sssd-2.9.8-4.el9_8.1

エラータID: AXSA:2026-1522:04

リリース日: 
2026/08/13 Thursday - 16:41
題名: 
sssd-2.9.8-4.el9_8.1
影響のあるチャネル: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- SSSD の LDAP sudo プロバイダーには、データの初期化処理に不備
があるため、リモートの攻撃者により、特権昇格を可能とする脆弱性が
存在します。(CVE-2026-14474)

- SSSD の AD GPO プロバイダーには、リモートの攻撃者により、
認証のバイパスを可能とする脆弱性が存在します。(CVE-2026-14476)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2026-14474
A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo privileges on all SSSD-enrolled hosts.
CVE-2026-14476
A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. sssd-2.9.8-4.el9_8.1.src.rpm
    MD5: 307712534e7563190c97c808209aa9ae
    SHA-256: 127f79b068ea0e49e063d2c891dcd59b31a64f67199de8c73215c5ca66b050bc
    Size: 8.93 MB

Asianux Server 9 for x86_64
  1. libipa_hbac-2.9.8-4.el9_8.1.i686.rpm
    MD5: 03246dcac504cf4513fc209e42917f00
    SHA-256: 21c5abafa1ab674503d253369234b619f0d461feac39abe9356759fac80e43b9
    Size: 31.11 kB
  2. libipa_hbac-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 7e7ba368c3cf314bea1b2ea8365ef9de
    SHA-256: ecf6ff8ab8d63e3b8e0a9ebc537c18cf41d04290caa3398b96216823f8cd2d06
    Size: 31.30 kB
  3. libsss_autofs-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: e683ff20bc3d04fd03b52e6824d313de
    SHA-256: a143b98b7904b0c7c8a67375d9e1f65418baa0cd84f08de95b91f39346fc41a1
    Size: 33.76 kB
  4. libsss_certmap-2.9.8-4.el9_8.1.i686.rpm
    MD5: 661dd2f5dcdb11b69b169a2c26851430
    SHA-256: 75b295946c2837522c9a48a884e8086884123bbabdfdd8ba5586d0e4d0718db6
    Size: 87.57 kB
  5. libsss_certmap-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 2c47567210081ad09268f24387b6a738
    SHA-256: ad36af64d7e3cf9bf82b82ad481a38f5c012a1fe9208d296e7d97f7bcf961dad
    Size: 85.99 kB
  6. libsss_certmap-devel-2.9.8-4.el9_8.1.i686.rpm
    MD5: c53e54dc2f6f7942858332ac9d253f1e
    SHA-256: 33ecac825a64fd06fe702544b04b1f0462d76fe27d24029e6f182aa335fe7462
    Size: 117.40 kB
  7. libsss_certmap-devel-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 9753a0c9e4f3b6cdcc413a3e906bb880
    SHA-256: 23c423303b74755a43231186ea67809a57c61c3c01b8f56bd5f90106df846ec6
    Size: 117.38 kB
  8. libsss_idmap-2.9.8-4.el9_8.1.i686.rpm
    MD5: 0c48171a7bbf9d0ffcf6c52a98fcd080
    SHA-256: c8a5a184faff51190f161e8d638503d92bde983c72caf592df4f49514c1b867e
    Size: 37.91 kB
  9. libsss_idmap-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 000098602b3b14b5f662f9f561e715d9
    SHA-256: 35fdf51f8efe4e592b71fe845d2e458492b72fb4d64cba6d03bdbe65cdba42e1
    Size: 36.92 kB
  10. libsss_idmap-devel-2.9.8-4.el9_8.1.i686.rpm
    MD5: d8249c40dff2581b7c3a109bc1dd479b
    SHA-256: cd08b905c6fe1a8b7487f601e7a0c3676772ee12177688643e9bc0689e6c9975
    Size: 114.45 kB
  11. libsss_idmap-devel-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 8725df66adf0832cef9185a44d2a177a
    SHA-256: 7a4d8ca94089e8cb11f4d25b82bacfbe9ec8b57016238e03520268ba74015ea2
    Size: 114.42 kB
  12. libsss_nss_idmap-2.9.8-4.el9_8.1.i686.rpm
    MD5: 54af89f10763f5b9199138181e720d86
