Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:4231-1

UNKNOWN

Security update for sssd

Published Nov 25, 2025

Modified 1 months ago

Fix available

Details

This update for sssd fixes the following issues:

CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827)

Other fixes:

Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325)

Affected Packages

SUSE:Enterprise Storage 7.1libipa_hbac-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1libipa_hbac0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1libsss_certmap-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1libsss_certmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1libsss_idmap-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1libsss_idmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1libsss_nss_idmap-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1libsss_nss_idmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1libsss_simpleifp-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1libsss_simpleifp0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1python3-sssd-config

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1sssd

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1sssd-ad

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1sssd-common

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1sssd-common-32bit

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1sssd-dbus

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1sssd-ipa

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1sssd-krb5

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1sssd-krb5-common

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1sssd-ldap

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1sssd-proxy

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1sssd-tools

Fixed in:

1.16.1-150300.23.56.1

SUSE:Enterprise Storage 7.1sssd-winbind-idmap

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibipa_hbac-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibipa_hbac0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibsss_certmap-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibsss_certmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibsss_idmap-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibsss_idmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibsss_nss_idmap-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibsss_nss_idmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibsss_simpleifp-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibsss_simpleifp0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSpython3-sssd-config

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsssd

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsssd-ad

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsssd-common

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsssd-common-32bit

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsssd-dbus

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsssd-ipa

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsssd-krb5

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsssd-krb5-common

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsssd-ldap

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsssd-proxy

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsssd-tools

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsssd-winbind-idmap

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Micro 5.2libsss_certmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Micro 5.2libsss_idmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Micro 5.2libsss_nss_idmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Micro 5.2sssd

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Micro 5.2sssd-common

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Micro 5.2sssd-krb5-common

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Micro 5.2sssd-ldap

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibipa_hbac-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibipa_hbac0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibsss_certmap-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibsss_certmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibsss_idmap-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibsss_idmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibsss_nss_idmap-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibsss_nss_idmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibsss_simpleifp-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibsss_simpleifp0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSpython3-sssd-config

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsssd

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsssd-ad

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsssd-common

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsssd-common-32bit

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsssd-dbus

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsssd-ipa

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsssd-krb5

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsssd-krb5-common

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsssd-ldap

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsssd-proxy

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsssd-tools

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsssd-winbind-idmap

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libipa_hbac-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libipa_hbac0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libsss_certmap-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libsss_certmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libsss_idmap-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libsss_idmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libsss_nss_idmap-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libsss_nss_idmap0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libsss_simpleifp-devel

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libsss_simpleifp0

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3python3-sssd-config

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3sssd

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3sssd-ad

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3sssd-common

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3sssd-common-32bit

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3sssd-dbus

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3sssd-ipa

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3sssd-krb5

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3sssd-krb5-common

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3sssd-ldap

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3sssd-proxy

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3sssd-tools

Fixed in:

1.16.1-150300.23.56.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3sssd-winbind-idmap

Fixed in:

1.16.1-150300.23.56.1

Timeline

PublishedNov 25, 2025

ModifiedNov 25, 2025

SUSE-SU-2025:4231-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:4231-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline