sssd-2.9.4-5.el8_10.5

エラータID: AXSA:2026-1443:03

リリース日: 
2026/08/04 Tuesday - 16:32
題名: 
sssd-2.9.4-5.el8_10.5
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- SSSD の LDAP sudo プロバイダーには、データの初期化処理に不備
があるため、リモートの攻撃者により、特権昇格を可能とする脆弱性が
存在します。(CVE-2026-14474)

- SSSD の AD GPO プロバイダーには、リモートの攻撃者により、
認証のバイパスを可能とする脆弱性が存在します。(CVE-2026-14476)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2026-14474
A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo privileges on all SSSD-enrolled hosts.
CVE-2026-14476
A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. sssd-2.9.4-5.el8_10.5.src.rpm
    MD5: 4deec8cfa53eee11b8557fe7421fd212
    SHA-256: 94c7261052494bbf081d81341de730b720e442aea83014b2a514a44b6b4f72df
    Size: 7.79 MB

Asianux Server 8 for x86_64
  1. libipa_hbac-2.9.4-5.el8_10.5.i686.rpm
    MD5: fabb6bb8c3d6d20101f19c3ea4bbf60e
    SHA-256: 1760f234178bb27f5e74470530769f4c9c686d0a62c521abc3ed58ffafdb5311
    Size: 129.50 kB
  2. libipa_hbac-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 6bfe393b4eb06b81d2f1a6bb407d95af
    SHA-256: 4382140f5abb790fa9ccbe1595c6adc34efb6eba9c0775b63a3f680df6e14dbb
    Size: 129.39 kB
  3. libsss_autofs-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: a11fd12d53b3b460d23f55861f5e3f60
    SHA-256: c266fad6550e0770a9aaaf517b91b7ed2def67aec082c274c8f6364aa8de220a
    Size: 131.91 kB
  4. libsss_certmap-2.9.4-5.el8_10.5.i686.rpm
    MD5: 07767c7aad12f80681531598b3fb4c24
    SHA-256: 1f3799f21a69555da0e0a4f93e790790bd9764b23ed3a3486fb7c03b2c8ef2d2
    Size: 190.19 kB
  5. libsss_certmap-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 988d13c24ae2e1769b3818c31b267bab
    SHA-256: da4a251ac4f9de35c06c4d0c83485e289aa0a0f7383bf19ad4bfe06b19be4998
    Size: 187.57 kB
  6. libsss_idmap-2.9.4-5.el8_10.5.i686.rpm
    MD5: 2fc5e46651e0eeb5955ed4310ad8c819
    SHA-256: 97ca6a9e166b11ce16739cd81117f5e1e744d38e8018eae0da6a55aec389f8ac
    Size: 135.07 kB
  7. libsss_idmap-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: cee831fb39009fb53ec4dfa649475ffa
    SHA-256: fe59eab2a1c1c290fbfa94a0401c2bae1bafb1757d531856b304e6881bfc8b38
    Size: 134.00 kB
  8. libsss_nss_idmap-2.9.4-5.el8_10.5.i686.rpm
    MD5: c38400091ab64f7675ad23576455cd0d
    SHA-256: 43610baa2129e287308666b055ff8d1bf3d979b1724427a074e845fb1e7f0ba5
    Size: 144.03 kB
  9. libsss_nss_idmap-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 0a78f1cef99125d354007a475fb1e449
    SHA-256: 07a76477b6c45ff7fa5aa86d3312ee22116c8ecc2594fffda14e7e26f3e2c782
    Size: 142.46 kB
  10. libsss_nss_idmap-devel-2.9.4-5.el8_10.5.i686.rpm
    MD5: a9fd154521809d48da2aaf7fcd89a8fb
    SHA-256: 07fbdc8f6ca9891569df8eca3d886fe3a8a1993ba989c5f5382f8b4217629097
    Size: 192.16 kB
  11. libsss_nss_idmap-devel-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 8d90885911cd4b8d804a5c8aa6408e3b
    SHA-256: 7d793bb9f2b4df481f60222893a186bd3d7f9e0cbdea23ec5359311ad1fa2737
    Size: 192.14 kB
  12. libsss_simpleifp-2.9.4-5.el8_10.5.i686.rpm
    MD5: 5e99504d59f63c6d5ebfe3bcaadd8a0d
    SHA-256: d0949014c79386d187975c82852126493edaf8f231d53136441726065a1cfe8c
    Size: 121.53 kB
  13. libsss_simpleifp-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 7d2aacf781f75b2efc5b14061836c606
    SHA-256: 90d04555c474162f35483c136038a65f4f09edfd5891538695dfe9fb75936072
    Size: 120.80 kB
  14. libsss_sudo-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 4f240a198a81749e0413a037d3f7d035
    SHA-256: aa6c9d5585a43ff972219322da2a7d76375e5559c648b5c000fe80aba47e75e6
    Size: 129.98 kB
  15. python3-libipa_hbac-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 9298bbaec69bd8337b02fbe7901eaa36
    SHA-256: 6952db956979efa6df7828e5d818559ce0cb64f973c7b9ccc078c874e6f2b6d6
    Size: 122.27 kB
  16. python3-libsss_nss_idmap-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 98e18363f18b5f7819b60a738c6a5094
    SHA-256: 4bb5d0f499f25467d4ad67f75fa977b561879333022bee1fd1edd6064fa11d58
    Size: 115.57 kB
  17. python3-sss-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 68ecd6d76e73c00dcbecc27b58bee363
