{"id":"CLSA-2026-1785845028","summary":"sssd: Fix of 2 CVEs","details":"- CVE-2026-14474: warn when ldap_sudo_search_base falls back to the\n  directory root DN\n- CVE-2026-14476: reject path traversal in gPCFileSysPath to prevent\n  escaping the GPO cache directory","modified":"2026-10-26T09:31:43.004659524Z","published":"2026-08-06T14:45:32Z","upstream":["CVE-2026-14474","CVE-2026-14476"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1785845028.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14474"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14476"}],"affected":[{"package":{"name":"libipa_hbac","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libipa_hbac?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"libipa_hbac-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libipa_hbac-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"libsss_autofs","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libsss_autofs?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"libsss_certmap","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libsss_certmap?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"libsss_certmap-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libsss_certmap-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"libsss_idmap","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libsss_idmap?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"libsss_idmap-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libsss_idmap-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"libsss_nss_idmap","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libsss_nss_idmap?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"libsss_nss_idmap-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libsss_nss_idmap-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"libsss_simpleifp","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libsss_simpleifp?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"libsss_simpleifp-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libsss_simpleifp-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"libsss_sudo","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libsss_sudo?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"python-libipa_hbac","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/python-libipa_hbac?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"python-libsss_nss_idmap","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/python-libsss_nss_idmap?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"python-sss","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/python-sss?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"python-sss-murmur","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/python-sss-murmur?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"python-sssdconfig","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/python-sssdconfig?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-ad","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-ad?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-client","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-client?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-common","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-common?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-common-pac","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-common-pac?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-dbus","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-dbus?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-ipa","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-ipa?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-kcm","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-kcm?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-krb5","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-krb5?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-krb5-common","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-krb5-common?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-ldap","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-ldap?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-libwbclient","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-libwbclient?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-libwbclient-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-libwbclient-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-polkit-rules","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-polkit-rules?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-proxy","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-proxy?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-tools","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-tools?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}},{"package":{"name":"sssd-winbind-idmap","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/sssd-winbind-idmap?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-10.0.3.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785845028.json"}}],"schema_version":"1.9.0"}