SUSE-SU-2026:20019-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2026:20019-1

UNKNOWN

Security update for sssd

Published Jan 2, 2026

Modified 2 weeks ago

Fix available

Details

This update for sssd fixes the following issues:

CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325)

Affected Packages(24 packages)

libipa_hbac-devel

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in:

2.9.5-160000.3.1

libipa_hbac0

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in:

2.9.5-160000.3.1

libnfsidmap-sss

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in:

2.9.5-160000.3.1

libsss_certmap-devel

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in:

2.9.5-160000.3.1

libsss_certmap0

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in:

2.9.5-160000.3.1

libsss_idmap-devel

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in:

2.9.5-160000.3.1

libsss_idmap0

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in:

2.9.5-160000.3.1

libsss_nss_idmap-devel

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in:

2.9.5-160000.3.1

libsss_nss_idmap0

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in:

2.9.5-160000.3.1

python3-ipa_hbac

SUSE Linux Enterprise Server 16.0SUSE Linux Enterprise Server for SAP applications 16.0

Fixed in:

2.9.5-160000.3.1

References

REPORThttps://bugzilla.suse.com/1244325 REPORThttps://bugzilla.suse.com/1251827 WEBhttps://www.suse.com/security/cve/CVE-2025-11561 ADVISORYhttps://www.suse.com/support/update/announcement/2026/suse-su-202620019-1/

Upstream

Related

Ecosystems

SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP applications 16.0

Timeline

PublishedJan 2, 2026

ModifiedJan 2, 2026