gpp_maybe Security update for sssd

SUSE-SLE-Micro-5.5-2026-3195

This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (bsc#1270708).

• Release Date
  Jul 22 2026
• References
  Bugzilla: 1246196, 1270708, 1270709
  CVEs: CVE-2026-14474, CVE-2026-14476
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Micro 5.5 x86_64

• Packages
  libsss_certmap0
  FreeIPA ID mapping library

  2.5.2-150500.10.44.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.5.2-150500.10.44.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.5.2-150500.10.44.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd
  System Security Services Daemon

  2.5.2-150500.10.44.1 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-common
  Common files for the SSSD

  2.5.2-150500.10.44.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.5.2-150500.10.44.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.5.2-150500.10.44.1 lock rpm

SUSE Linux Enterprise Micro 5.5 aarch64

• Packages
  libsss_certmap0
  FreeIPA ID mapping library

  2.5.2-150500.10.44.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.5.2-150500.10.44.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.5.2-150500.10.44.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd
  System Security Services Daemon

  2.5.2-150500.10.44.1 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-common
  Common files for the SSSD

  2.5.2-150500.10.44.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.5.2-150500.10.44.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.5.2-150500.10.44.1 lock rpm

SUSE Linux Enterprise Micro 5.5 ppc64le

• Packages
  libsss_certmap0
  FreeIPA ID mapping library

  2.5.2-150500.10.44.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.5.2-150500.10.44.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.5.2-150500.10.44.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd
  System Security Services Daemon

  2.5.2-150500.10.44.1 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-common
  Common files for the SSSD

  2.5.2-150500.10.44.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.5.2-150500.10.44.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.5.2-150500.10.44.1 lock rpm

SUSE Linux Enterprise Micro 5.5 s390x

• Packages
  libsss_certmap0
  FreeIPA ID mapping library

  2.5.2-150500.10.44.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.5.2-150500.10.44.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.5.2-150500.10.44.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd
  System Security Services Daemon

  2.5.2-150500.10.44.1 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-common
  Common files for the SSSD

  2.5.2-150500.10.44.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.5.2-150500.10.44.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.5.2-150500.10.44.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.5.2-150500.10.44.1 lock rpm