sssd-2.9.4-5.el8_10.3
エラータID: AXSA:2025-11068:06
リリース日:
2025/11/11 Tuesday - 16:04
題名:
sssd-2.9.4-5.el8_10.3
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- SSSD には、権限の処理に不備があるため、リモートの攻撃者により、
不正な認証、および特権昇格を可能とする脆弱性が存在します。
(CVE-2025-11561)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2025-11561
A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.
A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.
追加情報:
N/A
ダウンロード:
SRPMS
- sssd-2.9.4-5.el8_10.3.src.rpm
MD5: 60beea82c1e0770441327eac344a9885
SHA-256: 977b2e1eea08569732499b1c06b85ae05f9366e4d1483fa1dc3fa80a251040bc
Size: 7.77 MB
Asianux Server 8 for x86_64
- libipa_hbac-2.9.4-5.el8_10.3.i686.rpm
MD5: b4f7d60a5df0c9625d519d7d3121f93b
SHA-256: d83d936fe2f0f7b9daa2a838f805221fef8416d1725791e68775f4bd3eeaaa5e
Size: 128.35 kB - libipa_hbac-2.9.4-5.el8_10.3.x86_64.rpm
MD5: d22d1a51bc3c480068cbb33a3b090a14
SHA-256: cc28f82f798a031df8096e20cb6da1837da68b20eba6522fbea7b942379d2efc
Size: 128.14 kB - libsss_autofs-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 2b4bec378199f31ddbff0fcf7a610d6b
SHA-256: dbaaa5e2cc03add17ed947a60f1de44d73d4e79ecccfb690b215b4071c63a8e8
Size: 130.66 kB - libsss_certmap-2.9.4-5.el8_10.3.i686.rpm
MD5: b09e659ca8d57b18599c212039c42078
SHA-256: c49040133beed54cd1262794e17fbc48cf8df8af35fcf5435712737a6de4977f
Size: 189.02 kB - libsss_certmap-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 219ec01d87cd0ad258d2332dda33b27a
SHA-256: 26ecd3765b2ae29ad4ae3347bfa58d1611ee6afe44680fc133e18bf47a10d820
Size: 186.40 kB - libsss_idmap-2.9.4-5.el8_10.3.i686.rpm
MD5: 7ebf17ca331199b5d934cde41d2936be
SHA-256: 23880adcfa958882b41a2aa19dfabf55f78784e57b870e88fabd2fc64fe931b4
Size: 133.94 kB - libsss_idmap-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 665ff7063cc04f82ad86d7c7fa13be72
SHA-256: 57c5cf7edbe59d9f675d8f0e736731bf862b34dd160dfa8175cdbbeb0b71db0f
Size: 132.84 kB - libsss_nss_idmap-2.9.4-5.el8_10.3.i686.rpm
MD5: dfb9c006520f58d2f00378f50ddf4a09
SHA-256: 8306943a018f1686f782a67fc627c98967a009abccfbabe185d80c01713ec2e9
Size: 142.87 kB - libsss_nss_idmap-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 7ad95a7af512e59a5e8cd848afa98250
SHA-256: 702d68c272f17c229de1006b3aa53f5d57128233f396f242e505bdfa40eeaae1
Size: 141.31 kB - libsss_nss_idmap-devel-2.9.4-5.el8_10.3.i686.rpm
MD5: 58d7d596fb65f9c8a03dc13febac9a1d
SHA-256: 157a1de7f88cca5d56a6fae2ccbdfb07f9571433bcf5ba70fce6c7f706f58d88
Size: 191.00 kB - libsss_nss_idmap-devel-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 43c23eddc4d5d369a56956c4ff8f3ab9
SHA-256: c1cd1252c3a2d42c641e66251a242d6c9df109e5460c845431017f06693717d1
Size: 190.98 kB - libsss_simpleifp-2.9.4-5.el8_10.3.i686.rpm
MD5: 7c2a2eb4e1934f2f146a727fc4e9b0d8
SHA-256: 7e628a75a0d0104da9bff0cbae47a96f8664e3c09fbc8fdc80e5a61f4b218691
Size: 120.29 kB - libsss_simpleifp-2.9.4-5.el8_10.3.x86_64.rpm
MD5: b2bc280323dafa032b0f9088d568272a
SHA-256: 205e02309be715d75218896c9bb2a1658866d034f26750154a896dcb7d0384a7
Size: 119.65 kB - libsss_sudo-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 9a28e76a557fa012d1923a2c3bc1dacb
SHA-256: b929d272466bbd3dc4ad601d187a3b31a1b7bb601f105dda63351a0f1c07af57
Size: 128.82 kB - python3-libipa_hbac-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 43cd3abcac480bd4528ed9fef079510e
SHA-256: 147bd26d34f12bf4f1f02c95359a49f9d4fd3da4be65a761875b7eb2a6452dad
Size: 121.12 kB - python3-libsss_nss_idmap-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 30225a36fa5fa786c7ba7d2f7f9ab99d
SHA-256: 6afb080ea54b116a98ed8a7d0854ea3d4eb8ad60f4226b66395d0dae89475274
Size: 114.33 kB - python3-sss-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 9c80194e5e0dfe7956b812f0222a5011
