Early Access — Mondoo Vulnerability Intelligence is currently in preview.

RHSA-2025:19850

HIGH8.8

Red Hat Security Advisory: sssd security update

Published Nov 6, 2025

Modified Yesterday

Fix available

Affected Packages

Red Hat:rhel_e4s:9.0::baseoslibipa_hbac

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibipa_hbac-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibsss_autofs

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibsss_autofs-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibsss_certmap

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibsss_certmap-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibsss_idmap

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibsss_idmap-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibsss_nss_idmap

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibsss_nss_idmap-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibsss_simpleifp

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibsss_simpleifp-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibsss_sudo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseoslibsss_sudo-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseospython3-libipa_hbac

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseospython3-libipa_hbac-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseospython3-libsss_nss_idmap

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseospython3-libsss_nss_idmap-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseospython3-sss

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseospython3-sss-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseospython3-sss-murmur

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseospython3-sss-murmur-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseospython3-sssdconfig

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-ad

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-ad-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-client

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-client-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-common

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-common-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-common-pac

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-common-pac-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-dbus

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-dbus-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-debugsource

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-ipa

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-ipa-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-kcm

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-kcm-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-krb5

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-krb5-common

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-krb5-common-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-krb5-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-ldap

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-ldap-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-nfs-idmap

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-nfs-idmap-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-polkit-rules

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-proxy

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-proxy-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-tools

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-tools-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-winbind-idmap

Fixed in:

0:2.6.2-4.el9_0.4

Red Hat:rhel_e4s:9.0::baseossssd-winbind-idmap-debuginfo

Fixed in:

0:2.6.2-4.el9_0.4

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19850 REPORThttps://access.redhat.com/security/cve/CVE-2025-11561 ARTICLEhttps://access.redhat.com/security/updates/classification/#important ARTICLEhttps://blog.async.sg/kerberos-ldr REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2402727 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-11561 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19850.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-11561

CVSS Analysis

CVSS v3.1

8.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Upstream

CVE-2025-11561

Ecosystems

Red Hat rhel_e4s 9.0 baseos

Timeline

PublishedNov 6, 2025

ModifiedJan 14, 2026

RHSA-2025:19850 | Mondoo Vulnerability Intelligence