    SHA-256: 1bd3755a3ec2227cc30e42de5206f476d90e09310b3bff559c3991f1fae450a6
    Size: 42.16 kB
  13. libsss_nss_idmap-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: ce50de4580d68002be32da0ef42d5535
    SHA-256: 4be3397850a29fa5970fd9fe716c0a1ca12006af0eff5298a5e07a25319e3ed5
    Size: 41.28 kB
  14. libsss_nss_idmap-devel-2.9.8-4.el9_8.1.i686.rpm
    MD5: 7af4cbc5cc81139beb7388ea5c968950
    SHA-256: 9a5089ecc6efdd5b7729eb2fa45e8374ac9455a55e5508287f0390ef536d76ef
    Size: 101.23 kB
  15. libsss_nss_idmap-devel-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 9a3207ab4b5a0f151b7ae7e45a9136bd
    SHA-256: 371daf3d24dac817171dc2a0e1b97d1db2abc28296f8e87ad677bb0287db3b5c
    Size: 101.23 kB
  16. libsss_simpleifp-2.9.8-4.el9_8.1.i686.rpm
    MD5: a0fe0b2c1bc6823ee326c85c0a993140
    SHA-256: 7d38ac6f6edc718374698aeabbd140acaf9c905b2b843993d7629048022daadc
    Size: 24.70 kB
  17. libsss_simpleifp-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 7a5867330c270aff1523f5753f08795c
    SHA-256: d21caca8b7ea897aebb294012ff4cb692529bc08bafc4ee4a5330ff7fa5c9237
    Size: 23.96 kB
  18. libsss_sudo-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 6da4d36153aef1cff5ff4e6b192489d0
    SHA-256: abd1cd755b2d9f3de85d35c0cf6ebfac449cc217733a9a1fe0a8a5364058bba4
    Size: 30.59 kB
  19. python3-libipa_hbac-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 8c62b1fa5c845be7220f1835f5a01e82
    SHA-256: 8fa60ae7a7976ca97b59b6c412cd08c21c2bafb200ad9079ffd444ce32aac0d4
    Size: 25.52 kB
  20. python3-libsss_nss_idmap-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 267ee763cc33d5c2fa32e0a45abb79a1
    SHA-256: 8360a2f03eb63ed102a55bd04eeb84bab3a1d6ba7dc8540a502c57ab3007785e
    Size: 18.29 kB
  21. python3-sss-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 26a069225460a2d2aeed00cc8747e39b
    SHA-256: e5945fee14d0f2b80b452be040e943b821286a62b24f067335e0b82f4eb03509
    Size: 27.04 kB
  22. python3-sssdconfig-2.9.8-4.el9_8.1.noarch.rpm
    MD5: c1d7a379657db3a615df1d4689ff92c5
    SHA-256: 728b35b8900bd0f6331162111f7f86c2117cee2afeb190b3b98ad9764a0c1f86
    Size: 61.95 kB
  23. python3-sss-murmur-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: c2a5eb2d17211b93a7f689290eae8de0
    SHA-256: 41c4586d64c95260a0ecb767b915564e7c9dee8d4cf1dbc57f6bad1dfae20dcf
    Size: 15.03 kB
  24. sssd-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: cbfac022b8384921489960100a97e070
    SHA-256: 1f9bee69e0ae53dfd6140b7edd1823543485eaf78792d2b7477b9723b7af708b
    Size: 23.01 kB
  25. sssd-ad-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 1795c78b488370dd2c50badcdd1a9604
    SHA-256: f265da2f743268a68df853b5d1af90ade8ad35f6e4e3f7c8b2d2dd8b8d345d63
    Size: 214.66 kB
  26. sssd-client-2.9.8-4.el9_8.1.i686.rpm
    MD5: 4bc26ca537f5985d167e12eaa6921d0b
    SHA-256: 7a55779b38c53c84ed9a17863834c3b00916df8a6718245d72ac61b16d140ef3
    Size: 166.75 kB
  27. sssd-client-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 58aa5a91cb7ac9b654062f76a31fac11
    SHA-256: 9e7d6f9d092f55ecf9331b1d2256c097d6ad9cd88506698cb1172fcd68000ffa
