[CLSA-2026:1784804056] sssd: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-23 10:54:43 UTC
Description:
- CVE-2026-14476: reject path traversal in the AD GPO gPCFileSysPath attribute, preventing writes outside the GPO cache directory - CVE-2026-14474: warn when ldap_sudo_search_base is unset and the sudo provider falls back to searching the entire directory tree for sudoRole objects
Updated packages:
  • libipa_hbac-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm
    sha:622c6122c7b5ebec1880d73c50ff8cb91af6e9acb05d46ab6a2610991518a46e
  • libipa_hbac-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:f328da4ba13f1dd1809d6f18e9ff3e694e8330ab6bf747f4cd19abbb4bdc2552
  • libipa_hbac-devel-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:9e9ee3defb19d7e15a3132f21625434060ca998a585a7917db565d7a802670ac
  • libsss_autofs-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:8515fbcb425889d75f8737366c1027d50ad62406fcbb7f7cb0720e6a5de2d151
  • libsss_certmap-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm
    sha:b883ced247481f47a3fb4e1e8a3a6ee6316a25723563386aa09e600ebf018825
  • libsss_certmap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:704e95bf35b0ad2c13b58fcbd4318fe68ad5e40c9393ee8034cd58301d2d8cbb
  • libsss_certmap-devel-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm
    sha:a92733489162a9ba0c245ca9b74ca645c65c563134732528717c67af77481116
  • libsss_certmap-devel-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:1e775d3221c071078ebdb3519a78ce58c4b9696a41fc241b114e647c1071ab6b
  • libsss_idmap-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm
    sha:613a243cf8480456f0bff8fca33bc0d405bb7532f88d92ae20d6bab298d1b33a
  • libsss_idmap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:9a428d66e4d7b09c159d2b6151e57dc669e3bd20626633710dfbe768527ed931
  • libsss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm
    sha:a4482c9bf8b3492cd7fa28c59233b93247840432f6c142e12f67413bc0905e36
  • libsss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:5adb8bd4362641ec0f6067dd3997316ca4867601852b5494fbe2432f987225a7
  • libsss_nss_idmap-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm
    sha:57b264bc0c12a4b90fdc0beac43861effa80be11a0252051084017a3f82b0b07
  • libsss_nss_idmap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:6629bde265715774dca13d8746780b672ee46dbf49a775bf1f438f4cb6371821
  • libsss_nss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm
    sha:fe6cfe6a63ebfee607bd9dd7a2e6ab2eb9a69e289dff353d86d159d0b3665603
  • libsss_nss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:10c31f38f158b2019b714f2bf28d6c6d243d52b707ff08a53b66aa90e8e3b3d1
  • libsss_simpleifp-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm
    sha:487b459938c01b6fd36ee9819d99b0a38bd0a6990e9a76f5b735fba4d3eb970a
  • libsss_simpleifp-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:d8e2af5f592df03f7e9b2fb786f66965b7942230ac6cfbf1aee66b3a9daf0295
  • libsss_simpleifp-devel-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:7be66467920cf7910e2825a9933dcc8bcab83ee697cb97af7ce41150a3a2f4ea
  • libsss_sudo-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:8cee197f114f2f5d428806b25f591f0b41cb5c24d401faebaf8695f61aa418f5
  • python3-libipa_hbac-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:2b55fec3097180ea3071ad590d0439508a352d57e599bbcd39c2c59a1056e270
  • python3-libsss_nss_idmap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:6866c62c54b682507b184a25063bde9498d375f2fc00b0c81c6b24b35226f771
  • python3-sss-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:576a986eaf512cfaaf03b7e9fc26f03fca883d746148b350ac5edd3c0f434257
  • python3-sss-murmur-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:9927caa0927636f2719b55141fb87029da6c4508a10bcb3eb99c46921bc7b88c
  • python3-sssdconfig-2.8.2-3.el9_2.alma.tuxcare.els3.noarch.rpm
    sha:43dcde863df72fc57af0cbb3a355761d7e31590939fd507d21ce7cf4f7ffd389
  • sssd-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:7a57106e118386158c1fcb7495d3d3bb507b631f06e02169c307d5c4ee768d1b
  • sssd-ad-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:5de602d666dd2fdeada6af18ba5e931df60542b73c8b8d16c22afb37991e88d3
  • sssd-client-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm
    sha:c5368e203372745ce53bcf9414cbb1c84b4a90a24d7594f624ef0df8ad3ecf63
  • sssd-client-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:9f4c959f8492dd08e2f38c9b0aa6c525b7fa6d6960b57cc4c579f2ff2cf2e176
  • sssd-common-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:0c3058de3426b58d55f820f83f1fbb99cc57d73aba6c8674b5f922b00af1fe4f
  • sssd-common-pac-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:b26c1cbd2d19817cf1f9d9f9a378d0a48114d779fbecedbcbec130b2ca158bf8
  • sssd-dbus-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:2a8ea9e07f755a7ac45d2a1f09f99eafb75bf30f48dbd42a88b66968a1c22fdf
  • sssd-idp-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:186750307000d475eafe083dff557f78304f11effa9b7599a1ff45af962f3be6
  • sssd-ipa-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:4536dfbcc96deac4b67a93d2e4d09e57be4c4c2e94610c59a5edffcba9ec0c69
  • sssd-kcm-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:0ef473942f4e62fc3f8d42642e8d06e08b1fa5ebcddc93fec72702bd3920376e
  • sssd-krb5-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:eb525cf05eae3ccb4c41199d5700ca09dbe440a2e4c3ac3f74e81585ec177e24
  • sssd-krb5-common-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:cb97da61cfc7f90e7cb124eb221b1eece6cd4f7682f042060a8f3e93d99bca92
  • sssd-ldap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:bcbb2561ff395d95f9f23f3c120096cad13aac40340da5e647e51bcfb1a8dfe6
  • sssd-nfs-idmap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:eb235526a62bbd406dd98d0b2c232ac64a17100c48cf3db6640ae225554b0e95
  • sssd-polkit-rules-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:fea7abb700cc58f60ff38fbb364e20fad1e07916627c4f343290bb611c5bc932
  • sssd-proxy-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:629c266732b2e00c1aaab102dc849a86a2a16a45a6a062ce00b50406e4966d30
  • sssd-tools-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:e0aca3d06aa199021436c8e44a2179c6ae7d3909f5b9293afe7d3d014a4c284c
  • sssd-winbind-idmap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm
    sha:df20dd009db22a165fae3501cd4198809cd9f44d790bd556c78a65799a47b37f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.