sssd-2.9.7-4.el9_7.1

エラータID: AXSA:2025-11481:08

Release date: 
Sunday, December 7, 2025 - 15:28
Subject: 
sssd-2.9.7-4.el9_7.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

The System Security Services Daemon (SSSD) service provides a set of daemons to
manage access to remote directories and authentication mechanisms. It also
provides the Name Service Switch (NSS) and the Pluggable Authentication Modules
(PAM) interfaces toward the system, and a pluggable back-end system to connect
to multiple different account sources.

Security Fix(es):

sssd: SSSD default Kerberos configuration allows privilege escalation on
AD-joined Linux systems (CVE-2025-11561)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

For detailed information on changes in this release, see the MIRACLE LINUX 9
Release Notes linked from the References section.

CVE(s):
CVE-2025-11561

Solution: 

Update packages.

CVEs: 
CVE-2025-11561
A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.
Additional Info: 

N/A

Download: 

SRPMS
  1. sssd-2.9.7-4.el9_7.1.src.rpm
    MD5: 6a309c81f4c1d8536e81b547e3eb4aff
    SHA-256: de8762ec77ba063919822f5998d9930de30ceec9c85b781e5726267f734dc637
    Size: 8.77 MB

Asianux Server 9 for x86_64
  1. libipa_hbac-2.9.7-4.el9_7.1.i686.rpm
    MD5: f8b8873fb1a2e4be3acab13cfe4452d4
    SHA-256: 98c3e73d6bd8fa442228d5cbd80eb5c8a329ca7e050e8825f52076422c451486
    Size: 33.14 kB
  2. libipa_hbac-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 91e4fb21c623ad8aebac9e33ebedbfdc
    SHA-256: 95269259067289d6b321a49f1501b70911520344d166546607230120c9b6787f
    Size: 33.34 kB
  3. libsss_autofs-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 7453a7b8f9033027515419e1cf2a8ebb
    SHA-256: fb6d5bd0af95bb5bf59539164f36a230f6ebd5f07f451adb2c6c2e8bf4e823e2
    Size: 35.71 kB
  4. libsss_certmap-2.9.7-4.el9_7.1.i686.rpm
    MD5: bcf049a21ef9f2abd3992ca03779962b
    SHA-256: 115c66aa97f223b68d3d261362601923986e6111bef19c653ebbfc264f580f33
    Size: 89.50 kB
  5. libsss_certmap-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: c4eba09ca297fda7ab2333cfa6bce86c
    SHA-256: 3bbe5fe62c72c83d0c981ec09b98c6ce422ccaf39b22db3f874f7211973510de
    Size: 87.82 kB
  6. libsss_idmap-2.9.7-4.el9_7.1.i686.rpm
    MD5: 9c80873f40e30fc91638605cee8dcf33
    SHA-256: d97a250a223af00fc2e5aa280a6e77352128979b661a5628c8a8976bdbfdea77
    Size: 39.95 kB
  7. libsss_idmap-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: ec3c389e7d0ff9f820e9eb390e3594f7
    SHA-256: c17ef727583b60ab3425714f2138439df31193df91be30853d69bc72d097808f
    Size: 38.95 kB
  8. libsss_nss_idmap-2.9.7-4.el9_7.1.i686.rpm
    MD5: 205bdc358253f8418a3b13efd5b2247e
    SHA-256: b93158dd1eacced3243f137948131a7832e179566e3a7b69d1beeeb851ceb200
    Size: 44.13 kB
  9. libsss_nss_idmap-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 8fbf03ba2128670c6ad679d488e9e779
    SHA-256: 3b2fe221a8f6d74ed034b491600d52607723e7937a829f3ba584ef0393880191
    Size: 43.29 kB
  10. libsss_nss_idmap-devel-2.9.7-4.el9_7.1.i686.rpm
    MD5: e885e7023e1efe86b903459439987570
    SHA-256: 358b3449486576497e6994bad5f845bd82836f5e74e84624906bc098b5b959dd
    Size: 103.27 kB
  11. libsss_nss_idmap-devel-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 51e3874a04af2c8c47e5ecf0655a2b63
    SHA-256: 280e6043aa359581b45d0d50b847ce79b9ff131f7c7a299c82dc5bd0b27244d4
    Size: 103.27 kB
  12. libsss_simpleifp-2.9.7-4.el9_7.1.i686.rpm
    MD5: 7026903f7a1aed751d265d16b84c31b5
    SHA-256: 1231b33c9e8f0a5b31f623d857cd2cf11e3c7e65dea72baa5ade81f61247e2ac
    Size: 26.73 kB
  13. libsss_simpleifp-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: fdf85fdace62adc4d2faa2001c212f6b
    SHA-256: 99024612efde8777de80db3d2e9d04ec09eacac68175c080374553ff95519cc1
    Size: 25.99 kB
  14. libsss_sudo-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 813893459d14a88b53ebd1c267443f4b
    SHA-256: f4b8d5f65392ad23740fa58a072368738e4c10382c7cb8b0c3b07581fb3e349a
    Size: 32.63 kB
  15. python3-libipa_hbac-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: b149a45608e641a0826b46a7af7526f6
    SHA-256: 279d92a28c1afca1a95ba9064511607c8419159285d2e1f7dc0587ea67b7d91c
    Size: 27.64 kB
  16. python3-libsss_nss_idmap-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 52dce825072b582de166f76d0c9fcf4e
    SHA-256: 63abe8cf22864d9a1ba8ae79455b15733d407a460e840a19608b69d25a3217bd
    Size: 20.31 kB