    SHA-256: f7ae2fa2e3401cc72dc2a770323e41c7de11b12f6b56ba19764b6a52f203f14b
    Size: 123.67 kB
  18. python3-sssdconfig-2.9.4-5.el8_10.5.noarch.rpm
    MD5: 08e2163766fd2af78dabcd1e979d7e5a
    SHA-256: 9cc5bafc90739487e0987233959f1cdaa44d0a3f0858ab6b65a01c68061683c8
    Size: 155.25 kB
  19. python3-sss-murmur-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 6c78992383e4c34e0ce275a802f441ad
    SHA-256: f8b1ed759de7cf78a0b7097efe6ec186adfca84486dc86b42362fd34499b11b6
    Size: 112.32 kB
  20. sssd-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 9dc34b78e4be564241c5fbfba9a99779
    SHA-256: 16c8b4e8e5c1bf61e4216c8a20e1c582df9736d8fa5e4ad45d99e8f318718ae3
    Size: 120.69 kB
  21. sssd-ad-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 8597b84d47486bcead4581ba1ca134e5
    SHA-256: 2e9bb02eda15bcab0e510dcfdb6f36f3ff8b9e35e8ceef9fdc25c3f5c51bac24
    Size: 316.19 kB
  22. sssd-client-2.9.4-5.el8_10.5.i686.rpm
    MD5: c2546c3e85ced66159aa97e6dc6345d9
    SHA-256: 59e737e75023995adbb4b069756e2968c3a62f6c2da77dd007d72bf2aeb0b0e2
    Size: 250.38 kB
  23. sssd-client-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 36f2a6f6de22c9b59b7a13502972f509
    SHA-256: c95f4c7d5010cc57facc2bde92e918741fcd00177e0830203f523f76d392dac4
    Size: 246.62 kB
  24. sssd-common-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 0b913983a0bf9c11e70540bfef175a04
    SHA-256: 029ae80e4dd01af62a2cf8fcb76beecc4cb0822e38a459a12b723debe99f3b57
    Size: 1.69 MB
  25. sssd-common-pac-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: e68acb86f8b1dca8cfa3237c7144f455
    SHA-256: db40d30bc9e34bb7f265c7c08c746df624bb6557fb35f0a8d0a42d0facc57c53
    Size: 197.01 kB
  26. sssd-dbus-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 094b9ec1e0de0ff45915305a2602963c
    SHA-256: 21890c954c32c4d27e8200b5320e35b17d51cea1009f1bdf98719f3a693a3b96
    Size: 233.50 kB
  27. sssd-idp-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: a6e96e517392428ac6ba27832105ad81
    SHA-256: 0d62d167f8e806ad163ffc92718e5d2aeaecbce0016caba3c84d1bed990ac846
    Size: 135.92 kB
  28. sssd-ipa-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 27bc2ab9e64ec5e3bca5ea516cd8b2da
    SHA-256: 1ef4ed2381484595f21977bd5bce93896883ca1baef0180b76da20e4f1e17897
    Size: 380.39 kB
  29. sssd-kcm-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: d34a98447d98f04a13151ac83e548624
    SHA-256: 76c4450abb0b8ea4d28ace3e21f6c09f9074afde98e18ef475218044202b47be
    Size: 267.36 kB
  30. sssd-krb5-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 3ed0afb78266335bc8e7673eda0fea55
    SHA-256: 6fd18f052bfb445c68a0891fe4e742318cf65afd992a4b5222df56352f323242
    Size: 166.27 kB
  31. sssd-krb5-common-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: bd9341424582085dbc732495178216c0
    SHA-256: 5a3a9215eef76f65bd2537d78c9c005f2710777ee47f11321c94a6927bb97cfd
    Size: 207.82 kB
  32. sssd-ldap-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 15a7e24195a5a57010b35da07da4e3da
    SHA-256: 21e542b7805c53773d0b1274c3470ca6ebcc9679e922b5d251b04f45aad68648
    Size: 252.86 kB
  33. sssd-nfs-idmap-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 75d39220b993ec2644159015771aa973
    SHA-256: 47e420663195b757f71d00cfacad01a1754895d12c8e6eff9b1983e9f031f501
    Size: 131.16 kB
  34. sssd-polkit-rules-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: bff0316fba1fcf185a0e9ecd8dd7ae4f
    SHA-256: bc125ee6148e78e72ca6a9d347574e3c7703cc000b74e89e14733782a8d2e406
    Size: 108.56 kB
  35. sssd-proxy-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 2efda131c6e1e090f82903e77184bd64
    SHA-256: 6c6299706b6105745c970e7ad206767585431b934c83456894a83e78a79f3c43
    Size: 165.20 kB
  36. sssd-tools-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 828ec7107b6f86cc4de2647dc1648e28
    SHA-256: f7de162058716624b9c08b34cf0e223246df3e58ffd31d286f25b5fa89b3bff0
    Size: 262.11 kB
  37. sssd-winbind-idmap-2.9.4-5.el8_10.5.x86_64.rpm
    MD5: 47971ac9bf2027c1488ecaf9536bc063
    SHA-256: 2d61075c6a1d3eb53189b9b999cc7a5266f0b7673b90b22ab4580f3511566ef1
    Size: 119.95 kB