Oracle Errata System
Oracle Linux
5.11
2026-07-23T16:52:24
ELSA-2026-42122: sssd security update (IMPORTANT)
Oracle Linux 9
[2.9.8-4.0.1.el9_8.1]
- Restore default debug level for sss_cache [Orabug: 32810448]
[2.9.8-5]
- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-14474
CVE-2026-14476
cpe:/a:oracle:linux:9::appstream
cpe:/o:oracle:linux:9:8:baseos_patch
cpe:/a:oracle:linux:9::codeready_builder
cpe:/o:oracle:linux:9::baseos_latest
sssd-ad
libipa_hbac
libsss_nss_idmap
libsss_simpleifp
python3-libipa_hbac
sssd-ipa
libsss_autofs
libsss_sudo
sssd-common-pac
libsss_idmap
libsss_nss_idmap-devel
sssd-common
python3-sssdconfig
python3-sss-murmur
python3-sss
sssd-kcm
sssd-winbind-idmap
sssd-idp
sssd-nfs-idmap
sssd-client
sssd
sssd-passkey
sssd-polkit-rules
python3-libsss_nss_idmap
sssd-ldap
sssd-tools
oraclelinux-release
sssd-krb5-common
sssd-dbus
sssd-krb5
libsss_certmap
sssd-proxy
bc4d06a08d8b756f
^9
aarch64
0:2.9.8-4.0.1.el9_8.1
x86_64