 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:19848
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19849 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:19849
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19850 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:19850
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19851 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:19851
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19852 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:19852
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19853 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:19853
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19854 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:19854
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19859 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:19859
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:20954 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:20954
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21020 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:21020
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21067 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2025:21067
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:19610 8.8

Important: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:19610
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:20954 8.8

Important: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:20954
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:21020 8.8

Important: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:21020
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-11561 8.8

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.

Record
UBUNTU-CVE-2025-11561
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:19610 No score

Important: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:19610
Updated
2026-11-02
OSVALSA-2025:20954 No score

Important: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:20954
Updated
2026-11-02
OSVALSA-2025:21020 No score

Important: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:21020
Updated
2026-11-02
OSVCLSA-2025-1763371827 No score

sssd: Fix of CVE-2025-11561

  • CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal
Record
CLSA-2025-1763371827
Updated
2026-11-02
OSVCLSA-2025-1763397525 No score

sssd: Fix of CVE-2025-11561

  • CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal
Record
CLSA-2025-1763397525
Updated
2026-11-02
OSVCLSA-2025-1764028069 No score

sssd: Fix of CVE-2025-11561

  • CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal
Record
CLSA-2025-1764028069
Updated
2026-11-02
OSVCLSA-2025-1766075810 No score

sssd: Fix of CVE-2025-11561

  • CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal
Record
CLSA-2025-1766075810
Updated
2026-11-02
OSVopenSUSE-SU-2025:15751-1 No score

libipa_hbac-devel-2.11.1-2.1 on GA media

These are all security issues fixed in the libipa_hbac-devel-2.11.1-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15751-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20001-1 No score

Security update for sssd

This update for sssd fixes the following issues:

  • CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325)
Record
openSUSE-SU-2026:20001-1
Updated
2026-11-02
OSVSUSE-SU-2025:21066-1 No score

Security update for sssd

This update for sssd fixes the following issues:

  • CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1251827)

Other fixes:

  • Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325)
Record
SUSE-SU-2025:21066-1
Updated
2026-11-02
OSVSUSE-SU-2025:21084-1 No score

Security update for sssd

This update for sssd fixes the following issues:

  • CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1251827)

Other fixes:

  • Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325)
Record
SUSE-SU-2025:21084-1
Updated
2026-11-02
OSVSUSE-SU-2025:4181-1 No score

Security update for sssd

This update for sssd fixes the following issues:

  • CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827)

Other fixes:

  • Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325)
Record
SUSE-SU-2025:4181-1
Updated
2026-11-02
OSVSUSE-SU-2025:4182-1 No score

Security update for sssd

This update for sssd fixes the following issues:

  • CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827)

Other fixes:

  • Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325)
Record
SUSE-SU-2025:4182-1
Updated
2026-11-02
OSVSUSE-SU-2025:4183-1 No score

Security update for sssd

This update for sssd fixes the following issues:

  • CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827)
Record
SUSE-SU-2025:4183-1
Updated
2026-11-02
OSVSUSE-SU-2025:4231-1 No score

Security update for sssd

This update for sssd fixes the following issues:

  • CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827)

Other fixes:

  • Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325)
Record
SUSE-SU-2025:4231-1
Updated
2026-11-02
OSVSUSE-SU-2025:4232-1 No score

Security update for sssd

This update for sssd fixes the following issues:

  • CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827)

Other fixes:

  • Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325)
Record
SUSE-SU-2025:4232-1
Updated
2026-11-02
OSVSUSE-SU-2025:4247-1 No score

Security update for sssd

This update for sssd fixes the following issues:

  • CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827)
Record
SUSE-SU-2025:4247-1
Updated
2026-11-02
OSVSUSE-SU-2026:20014-1 No score

Security update for sssd

This update for sssd fixes the following issues:

  • CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325)
Record
SUSE-SU-2026:20014-1
Updated
2026-11-02
OSVSUSE-SU-2026:20019-1 No score

Security update for sssd

This update for sssd fixes the following issues:

  • CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325)
Record
SUSE-SU-2026:20019-1
Updated
2026-11-02