    Size: 162.88 kB
  28. sssd-common-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: df728f7afffbb3b344095a05099e122d
    SHA-256: 97e19c4ea792a31ebf78da658365e98c80f2c981b711e12b36d0d06ce614b1b9
    Size: 1.60 MB
  29. sssd-common-pac-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: d5cd3b67900d1fd57006279b53aaf9ce
    SHA-256: 24e002d9a44f5ff9021e0fea685e2564c0f85965bf53a72d2bf110d7ad244059
    Size: 91.74 kB
  30. sssd-dbus-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 6fc839e22fcb9943fcb3955d398bd33a
    SHA-256: 3a83870ed4831d380075d177e085373f0a1c9f0b164c7180b89c2d91d6e1f3fe
    Size: 131.31 kB
  31. sssd-idp-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 4d748d530336f4177a41a9d50ef42631
    SHA-256: ebbf98326eeb5c9b3d0b229c74dda362511bbb5bf1da3ad8d02cb16b59180b3d
    Size: 37.54 kB
  32. sssd-ipa-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 79bb9876fdb5fe326a4ca7ec0365229d
    SHA-256: cf58099e4c635f308fd680ff78fb2ffa67ae5544932b440d534e1dcd0ffe1ad4
    Size: 283.45 kB
  33. sssd-kcm-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 3eefca13a5e4513f564733b11c31a2c8
    SHA-256: 5a9674d1e9bd29a534013773009aeb799dd2e5b026c3eca0237e0aaadc473872
    Size: 105.00 kB
  34. sssd-krb5-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 68ff0cdab3331c5f6e0903cf7af292a9
    SHA-256: 3f17096eafeeea747312162be7e8e8f8422ae9e85f899135f4baf0f9333a2f6c
    Size: 68.15 kB
  35. sssd-krb5-common-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: af66b877a061dde0f2b75de082066f25
    SHA-256: 845f338a30e8b37e481bb370ed7cae0b374fbc65f7341b79ff2123453caf4128
    Size: 90.15 kB
  36. sssd-ldap-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 30211730ec68877cc0fccfbebb10eadb
    SHA-256: 62e6dd06003e8b00cce1203aca781dd649ea6249403ad87c695202aed75fe2fe
    Size: 157.77 kB
  37. sssd-nfs-idmap-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 5521d0b079bb90e13cf5b988ab8e5be2
    SHA-256: 8f13aff41c619248d1a9047f1f02ccb00549550d288e4e90787ae53b915f9583
    Size: 35.35 kB
  38. sssd-passkey-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 3dcf8734d2e7c602b203c1a5488ccdc5
    SHA-256: 0740f56db3ecf0d449b88e69e2439aa316abec41d471e19bba8827a1f902508e
    Size: 43.22 kB
  39. sssd-polkit-rules-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: d3749b04298ed1f91f04d6cc70a44ad3
    SHA-256: 7b9ff11f72bc1a79b6fd7d1ef26ffc17e7bb6bdf2b72d6c499edb3c22a7f4aaa
    Size: 11.30 kB
  40. sssd-proxy-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 1b0fadc494bee7b364283d6cbed39b5d
    SHA-256: 58d3b70ce40f0d4d4177c733d2730e2549434967c445fd722329210fa2288c04
    Size: 68.04 kB
  41. sssd-tools-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 0bd870e4136e06a517cf3d842166eeb4
    SHA-256: 3ad0e7de9351353f5f687226b1dc4705612b75422ff09da088be185e9381e085
    Size: 173.85 kB
  42. sssd-winbind-idmap-2.9.8-4.el9_8.1.x86_64.rpm
    MD5: 7af7cbec64fd423ee7756f3e6f517b19
    SHA-256: 68634058ed4bcb9e68522f9791a1f960b889c69a478747935f5c739355170b7e
    Size: 22.49 kB