Oracle Errata System
Oracle Linux
5.11
2026-10-09T05:19:49
ELSA-2026-77534: sssd security update (MODERATE)
Oracle Linux 10
[2.12.0-3.0.1.el10_2.2]
- Restore default debug level for sss_cache [Orabug: 32810448]
[2.12.0-3.2]
- Resolves: RHEL-257112 - CVE-2026-87853 sssd: IDP prefix-match bypass in eval_access_token_buf()
[2.12.0-3.1]
- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass
MODERATE
Copyright 2026 Oracle, Inc.
CVE-2026-87853
cpe:/o:oracle:linux:10:2:baseos_patch
cpe:/a:oracle:linux:10::appstream
cpe:/o:oracle:linux:10::baseos_latest
cpe:/a:oracle:linux:10::codeready_builder
sssd-ad
libipa_hbac
libsss_nss_idmap
python3-libipa_hbac
sssd-ipa
libsss_autofs
libsss_sudo
sssd-krb5-common
sssd-common-pac
libsss_idmap
sssd-common
python3-sssdconfig
python3-sss-murmur
python3-sss
sssd
sssd-winbind-idmap
sssd-idp
sssd-nfs-idmap
sssd-client
sssd-kcm
sssd-passkey
python3-libsss_nss_idmap
sssd-ldap
sssd-tools
oraclelinux-release
libsss_nss_idmap-devel
sssd-dbus
sssd-krb5
libsss_certmap
sssd-proxy
bc4d06a08d8b756f
^10
aarch64
0:2.12.0-3.0.1.el10_2.2
x86_64