Affected products

Show 16 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
libipa_hbac
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
libsss_autofs
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
libsss_certmap
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
libsss_idmap
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
libsss_nss_idmap
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
libsss_nss_idmap-devel
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
libsss_simpleifp
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
libsss_sudo
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
python3-libipa_hbac
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
python3-libsss_nss_idmap
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
Show 290 moreShow less
Affected packages
PackageAffectedFixed
python3-sss
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
python3-sss-murmur
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
python3-sssdconfig
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-ad
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-client
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-common
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-common-pac
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-dbus
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-idp
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-ipa
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-kcm
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-krb5
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-krb5-common
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-ldap
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-nfs-idmap
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-polkit-rules
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-proxy
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-tools
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
sssd-winbind-idmap
AlmaLinux:8
 before 2.9.4-5.el8_10.3
2.9.4-5.el8_10.3
libipa_hbac
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
libsss_autofs
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
libsss_certmap
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
libsss_idmap
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
libsss_nss_idmap
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
libsss_nss_idmap-devel
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
libsss_simpleifp
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
libsss_sudo
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
python3-libipa_hbac
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
python3-libsss_nss_idmap
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
python3-sss
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
python3-sss-murmur
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
python3-sssdconfig
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-ad
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-client
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-common
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-common-pac
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-dbus
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-idp
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-ipa
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-kcm
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-krb5
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-krb5-common
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-ldap
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-nfs-idmap
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-passkey
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-polkit-rules
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-proxy
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-tools
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
sssd-winbind-idmap
AlmaLinux:9
 before 2.9.7-4.el9_7.1
2.9.7-4.el9_7.1
python3-sssdconfig
AlmaLinux:10
 before 2.11.1-2.el10_1.1
2.11.1-2.el10_1.1
libipa_hbac
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libipa_hbac-devel
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_autofs
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_certmap
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_certmap-devel
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_idmap
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_idmap-devel
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_nss_idmap
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_nss_idmap-devel
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_simpleifp
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_simpleifp-devel
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_sudo
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
python-libipa_hbac
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
python-libsss_nss_idmap
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
python-sss
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
python-sss-murmur
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
python-sssdconfig
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-ad
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-client
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-common
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-common-pac
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-dbus
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-ipa
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-kcm
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-krb5
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-krb5-common
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-ldap
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-libwbclient
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-libwbclient-devel
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-polkit-rules
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-proxy
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-tools
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-winbind-idmap
TuxCare:OracleLinux:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libipa_hbac
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libipa_hbac-devel
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_autofs
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_certmap
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_certmap-devel
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_idmap
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_idmap-devel
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_nss_idmap
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_nss_idmap-devel
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_simpleifp
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_simpleifp-devel
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libsss_sudo
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
python-libipa_hbac
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
python-libsss_nss_idmap
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
python-sss
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
python-sss-murmur
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
python-sssdconfig
