Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Red Hat SSSD components may expose private data
published 25 days ago
Summary
Certain Red Hat SSSD libraries can be tricked into revealing internal information. This could let an attacker learn details about users or system configuration, potentially aiding further attacks. Apply the latest Red Hat security update for these libraries as soon as possible.
What to do
- Update redhat libipa_hbac-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat libsss_autofs-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat libsss_certmap-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat libsss_idmap-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat libsss_nss_idmap-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat libsss_sudo-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat python3-libipa_hbac-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat python3-libsss_nss_idmap-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat python3-sss-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat python3-sss-murmur-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-ad-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-client-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-common-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-common-pac-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-dbus-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-debugsource to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-idp to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-idp-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-ipa-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-kcm-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-krb5-common-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-krb5-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-ldap-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-nfs-idmap-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-passkey-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-proxy-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-tools-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-winbind-idmap-debuginfo to version 0:2.12.0-3.el10_2.2.
- Update redhat libipa_hbac to version 0:2.12.0-3.el10_2.2.
- Update redhat libsss_autofs to version 0:2.12.0-3.el10_2.2.
- Update redhat libsss_certmap to version 0:2.12.0-3.el10_2.2.
- Update redhat libsss_idmap to version 0:2.12.0-3.el10_2.2.
- Update redhat libsss_nss_idmap to version 0:2.12.0-3.el10_2.2.
- Update redhat libsss_sudo to version 0:2.12.0-3.el10_2.2.
- Update redhat python3-libipa_hbac to version 0:2.12.0-3.el10_2.2.
- Update redhat python3-libsss_nss_idmap to version 0:2.12.0-3.el10_2.2.
- Update redhat python3-sss to version 0:2.12.0-3.el10_2.2.
- Update redhat python3-sss-murmur to version 0:2.12.0-3.el10_2.2.
- Update redhat python3-sssdconfig to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-ad to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-client to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-common to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-common-pac to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-dbus to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-ipa to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-kcm to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-krb5 to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-krb5-common to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-ldap to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-nfs-idmap to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-passkey to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-proxy to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-tools to version 0:2.12.0-3.el10_2.2.
- Update redhat sssd-winbind-idmap to version 0:2.12.0-3.el10_2.2.
- Update redhat libsss_nss_idmap-devel to version 0:2.12.0-3.el10_2.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:10.2 | redhat | libipa_hbac-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | libsss_autofs-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | libsss_certmap-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | libsss_idmap-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | libsss_nss_idmap-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | libsss_sudo-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | python3-libipa_hbac-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | python3-libsss_nss_idmap-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | python3-sss-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | python3-sss-murmur-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-ad-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-client-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-common-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-common-pac-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-dbus-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-debugsource |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-idp |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-idp-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-ipa-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-kcm-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-krb5-common-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-krb5-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-ldap-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-nfs-idmap-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-passkey-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-proxy-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-tools-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-winbind-idmap-debuginfo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | libipa_hbac |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | libsss_autofs |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | libsss_certmap |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | libsss_idmap |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | libsss_nss_idmap |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | libsss_sudo |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | python3-libipa_hbac |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | python3-libsss_nss_idmap |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | python3-sss |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | python3-sss-murmur |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | python3-sssdconfig |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-ad |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-client |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-common |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-common-pac |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-dbus |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-ipa |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-kcm |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-krb5 |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-krb5-common |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
Showing 50 of 57. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-ldap |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-nfs-idmap |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-passkey |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-proxy |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-tools |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | sssd-winbind-idmap |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
| Red Hat:enterprise_linux:10.2 | redhat | libsss_nss_idmap-devel |
< 0:2.12.0-3.el10_2.2 Fix: upgrade to 0:2.12.0-3.el10_2.2
|
Original advisory text
Red Hat Security Advisory: sssd security update
References
- https://access.redhat.com/errata/RHSA-2026:77534 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2530888 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77534.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-87853 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-87853 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-87853 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published10 Oct 2026
Updated10 Oct 2026
First seen10 Oct 2026
Sources
RHSA-2026:77534 · OSV
Track software like this
Free during beta