Most recent entries from all

ALSA-2026:41937 — Important: sssd security update

Affected: AlmaLinux:10: libipa_hbac, AlmaLinux:10: libsss_autofs, AlmaLinux:10: libsss_certmap, AlmaLinux:10: libsss_idmap, AlmaLinux:10: libsss_nss_idmap, AlmaLinux:10: libsss_nss_idmap-devel, AlmaLinux:10: libsss_sudo, AlmaLinux:10: python3-libipa_hbac, AlmaLinux:10: python3-libsss_nss_idmap, AlmaLinux:10: python3-sss and 19 more

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

* sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (CVE-2026-14474) * sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (CVE-2026-14476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

certfr-2026-avi-1094 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2026-avi-1094

EUVD-2026-363461

fkie_cve-2026-14474

A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo privileges on all SSSD-enrolled hosts.

GHSA-2vq9-j58h-2qj3

OESA-2026-3149 — sssd security update

Affected: openEuler:24.03-LTS-SP1: sssd

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA. Security Fix(es):

openSUSE-SU-2026:21290-1 — Security update for sssd

Security update for sssd

RHSA-2026:46482 — Red Hat Security Advisory: sssd security update

sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass

RLSA-2026:41937 — Important: sssd security update

Affected: Rocky Linux:10: sssd

Security Fix(es):

* sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (CVE-2026-14474)

* sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (CVE-2026-14476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:22591-1 — Security update for sssd

Security update for sssd

UBUNTU-CVE-2026-14474

Affected: Ubuntu:Pro:16.04:LTS: sssd, Ubuntu:Pro:18.04:LTS: sssd, Ubuntu:Pro:20.04:LTS: sssd, Ubuntu:22.04:LTS: sssd, Ubuntu:24.04:LTS: sssd, Ubuntu:25.10: sssd, Ubuntu:26.04:LTS: sssd

WID-SEC-W-2026-2419 — Red Hat Enterprise Linux (sssd, glib, c-ares): Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und einen Denial-of-Service-Zustand auszulösen.