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-ad
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-client
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-common
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-common-pac
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-dbus
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-ipa
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-kcm
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-krb5
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-krb5-common
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-ldap
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-libwbclient
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-libwbclient-devel
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-polkit-rules
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-proxy
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-tools
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
sssd-winbind-idmap
TuxCare:CentOS:7
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els1
1.16.5-10.0.3.el7_9.16.tuxcare.els1
libipa_hbac
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
libipa_hbac-devel
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
libsss_autofs
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
libsss_certmap
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
libsss_certmap-devel
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
libsss_idmap
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
libsss_idmap-devel
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
libsss_nss_idmap
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
libsss_nss_idmap-devel
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
libsss_simpleifp
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
libsss_simpleifp-devel
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
libsss_sudo
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
python3-libipa_hbac
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
python3-libsss_nss_idmap
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
python3-sss
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
python3-sss-murmur
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
python3-sssdconfig
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
sssd
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
sssd-ad
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
sssd-client
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
sssd-common
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
sssd-common-pac
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
sssd-dbus
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
sssd-idp
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
sssd-ipa
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
sssd-kcm
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
sssd-krb5
TuxCare:AlmaLinux:9.2
 before 2.8.2-3.el9_2.alma.tuxcare.els2
2.8.2-3.el9_2.alma.tuxcare.els2
sssd
Debian:12
 All versions, plus listed versions
2.10.1-12.10.1-22.11.1-12.11.1-22.11.1-2.1
Show 22 moreShow less
2.12.0-12.12.0-22.12.0-3~exp02.12.0-42.13.1-12.13.1-22.13.1-32.13.1-42.8.2-42.8.2-4+deb12u12.9.1-12.9.1-22.9.2-12.9.4-12.9.4-1.12.9.4-1.1~exp12.9.4-22.9.5-12.9.5-22.9.5-32.9.5-42.9.5-5
 None known
sssd
Debian:13
 All versions, plus listed versions
2.10.1-22.11.1-12.11.1-22.11.1-2.12.12.0-1
Show 7 moreShow less
2.12.0-22.12.0-3~exp02.12.0-42.13.1-12.13.1-22.13.1-32.13.1-4
 None known
sssd
Debian:14
 before 2.12.0-1, plus listed versions
2.10.1-22.11.1-12.11.1-22.11.1-2.1
2.12.0-1
sssd
openEuler:20.03-LTS-SP4
 before 2.2.2-22.oe2003sp4
2.2.2-22.oe2003sp4
sssd
openEuler:22.03-LTS-SP3
 before 2.6.1-22.oe2203sp3
2.6.1-22.oe2203sp3
sssd
openEuler:22.03-LTS-SP4
 before 2.6.1-22.oe2203sp4
2.6.1-22.oe2203sp4
sssd
openEuler:24.03-LTS
 before 2.9.4-15.oe2403
2.9.4-15.oe2403
sssd
openEuler:24.03-LTS-SP1
 before 2.9.4-15.oe2403sp1
2.9.4-15.oe2403sp1
sssd
openEuler:24.03-LTS-SP2
 before 2.9.4-15.oe2403sp2
2.9.4-15.oe2403sp2
libipa_hbac-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_autofs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_certmap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_idmap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_nss_idmap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_simpleifp-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_sudo-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-libipa_hbac-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-libsss_nss_idmap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-sss-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-sss-murmur-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-ad-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-client-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-common-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-common-pac-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-dbus-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-idp
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-idp-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-ipa-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-kcm-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-krb5-common-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-krb5-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-nfs-idmap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-proxy-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-winbind-idmap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libipa_hbac
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libipa_hbac-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_autofs
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_autofs-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_certmap
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_certmap-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_idmap
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_idmap-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_nss_idmap
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_nss_idmap-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_simpleifp
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_simpleifp-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_sudo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_sudo-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-libipa_hbac
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-libipa_hbac-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-libsss_nss_idmap
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-libsss_nss_idmap-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-sss
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-sss-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-sss-murmur
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-sss-murmur-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-sssdconfig
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-ad
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-ad-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-client
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-client-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-common
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-common-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-common-pac
