Early Access — Mondoo Vulnerability Intelligence is currently in preview.

RHSA-2025:19854

HIGH8.8

Red Hat Security Advisory: sssd security update

Published Nov 6, 2025

Modified Yesterday

Fix available

Affected Packages

Red Hat:rhel_e4s:9.2::appstreamlibipa_hbac

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibipa_hbac-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibsss_autofs

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibsss_autofs-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibsss_certmap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibsss_certmap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibsss_idmap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibsss_idmap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibsss_nss_idmap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibsss_nss_idmap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibsss_simpleifp

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibsss_simpleifp-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibsss_sudo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamlibsss_sudo-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreampython3-libipa_hbac

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreampython3-libipa_hbac-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreampython3-libsss_nss_idmap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreampython3-libsss_nss_idmap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreampython3-sss

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreampython3-sss-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreampython3-sss-murmur

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreampython3-sss-murmur-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreampython3-sssdconfig

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-ad

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-ad-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-client

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-client-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-common

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-common-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-common-pac

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-common-pac-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-dbus

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-dbus-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-debugsource

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-idp

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-idp-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-ipa

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-ipa-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-kcm

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-kcm-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-krb5

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-krb5-common

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-krb5-common-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-krb5-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-ldap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-ldap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-nfs-idmap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-nfs-idmap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-polkit-rules

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-proxy

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-proxy-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-tools

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-tools-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-winbind-idmap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::appstreamsssd-winbind-idmap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibipa_hbac

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibipa_hbac-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibsss_autofs

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibsss_autofs-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibsss_certmap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibsss_certmap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibsss_idmap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibsss_idmap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibsss_nss_idmap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibsss_nss_idmap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibsss_simpleifp

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibsss_simpleifp-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibsss_sudo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseoslibsss_sudo-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseospython3-libipa_hbac

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseospython3-libipa_hbac-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseospython3-libsss_nss_idmap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseospython3-libsss_nss_idmap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseospython3-sss

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseospython3-sss-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseospython3-sss-murmur

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseospython3-sss-murmur-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseospython3-sssdconfig

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-ad

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-ad-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-client

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-client-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-common

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-common-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-common-pac

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-common-pac-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-dbus

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-dbus-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-debugsource

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-idp

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-idp-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-ipa

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-ipa-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-kcm

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-kcm-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-krb5

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-krb5-common

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-krb5-common-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-krb5-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-ldap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-ldap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-nfs-idmap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-nfs-idmap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-polkit-rules

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-proxy

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-proxy-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-tools

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-tools-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-winbind-idmap

Fixed in:

0:2.8.2-5.el9_2.6

Red Hat:rhel_e4s:9.2::baseossssd-winbind-idmap-debuginfo

Fixed in:

0:2.8.2-5.el9_2.6

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19854 REPORThttps://access.redhat.com/security/cve/CVE-2025-11561 ARTICLEhttps://access.redhat.com/security/updates/classification/#important ARTICLEhttps://blog.async.sg/kerberos-ldr REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2402727 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-11561 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19854.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-11561

CVSS Analysis

CVSS v3.1

8.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Upstream

CVE-2025-11561

Ecosystems

Red Hat rhel_e4s 9.2 appstream Red Hat rhel_e4s 9.2 baseos

Timeline

PublishedNov 6, 2025

ModifiedJan 14, 2026

RHSA-2025:19854 | Mondoo Vulnerability Intelligence