[CLSA-2026:1785845028] sssd: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-08-06 14:45:32 UTC
Description:
- CVE-2026-14474: warn when ldap_sudo_search_base falls back to the directory root DN - CVE-2026-14476: reject path traversal in gPCFileSysPath to prevent escaping the GPO cache directory
CVEs fixed:
Updated packages:
  • libipa_hbac-1.16.5-10.0.3.el7_9.16.tuxcare.els2.i686.rpm
    sha:5bbf0796eac203ac874148ec5aa3e33113f5a050aae7935760f2524660af70cf
  • libipa_hbac-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:b37f3c277e7c2e649d00f3cca6790d8e02276feda42526d7259cf14f7d17fe45
  • libipa_hbac-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els2.i686.rpm
    sha:4b023b7337af761dad0b9be0b4ec29fe21a5542057fc01f790ca1f80b5b25930
  • libipa_hbac-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:778582cf2190d812cf96c713eae805ee9d28c8f834cd3b76b84379ceeb956f04
  • libsss_autofs-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:045b84d94887d02cdc19407a0f52b56942a8bed113ff9959cdddeff856c3b452
  • libsss_certmap-1.16.5-10.0.3.el7_9.16.tuxcare.els2.i686.rpm
    sha:21fc458bb55c845327d3a1d45579a026ae4a0b0749f5d3ceff07695362d5e928
  • libsss_certmap-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:82ca6f21685bb6735a8eabe03e60fdb49e15f4dc6e988cbc07315cb4dfa03c1a
  • libsss_certmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els2.i686.rpm
    sha:c40e700ba43e56c427225658ad17c9cbb544e5decc99f471615658d0e50431fe
  • libsss_certmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:b07954f2de29852e045c2b652e2547d7576651051e88c72eb61bcaf0a9704f64
  • libsss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els2.i686.rpm
    sha:0bb25c11c68b5e04cca0d027ff88fed64a6d7b359fd95d357d930d0c446adb3c
  • libsss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:f052e93b9e8dfe2a362db833f85c7ada8605e3bea92619ce1180e2ee501f7445
  • libsss_idmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els2.i686.rpm
    sha:b061611e5aa4367b6c1efa45ea2d76743666c8efa8cfabb541e303564126b8a2
  • libsss_idmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:c4ac7565f1e0e379cf83a9b597773fc56cd6f93bf91e4f67c2e26a91e31fcd86
  • libsss_nss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els2.i686.rpm
    sha:1e95190022e33571a30df217d34472ea8b8ec304fa16928aae4f7d90e3cb6f87
  • libsss_nss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:f9ef774123eb86cf6a8b04d01be5adbf361e1da03cf16370ccd50b075b60f345
  • libsss_nss_idmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els2.i686.rpm
    sha:4318efdd9690f2d30871335518e7a4fe0f111cd05d700784733a45f8041c66fe
  • libsss_nss_idmap-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:5f89509d29902cda670b1ec03d73d6510d494f550d232abdba09c702dba03a93
  • libsss_simpleifp-1.16.5-10.0.3.el7_9.16.tuxcare.els2.i686.rpm
    sha:1494b92d02f4e1419364c49d5b226359975ede63389f5e832c7a4a1e35118e59
  • libsss_simpleifp-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:49effcdafffb59ec96b4273e5a41444dd05002d7ee356feaaab8966dc59d929f
  • libsss_simpleifp-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els2.i686.rpm
    sha:73666ebb800767cc56bd53ce78d22fc6bbda7d2dd2ee6288f621984655771a3c
  • libsss_simpleifp-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:df935cb2b77bf4f4cce08aaf53bbc6979da41595a32bf133df3d7b310ade81ee
  • libsss_sudo-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:9b4d944b8bbcf0e9dc000e01d24fea1e620c7b2cf184e2bb2a649eabc6e38e43
  • python-libipa_hbac-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:b49c70d9a2208f212fa68a7eb50bdfdb179c212b731d2cf8b60f5db1c953a112
  • python-libsss_nss_idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:8584ef77cbef24946dd09bb84ce9f1b814e3857200910e73c042e366f6393fd6
  • python-sss-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:b0c7d4604535d33766827f2d8bb9f2d405f9993c2836d49dbb9c587a8536ceed
  • python-sss-murmur-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:094efac0e77c05dfa95c9e5bc308cbc13c7eb4bad61f53ec30c95d09447d5521
  • python-sssdconfig-1.16.5-10.0.3.el7_9.16.tuxcare.els2.noarch.rpm
    sha:aa4c4d00996e66486bacb0834c19c1bfee5243cfefa82b74a66e249bc5ebf043
  • sssd-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:ad33acdd80dbe882bfdc1c7bb7252d200cb2c01f454af96ee07b151d70430075
  • sssd-ad-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:fc9b78ef0ce96f2c312a58f89f29c6b3d634e34f9c56593a508eb14131ef0893
  • sssd-client-1.16.5-10.0.3.el7_9.16.tuxcare.els2.i686.rpm
    sha:3a7408928be5d94f1032d345dfef5796c24b4aae81ea20318ba14afcfe803b9d
  • sssd-client-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:05ead4fba1143fdd37884183a6b40a68db372742d80f7e6aa39af322ec172780
  • sssd-common-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:da3274705b5f71844b33eaa3bd25ac08ea998d348c104ac9e89edbdaef837475
  • sssd-common-pac-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:b5fbc7e8657166d8285d9fa40aaf9ad3a5662b3035b43c5d0152dd15d483075f
  • sssd-dbus-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:7176a41affa42a29d0482c7475ff1f97bf066f1daf7efc82d7589bdaca4d94d3
  • sssd-ipa-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:f5ed4b1aa530a51b03da989e747481fe7e3ea1c616733bc38832ac14e309bf11
  • sssd-kcm-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:7e77c1f3308c76fc9bc98f3ec59bad6e18df82165d3c67ab5399f2e863353593
  • sssd-krb5-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:f2ce6adddd5b0b244e1362fc9991dda4c0fbde189cae176c6a236b0763cd8a60
  • sssd-krb5-common-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:82d46eab77e67487d61000a7f8c1b537faeacecdc3724a88b9f8d3332f992141
  • sssd-ldap-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:fe629c7516fbec03bf966ac13c71469cd28115bea259cfa153e2fe62a9653345
  • sssd-libwbclient-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:3dfcf238eeb50b5eb8072c0816932fe20d1c24294751f29f398330d7d41b0a08
  • sssd-libwbclient-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els2.i686.rpm
    sha:5dae64e379cd50b92bcce5f1c46c77c8118f2bfa11a2661aabe50b447d14f561
  • sssd-libwbclient-devel-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:34f55e1c5b94ac23d0bd1a7c5606952d7f79c2da0f3b48e9d185fee0dd337d9c
  • sssd-polkit-rules-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:31c9b58f711cce3e958d41bc278a22fe2154d3419ec94c98dad5583aeae57431
  • sssd-proxy-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:a99108c04a27a81fdffcf886095b1f886fcb9d27ff32db856f194aa877d49b26
  • sssd-tools-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:7a433dd3f7859f8338e6a9aff7a37ce2b09742183a1bfa98cd3b86a71845d69c
  • sssd-winbind-idmap-1.16.5-10.0.3.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:64aae82e3fed04724309ff19d753d1960e8758964625011b12531aebd17f74f9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.