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-common-pac-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-dbus
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-dbus-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-idp-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-ipa
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-ipa-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-kcm
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-kcm-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-krb5
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-krb5-common
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-krb5-common-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-krb5-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-ldap
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-ldap-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-nfs-idmap
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-nfs-idmap-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-polkit-rules
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-proxy
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-proxy-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-tools
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-winbind-idmap
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd-winbind-idmap-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libipa_hbac-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_autofs-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_certmap-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_idmap-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_nss_idmap-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_nss_idmap-devel
Red Hat:enterprise_linux:8::crb
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_simpleifp-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
libsss_sudo-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-libipa_hbac-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
python3-libsss_nss_idmap-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd
Rocky Linux:8
 before 0:2.9.4-5.el8_10.3
0:2.9.4-5.el8_10.3
sssd
Rocky Linux:9
 before 0:2.9.7-4.el9_7.1
0:2.9.7-4.el9_7.1
sssd
Rocky Linux:10
 before 0:2.11.1-2.el10_1.1
0:2.11.1-2.el10_1.1
sssd
SUSE:Linux Micro 6.1
 before 2.9.5-slfo.1.1_4.1
2.9.5-slfo.1.1_4.1
sssd
SUSE:Linux Micro 6.0
 before 2.8.2-7.1
2.8.2-7.1
sssd
SUSE:Linux Enterprise Micro 5.3
 before 2.5.2-150400.4.40.1
2.5.2-150400.4.40.1
sssd
SUSE:Linux Enterprise Micro 5.4
 before 2.5.2-150400.4.40.1
2.5.2-150400.4.40.1
sssd
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 2.5.2-150400.4.40.1
2.5.2-150400.4.40.1
sssd
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 2.5.2-150400.4.40.1
2.5.2-150400.4.40.1
sssd
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 2.5.2-150400.4.40.1
2.5.2-150400.4.40.1
sssd
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 2.5.2-150400.4.40.1
2.5.2-150400.4.40.1
sssd
SUSE:Manager Proxy LTS 4.3
 before 2.5.2-150400.4.40.1
2.5.2-150400.4.40.1
sssd
SUSE:Manager Server LTS 4.3
 before 2.5.2-150400.4.40.1
2.5.2-150400.4.40.1
sssd
SUSE:Linux Enterprise Micro 5.5
 before 2.5.2-150500.10.39.1
2.5.2-150500.10.39.1
sssd
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 2.5.2-150500.10.39.1
2.5.2-150500.10.39.1
sssd
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 2.5.2-150500.10.39.1
2.5.2-150500.10.39.1
sssd
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 2.5.2-150500.10.39.1
2.5.2-150500.10.39.1
sssd
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 2.5.2-150500.10.39.1
2.5.2-150500.10.39.1
sssd
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 2.9.3-150700.9.9.1
2.9.3-150700.9.9.1
sssd
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 1.16.1-150300.23.56.1
1.16.1-150300.23.56.1
sssd
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 1.16.1-150300.23.56.1
1.16.1-150300.23.56.1
sssd
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 1.16.1-150300.23.56.1
1.16.1-150300.23.56.1
sssd
SUSE:Linux Enterprise Micro 5.2
 before 1.16.1-150300.23.56.1
1.16.1-150300.23.56.1
sssd
SUSE:Enterprise Storage 7.1
 before 1.16.1-150300.23.56.1
1.16.1-150300.23.56.1
sssd
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 1.16.1-7.68.1
1.16.1-7.68.1
sssd
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 1.16.1-7.68.1
1.16.1-7.68.1
sssd
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 2.9.3-150600.3.28.1
2.9.3-150600.3.28.1
sssd
openSUSE:Leap 15.6
 before 2.9.3-150600.3.28.1
2.9.3-150600.3.28.1
sssd
SUSE:Linux Micro 6.2
 before 2.9.5-160000.3.1
2.9.5-160000.3.1
sssd
SUSE:Linux Enterprise Server 16.0
 before 2.9.5-160000.3.1
2.9.5-160000.3.1
sssd
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 2.9.5-160000.3.1
2.9.5-160000.3.1
sssd
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.12.5-21.13.1-21.13.2-11.13.3-11.13.4-1
Show 15 moreShow less
1.13.4-1ubuntu11.13.4-1ubuntu1.11.13.4-1ubuntu1.21.13.4-1ubuntu1.51.13.4-1ubuntu1.61.13.4-1ubuntu1.71.13.4-1ubuntu1.81.13.4-1ubuntu1.91.13.4-1ubuntu1.101.13.4-1ubuntu1.111.13.4-1ubuntu1.121.13.4-1ubuntu1.131.13.4-1ubuntu1.141.13.4-1ubuntu1.151.13.4-1ubuntu1.15+esm1
 None known
sssd
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.15.3-2ubuntu11.15.3-3ubuntu11.16.0-5ubuntu11.16.0-5ubuntu21.16.1-1ubuntu1
Show 9 moreShow less
1.16.1-1ubuntu1.11.16.1-1ubuntu1.21.16.1-1ubuntu1.31.16.1-1ubuntu1.41.16.1-1ubuntu1.51.16.1-1ubuntu1.61.16.1-1ubuntu1.71.16.1-1ubuntu1.81.16.1-1ubuntu1.8+esm1
 None known
sssd
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.2.0-4ubuntu12.2.2-12.2.2-1ubuntu12.2.3-1.1ubuntu12.2.3-2
Show 14 moreShow less
2.2.3-32.2.3-3ubuntu0.12.2.3-3ubuntu0.22.2.3-3ubuntu0.32.2.3-3ubuntu0.42.2.3-3ubuntu0.62.2.3-3ubuntu0.72.2.3-3ubuntu0.82.2.3-3ubuntu0.92.2.3-3ubuntu0.102.2.3-3ubuntu0.112.2.3-3ubuntu0.122.2.3-3ubuntu0.132.2.3-3ubuntu0.13+esm1
 None known
sssd
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.4.1-2ubuntu42.5.2-4ubuntu12.5.2-4ubuntu32.5.2-4ubuntu42.6.1-1ubuntu3
Show 9 moreShow less
2.6.3-1ubuntu32.6.3-1ubuntu3.12.6.3-1ubuntu3.22.6.3-1ubuntu3.32.6.3-1ubuntu3.42.6.3-1ubuntu3.52.6.3-1ubuntu3.62.6.3-1ubuntu3.82.6.3-1ubuntu3.9
 None known
sssd
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.9.1-2ubuntu22.9.1-2ubuntu32.9.2-1ubuntu22.9.4-1ubuntu12.9.4-1.1ubuntu3
Show 10 moreShow less
2.9.4-1.1ubuntu52.9.4-1.1ubuntu62.9.4-1.1ubuntu6.12.9.4-1.1ubuntu6.22.9.4-1.1ubuntu6.32.9.4-1.1ubuntu6.42.9.4-1.1ubuntu6.52.9.4-1.1ubuntu6.62.9.4-1.1ubuntu6.72.9.4-1.1ubuntu6.8
 None known
sssd
Ubuntu:25.10
 All versions, plus listed versions
2.10.1-2ubuntu42.10.1-2ubuntu52.10.1-2ubuntu5.12.10.1-2ubuntu5.22.10.1-2ubuntu5.3
 None known
sssd
openSUSE:Tumbleweed
 before 2.11.1-2.1
2.11.1-2.1
sssd
openSUSE:Leap 16.0
 before 2.9.5-160000.3.1
2.9.5-160000.3.1

History

History
RecordedChangedSources
affectedOSV
affectedEUVD, NVD, OSV
facts, productsCVE List
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-11561 is a high vulnerability (CVSS 8.8) in Red Hat Ceph Storage 7, published October 9, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.82%, the 57th percentile. Fixed in libipa_hbac 2.9.4-5.el8_10.3.

References

Show 75 moreShow less
This page doesn't list everything

Left out here: 1,210 package rows. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open