{"id":"CLSA-2025-1764028069","summary":"sssd: Fix of CVE-2025-11561","details":"- CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings\n  when SSSD's localauth plugin cannot resolve a principal","modified":"2026-06-01T00:31:20.805108608Z","published":"2025-11-24T23:47:52Z","upstream":["CVE-2025-11561"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1764028069.html"}],"affected":[{"package":{"name":"libipa_hbac","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libipa_hbac?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"libipa_hbac-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libipa_hbac-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"libsss_autofs","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_autofs?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"libsss_certmap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_certmap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"libsss_certmap-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_certmap-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"libsss_idmap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_idmap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"libsss_idmap-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_idmap-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"libsss_nss_idmap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_nss_idmap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"libsss_nss_idmap-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_nss_idmap-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"libsss_simpleifp","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_simpleifp?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"libsss_simpleifp-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_simpleifp-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"libsss_sudo","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_sudo?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"python3-libipa_hbac","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-libipa_hbac?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"python3-libsss_nss_idmap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-libsss_nss_idmap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"python3-sss","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-sss?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"python3-sss-murmur","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-sss-murmur?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"python3-sssdconfig","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-sssdconfig?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-ad","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-ad?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-client","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-client?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-common-pac","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-common-pac?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-dbus","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-dbus?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-idp","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-idp?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-ipa","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-ipa?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-kcm","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-kcm?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-krb5","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-krb5?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-krb5-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-krb5-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-ldap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-ldap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-nfs-idmap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-nfs-idmap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-polkit-rules","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-polkit-rules?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-proxy","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-proxy?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-tools","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-tools?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}},{"package":{"name":"sssd-winbind-idmap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-winbind-idmap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1764028069.json"}}],"schema_version":"1.7.5"}