{"id":"CLSA-2025-1763371827","summary":"sssd: Fix of CVE-2025-11561","details":"- CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings\n  when SSSD's localauth plugin cannot resolve a principal","modified":"2026-06-01T00:33:27.053650860Z","published":"2025-11-17T09:30:31Z","upstream":["CVE-2025-11561"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1763371827.html"}],"affected":[{"package":{"name":"libipa_hbac","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libipa_hbac?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"libipa_hbac-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libipa_hbac-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"libsss_autofs","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libsss_autofs?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"libsss_certmap","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libsss_certmap?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"libsss_certmap-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libsss_certmap-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"libsss_idmap","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libsss_idmap?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"libsss_idmap-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libsss_idmap-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"libsss_nss_idmap","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libsss_nss_idmap?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"libsss_nss_idmap-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libsss_nss_idmap-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"libsss_simpleifp","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libsss_simpleifp?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"libsss_simpleifp-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libsss_simpleifp-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"libsss_sudo","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libsss_sudo?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"python-libipa_hbac","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/python-libipa_hbac?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"python-libsss_nss_idmap","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/python-libsss_nss_idmap?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"python-sss","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/python-sss?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"python-sss-murmur","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/python-sss-murmur?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"python-sssdconfig","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/python-sssdconfig?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-ad","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-ad?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-client","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-client?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-common","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-common?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-common-pac","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-common-pac?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-dbus","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-dbus?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-ipa","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-ipa?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-kcm","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-kcm?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-krb5","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-krb5?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-krb5-common","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-krb5-common?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-ldap","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-ldap?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-libwbclient","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-libwbclient?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-libwbclient-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-libwbclient-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-polkit-rules","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-polkit-rules?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-proxy","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-proxy?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-tools","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-tools?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}},{"package":{"name":"sssd-winbind-idmap","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/sssd-winbind-idmap?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1763371827.json"}}],"schema_version":"1.7.5"}