gpp_maybe Security update for sssd

SUSE-SUSE-MicroOS-5.2-2025-4231

This update for sssd fixes the following issues: - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827) Other fixes: - Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325)

• Release Date
  Nov 25 2025
• References
  Bugzilla: 1244325, 1251827
  CVEs: CVE-2025-11561
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Micro for Rancher 5.2 aarch64

• Packages
  libsss_certmap0
  FreeIPA ID mapping library

  1.16.1-150300.23.56.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  1.16.1-150300.23.56.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  1.16.1-150300.23.56.1 lock rpm

  sssd
  System Security Services Daemon

  1.16.1-150300.23.56.1 lock rpm lock src

  sssd-common
  Common files for the SSSD

  1.16.1-150300.23.56.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  1.16.1-150300.23.56.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  1.16.1-150300.23.56.1 lock rpm

SUSE Linux Enterprise Micro 5.2 s390x

• Packages
  libsss_certmap0
  FreeIPA ID mapping library

  1.16.1-150300.23.56.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  1.16.1-150300.23.56.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  1.16.1-150300.23.56.1 lock rpm

  sssd
  System Security Services Daemon

  1.16.1-150300.23.56.1 lock rpm lock src

  sssd-common
  Common files for the SSSD

  1.16.1-150300.23.56.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  1.16.1-150300.23.56.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  1.16.1-150300.23.56.1 lock rpm

SUSE Linux Enterprise Micro for Rancher 5.2 x86_64

• Packages
  libsss_certmap0
  FreeIPA ID mapping library

  1.16.1-150300.23.56.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  1.16.1-150300.23.56.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  1.16.1-150300.23.56.1 lock rpm

  sssd
  System Security Services Daemon

  1.16.1-150300.23.56.1 lock rpm lock src

  sssd-common
  Common files for the SSSD

  1.16.1-150300.23.56.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  1.16.1-150300.23.56.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  1.16.1-150300.23.56.1 lock rpm