SHA-256: b91a01c03a84be8a9e62e15a24565a57c45fa071a41dc144cee29a4c91b6ee4a
Size: 122.52 kB - python3-sssdconfig-2.9.4-5.el8_10.3.noarch.rpm
MD5: a11f0a2495aa14648532f15c86227680
SHA-256: 4dd0f95935ffc332584b2251da4bf49105e4eb0c4afef24d252bf758f59f00cf
Size: 154.10 kB - python3-sss-murmur-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 3e4273108f2f4bef23234920de159a0f
SHA-256: 3746ae93c06769c1d6a2bb27195616a79166cca2b8592d987d36d19e7a083454
Size: 111.17 kB - sssd-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 9d6d245f6d3eb1b4a78e85b229fa6002
SHA-256: f039fec373a50fef4900d5891d73b3e52826cbdb24b4d7d3f07ee8b3c159874e
Size: 119.54 kB - sssd-ad-2.9.4-5.el8_10.3.x86_64.rpm
MD5: f04fb942a9aee9b1c79cd8ee13515e1f
SHA-256: ace207ecc3e2637199a8202d2bd70197321de8edf2c1912b01396b2f8215136b
Size: 314.61 kB - sssd-client-2.9.4-5.el8_10.3.i686.rpm
MD5: 5f9fe32bbbfca35c15a15b1ad497a135
SHA-256: fb0c9ccecc026bd46374aa752b374099917bd976b355d24a9040ad9425307b0c
Size: 249.30 kB - sssd-client-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 7e6ab81633a24802e33d20df669f7a00
SHA-256: 9c6864acba07f4a22e9620e977de06db7a3e7bc02ede21a75cd54d54899917b2
Size: 245.52 kB - sssd-common-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 926e74eb472afdd87389f76fa09bfd1c
SHA-256: 9bc659d8bf973f43920782833d7dca71291675cde6d1c34b9a19a67e8b861459
Size: 1.69 MB - sssd-common-pac-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 88f3b19cd8fb89fd8e3ff63e057ef0c0
SHA-256: de84813660a8849068dce1d4de1cf5915487ec895b47208d57e6c783fd465765
Size: 195.70 kB - sssd-dbus-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 12c02d1fbfc0f8ff5e1d5cd33153218a
SHA-256: f92a589006f8c15d8e5ed09af45d7be634988978e127b1e595ac0937e1aa7f97
Size: 232.07 kB - sssd-idp-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 82d67054ec4cd42fc6254a69b5d31993
SHA-256: d4089d206d3d8a336212a76a3119dc265a6119b118f81762f969bc00063be9fa
Size: 134.76 kB - sssd-ipa-2.9.4-5.el8_10.3.x86_64.rpm
MD5: e3c0f5cdd7b0413dc5f912a42399b1d2
SHA-256: faf5af4d6e395f8fd0c5e70ed90ec18b500159f36a488196134116f392f62ac5
Size: 379.29 kB - sssd-kcm-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 79f5f5b00244ebe6a1ecdb519b56e290
SHA-256: cfbac638d0a507d6b04e66461bcb2412e1d20eed5a1ee7b8b4271bc7a5332176
Size: 266.01 kB - sssd-krb5-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 6504e69602679ef17a59ca363a7efdde
SHA-256: 2d3cb790bdd464c09252f825ef59635e898b38de5bab0d5eb4bf30a166f0b1fe
Size: 165.05 kB - sssd-krb5-common-2.9.4-5.el8_10.3.x86_64.rpm
MD5: ea330769984cff12596ec91bb6158708
SHA-256: d91f09e9aa09df01c36b60b53ff2c060f20fb746c0a28aba6cc3f134272c24ec
Size: 206.67 kB - sssd-ldap-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 1772daf88332ccce27c9aa68d2c43543
SHA-256: cb075172cf4fd1a4e1d8bb1a1fdaa0b7358f2727a9f580bd8ecbefaacc4d5d00
Size: 251.59 kB - sssd-nfs-idmap-2.9.4-5.el8_10.3.x86_64.rpm
MD5: b9bcce6eee1801904edbc1e734fab42c
SHA-256: 7366ffccd65351c00e393dcb7ba23a04b9e27037b148a04e7b292ed4da7a3d1f
Size: 129.94 kB - sssd-polkit-rules-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 8d67685f4227658df1507721d55cb30b
SHA-256: 7efb410c4fae07a4f686f7914b589e7ec490761e9c2c929aebffad1101f71b12
Size: 107.40 kB - sssd-proxy-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 104de36485b9787e2c0c2b7641494ad7
SHA-256: cf101cd4acf7be7c6ced496cbc42f447da2990934a250ed4b1cab7f2285a0b00
Size: 164.04 kB - sssd-tools-2.9.4-5.el8_10.3.x86_64.rpm
MD5: eeacad5f0e0a1fe2c2f610bb40713178
SHA-256: c40f5565d90b4d64f882c48c4be5d215b76c82dd28eee5db8d74d478c0aadb7b
Size: 260.86 kB - sssd-winbind-idmap-2.9.4-5.el8_10.3.x86_64.rpm
MD5: 68876d4e6607ce2d7cf8ee5083365550
SHA-256: f94ba81339c368f93e03517aef660c50a8dd5046581aca455447c0c182bddcfe
Size: 118.79 kB