  17. python3-sss-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 6e31ae54f4ff9bda838d8eebc1d6223c
    SHA-256: cb35450efe0f229c8b44375b2d96f75e3fe8fab2f1564ea41c276b7c29b1f59a
    Size: 29.07 kB
  18. python3-sssdconfig-2.9.7-4.el9_7.1.noarch.rpm
    MD5: 1994d9ac70561d16f5852519327b3796
    SHA-256: 3af110a1f503bd88360467ab00a65661be780088121805d8c9fcc1a19d0d8df4
    Size: 63.91 kB
  19. python3-sss-murmur-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: ce0bfd836c9e399860053e253280c071
    SHA-256: b99ff13ce80f2405deb0e82d40aa7e1be008ebaff85cff429aff31b599f8e914
    Size: 17.05 kB
  20. sssd-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: a29a2b8b4d752174bfad09e20d9e3db7
    SHA-256: dd3eeb142836865a1a4b3c94a104f2a65cd336fda8e7064bc1c69eab7c4786ef
    Size: 25.05 kB
  21. sssd-ad-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: aafef570d8a6c3ce1ffa0a389e75188e
    SHA-256: ef11ab56fb1df0a40b64dc6a1e5832947de0c96e4c4498127fbef08898555c46
    Size: 216.65 kB
  22. sssd-client-2.9.7-4.el9_7.1.i686.rpm
    MD5: fe85b8fe119ace633ebf653ea55675f9
    SHA-256: d4bc7846fd4f1442451449ef28edfe9455bc763d9b2242b709d78e1f3dce9ab9
    Size: 168.95 kB
  23. sssd-client-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: ac95e37eff4ac52b42ef24dbb2324975
    SHA-256: c5c6691f816532ab7759f8e344f2db361a1d414d58d37b15592391771358465d
    Size: 165.10 kB
  24. sssd-common-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: f3813e3804c37a3e630f08614086f05c
    SHA-256: 6178ebc9dad5cca894342ed9b9af2dd416491018b17112ef8c16b7d59d82eca5
    Size: 1.60 MB
  25. sssd-common-pac-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 705c6f007cca8e2f6289016a6c5bc384
    SHA-256: 5ce4f893836a725d1f680ed709ce63db93841f4160fb021e1c2190ffa1ce6cde
    Size: 93.64 kB
  26. sssd-dbus-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: b0056fd3a2e68bd9fc4f73914255d776
    SHA-256: 50189e068e9b677f3015450fb535254d80e5da2e7c4d851571490b6ec07382d7
    Size: 133.10 kB
  27. sssd-idp-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 0af7acacca141f56809f7dd34db01ef9
    SHA-256: de5bd192ee666af1ee4a3a9889edb030265755014cc5f8086eb2c6c5008d3bb2
    Size: 39.56 kB
  28. sssd-ipa-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 88b3fbf86dd7f466fd9d7231ed8c0be8
    SHA-256: 5ba69c571a1083984794f3f66ca80a59cc435be3001096622d044a0977f1409b
    Size: 284.08 kB
  29. sssd-kcm-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 88b131d37e93a1a84d292ee615adeb84
    SHA-256: def5eb97c8712f4ddea1f1a001d7cf2f806a93b161b613e46924b1706f1cc115
    Size: 107.11 kB
  30. sssd-krb5-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 7906c2859d1bc48625d5ff1afb053aa4
    SHA-256: 35a9f9057b082507543a0ca1d68d87cbdab1e839b96e75f4e0dbe145d7055df3
    Size: 70.18 kB
  31. sssd-krb5-common-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: ffe7dbf7b33386ef1c945c94b733e262
    SHA-256: 8521469af8fd03e06fc6e4fe6e26db4100d8c2ff4efc9f766ea710c8e4af7614
    Size: 92.08 kB
  32. sssd-ldap-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 7d5477612c2cbecb453ad2f5b453f680
    SHA-256: 15bbd34c1feab7227133c507ef2fd8f975aca536a840d2aa107db1f139c6eba0
    Size: 158.45 kB
  33. sssd-nfs-idmap-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 76e58f96d81b1dd861d605556b6a2882
    SHA-256: 7fadab2253d67c193fb6d569d7ffb5163fde0250a8c90dd9f4ee3baf67f907d2
    Size: 37.19 kB
  34. sssd-passkey-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 40d32e04093217f6217a8ef422f548a2
    SHA-256: ede754ddd4fe5988e3adfe48b0d671edf7b80aa8c81e80f5b617c48ff5555c11
    Size: 45.26 kB
  35. sssd-polkit-rules-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 1acfb618c81ba14f684f5db917534db2
    SHA-256: e79e0f235533a1efe45bcc03a3a4d15caf7d5e06f7691d82a7d5f7031ace7a1e
    Size: 13.33 kB
  36. sssd-proxy-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: c3371fc997f5e2fe5f0f93d26001cf1e
    SHA-256: 89e20c708219cbeb85fae808465e65d3f634fc528a12d388d52f61e656dc6239
    Size: 69.94 kB
  37. sssd-tools-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: b3a378b7a53d827b43aff026c3b24a15
    SHA-256: fc558a7f5e6fa6e48c388884eb72bc03f6736bf417a64d70b45443de861e132c
    Size: 175.83 kB
  38. sssd-winbind-idmap-2.9.7-4.el9_7.1.x86_64.rpm
    MD5: 8ef157e4c6ca07e338da49e7b8a6a36a
    SHA-256: b6dc8fb5202092cbd71283f1566d07d571e4907b207ed5123edbc127c370b743
    Size: 24.51 kB