SUSE-SU-2025:4231-1

HIGH8.8

Security update for sssd

Published Nov 25, 2025

Modified 6 months ago

Fix available

Details

Description of the patch:

This update for sssd fixes the following issues:

CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827)

Other fixes:

Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325)

Affected Packages(23 packages)

libipa_hbac-devel

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

1.16.1-150300.23.56.1

libipa_hbac0

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

1.16.1-150300.23.56.1

libsss_certmap-devel

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

1.16.1-150300.23.56.1

libsss_certmap0

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

1.16.1-150300.23.56.1

libsss_idmap-devel

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

1.16.1-150300.23.56.1

libsss_idmap0

Fixed in:

1.16.1-150300.23.56.1

libsss_nss_idmap-devel

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

1.16.1-150300.23.56.1

libsss_nss_idmap0

Fixed in:

1.16.1-150300.23.56.1

libsss_simpleifp-devel

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

1.16.1-150300.23.56.1

libsss_simpleifp0

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

1.16.1-150300.23.56.1

References

ADVISORY

https://bugzilla.suse.com/1244325

ADVISORY

https://bugzilla.suse.com/1251827

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2025-November/023359.html

ADVISORY

https://www.suse.com/security/cve/CVE-2025-11561/

WEB