gpp_maybe Security update for sssd

SUSE-SLES-16.0-119

This update for sssd fixes the following issues: - CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325)

• Release Date
  Jan 2 2026
• References
  Bugzilla: 1251827, 1244325
  CVEs: CVE-2025-11561
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  libnfsidmap-sss
  Library to allow communication between libnfsidmap and SSSD

  2.9.5-160000.3.1 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  2.9.5-160000.3.1 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.9.5-160000.3.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.9.5-160000.3.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  python3-ipa_hbac
  Python bindings for the FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  python3-sss-murmur
  Python3 bindings for SSSD Murmur hash function

  2.9.5-160000.3.1 lock rpm

  python3-sss_nss_idmap
  Python bindings for libsss_nss_idmap

  2.9.5-160000.3.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.9.5-160000.3.1 lock rpm

  sssd
  System Security Services Daemon

  2.9.5-160000.3.1 lock rpm

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.9.5-160000.3.1 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.9.5-160000.3.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.9.5-160000.3.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.9.5-160000.3.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  libnfsidmap-sss
  Library to allow communication between libnfsidmap and SSSD

  2.9.5-160000.3.1 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  2.9.5-160000.3.1 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.9.5-160000.3.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.9.5-160000.3.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  python3-ipa_hbac
  Python bindings for the FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  python3-sss-murmur
  Python3 bindings for SSSD Murmur hash function

  2.9.5-160000.3.1 lock rpm

  python3-sss_nss_idmap
  Python bindings for libsss_nss_idmap

  2.9.5-160000.3.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.9.5-160000.3.1 lock rpm

  sssd
  System Security Services Daemon

  2.9.5-160000.3.1 lock rpm

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.9.5-160000.3.1 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.9.5-160000.3.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.9.5-160000.3.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.9.5-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  libnfsidmap-sss
  Library to allow communication between libnfsidmap and SSSD

  2.9.5-160000.3.1 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  2.9.5-160000.3.1 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.9.5-160000.3.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.9.5-160000.3.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  python3-ipa_hbac
  Python bindings for the FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  python3-sss-murmur
  Python3 bindings for SSSD Murmur hash function

  2.9.5-160000.3.1 lock rpm

  python3-sss_nss_idmap
  Python bindings for libsss_nss_idmap

  2.9.5-160000.3.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.9.5-160000.3.1 lock rpm

  sssd
  System Security Services Daemon

  2.9.5-160000.3.1 lock rpm

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.9.5-160000.3.1 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.9.5-160000.3.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.9.5-160000.3.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.9.5-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  libnfsidmap-sss
  Library to allow communication between libnfsidmap and SSSD

  2.9.5-160000.3.1 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  2.9.5-160000.3.1 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.9.5-160000.3.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.9.5-160000.3.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  python3-ipa_hbac
  Python bindings for the FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  python3-sss-murmur
  Python3 bindings for SSSD Murmur hash function

  2.9.5-160000.3.1 lock rpm

  python3-sss_nss_idmap
  Python bindings for libsss_nss_idmap

  2.9.5-160000.3.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.9.5-160000.3.1 lock rpm

  sssd
  System Security Services Daemon

  2.9.5-160000.3.1 lock rpm

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.9.5-160000.3.1 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.9.5-160000.3.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.9.5-160000.3.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.9.5-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  libnfsidmap-sss
  Library to allow communication between libnfsidmap and SSSD

  2.9.5-160000.3.1 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  2.9.5-160000.3.1 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.9.5-160000.3.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.9.5-160000.3.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  python3-ipa_hbac
  Python bindings for the FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  python3-sss-murmur
  Python3 bindings for SSSD Murmur hash function

  2.9.5-160000.3.1 lock rpm

  python3-sss_nss_idmap
  Python bindings for libsss_nss_idmap

  2.9.5-160000.3.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.9.5-160000.3.1 lock rpm

  sssd
  System Security Services Daemon

  2.9.5-160000.3.1 lock rpm

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.9.5-160000.3.1 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.9.5-160000.3.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.9.5-160000.3.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.9.5-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  libnfsidmap-sss
  Library to allow communication between libnfsidmap and SSSD

  2.9.5-160000.3.1 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  2.9.5-160000.3.1 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.9.5-160000.3.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.9.5-160000.3.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.9.5-160000.3.1 lock rpm

  python3-ipa_hbac
  Python bindings for the FreeIPA HBAC Evaluator library

  2.9.5-160000.3.1 lock rpm

  python3-sss-murmur
  Python3 bindings for SSSD Murmur hash function

  2.9.5-160000.3.1 lock rpm

  python3-sss_nss_idmap
  Python bindings for libsss_nss_idmap

  2.9.5-160000.3.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.9.5-160000.3.1 lock rpm

  sssd
  System Security Services Daemon

  2.9.5-160000.3.1 lock rpm

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.9.5-160000.3.1 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.9.5-160000.3.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.9.5-160000.3.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.9.5-160000.3.1 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.9.5-160000.3.1 lock rpm