Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:4181-1

UNKNOWN

Security update for sssd

Published Nov 24, 2025

Modified 1 months ago

Fix available

Details

This update for sssd fixes the following issues:

CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827)

Other fixes:

Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325)

Affected Packages

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibipa_hbac-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibipa_hbac0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsss_certmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsss_certmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsss_idmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsss_nss_idmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsss_nss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsss_simpleifp-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsss_simpleifp0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSpython3-sssd-config

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd-ad

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd-common-32bit

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd-dbus

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd-ipa

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd-kcm

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd-krb5

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd-krb5-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd-ldap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd-proxy

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd-tools

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsssd-winbind-idmap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibipa_hbac-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibipa_hbac0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibsss_certmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibsss_certmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibsss_idmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibsss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibsss_nss_idmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibsss_nss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibsss_simpleifp-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibsss_simpleifp0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSpython3-sssd-config

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd-ad

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd-common-32bit

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd-dbus

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd-ipa

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd-kcm

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd-krb5

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd-krb5-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd-ldap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd-proxy

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd-tools

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsssd-winbind-idmap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.3libsss_certmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.3libsss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.3libsss_nss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.3sssd

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.3sssd-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.3sssd-krb5-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.3sssd-ldap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.4libsss_certmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.4libsss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.4libsss_nss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.4sssd

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.4sssd-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.4sssd-krb5-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Micro 5.4sssd-ldap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibipa_hbac-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibipa_hbac0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibsss_certmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibsss_certmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibsss_idmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibsss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibsss_nss_idmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibsss_nss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibsss_simpleifp-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibsss_simpleifp0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSpython3-sssd-config

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd-ad

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd-common-32bit

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd-dbus

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd-ipa

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd-kcm

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd-krb5

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd-krb5-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd-ldap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd-proxy

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd-tools

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsssd-winbind-idmap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libipa_hbac-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libipa_hbac0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libsss_certmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libsss_certmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libsss_idmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libsss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libsss_nss_idmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libsss_nss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libsss_simpleifp-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libsss_simpleifp0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4python3-sssd-config

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd-ad

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd-common-32bit

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd-dbus

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd-ipa

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd-kcm

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd-krb5

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd-krb5-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd-ldap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd-proxy

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd-tools

Fixed in:

2.5.2-150400.4.40.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4sssd-winbind-idmap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3libipa_hbac-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3libipa_hbac0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3libsss_certmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3libsss_certmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3libsss_idmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3libsss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3libsss_nss_idmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3libsss_nss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3libsss_simpleifp-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3libsss_simpleifp0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3python3-sssd-config

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd-ad

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd-common-32bit

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd-dbus

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd-ipa

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd-kcm

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd-krb5

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd-krb5-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd-ldap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd-proxy

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd-tools

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Proxy LTS 4.3sssd-winbind-idmap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3libipa_hbac-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3libipa_hbac0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3libsss_certmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3libsss_certmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3libsss_idmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3libsss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3libsss_nss_idmap-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3libsss_nss_idmap0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3libsss_simpleifp-devel

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3libsss_simpleifp0

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3python3-sssd-config

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd-ad

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd-common-32bit

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd-dbus

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd-ipa

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd-kcm

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd-krb5

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd-krb5-common

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd-ldap

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd-proxy

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd-tools

Fixed in:

2.5.2-150400.4.40.1

SUSE:Manager Server LTS 4.3sssd-winbind-idmap

Fixed in:

2.5.2-150400.4.40.1

Timeline

PublishedNov 24, 2025

ModifiedNov 24, 2025

SUSE-SU-2025:4181-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:4181-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline