Oracle Errata System
Oracle Linux
5.11
2026-07-21T12:30:09
ELSA-2026-41937: sssd security update (IMPORTANT)
Oracle Linux 10
[2.12.0-3.0.1.el10_2.1]
- Restore default debug level for sss_cache [Orabug: 32810448]
[2.12.0-3.1]
- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-14474
CVE-2026-14476
cpe:/o:oracle:linux:10:2:baseos_patch
cpe:/a:oracle:linux:10::appstream
cpe:/o:oracle:linux:10::baseos_latest
cpe:/a:oracle:linux:10::codeready_builder
sssd-ad
libipa_hbac
libsss_nss_idmap
python3-libipa_hbac
sssd-ipa
libsss_autofs
libsss_sudo
sssd-krb5-common
sssd-common-pac
libsss_idmap
sssd-common
python3-sssdconfig
python3-sss-murmur
python3-sss
sssd
sssd-winbind-idmap
sssd-idp
sssd-nfs-idmap
sssd-client
sssd-kcm
sssd-passkey
python3-libsss_nss_idmap
sssd-ldap
sssd-tools
oraclelinux-release
libsss_nss_idmap-devel
sssd-dbus
sssd-krb5
libsss_certmap
sssd-proxy
bc4d06a08d8b756f
^10
aarch64
0:2.12.0-3.0.1.el10_2.1
x86_64