[CLSA-2026:1793032356] sssd: Fix of CVE-2026-104048
Type:
security
Severity:
Important
Release date:
2026-10-26 17:41:48 UTC
Description:
- CVE-2026-104048: compare HBAC users with domain awareness so a trusted-domain user whose shortname matches an IPA-local user cannot satisfy an allow rule
CVEs fixed:
Updated packages:
  • libipa_hbac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:2df829e134078528afb6d070da7a6c50f27e7645a279129efdfcc45fcd6b89de
  • libipa_hbac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:ea456edbf2f4607ec3e898551940b413c9565711212c7e380f560519b09f67ae
  • libipa_hbac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:692fe673db73b2a3448f1d01c1e0452e308bc0e853b4f3360f38ce83e042f70b
  • libipa_hbac-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:02e0fbe1ecc01b7e15662ba75a2a0c88f5efce1671f95ba8f17e8da298bb14b5
  • libipa_hbac-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:9f00cd14d98ff15cbf5024853cc6a3e0deb61226acaf1fd9f0666dd07476afd7
  • libipa_hbac-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:b0ddcd2cff4139b6f1784e2c94bac2e2fd56d002f118a33dd79466b003948899
  • libsss_autofs-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:0c9ec32c7f3df5228361481cd512b53a76b26691b0f8fa3cf49f9e4b6a82992a
  • libsss_autofs-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:33918b965e8f78ef70f98b30c6121bc6cd876bb279fbeb0f7ea47a6d6c0c3088
  • libsss_autofs-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:b331a1b2f53fe949414b00a161912c254dc12edb3a7f59f606d7a6f97f753fcf
  • libsss_certmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:68f20c1c21ad70b1511fda76ec78501ffaf301d5ab900c577fe19dba44293003
  • libsss_certmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:c752c0ce352b4d82b018fb4b36b60d2ce8d7c4888a1b7511fb9ce044fa099578
  • libsss_certmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:805220807ccfc783477bc29cd395c1ebbd8921141177a9e612a88c70a454027a
  • libsss_certmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:40b80394b9ba04e4f8176b459a9e924ba837b8a76823b3ef469be8f26b0f2d3d
  • libsss_certmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:0459007bef285ded954f41131bafc9a73eb2b1325ed5a076509a13204cfb0fb4
  • libsss_certmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:b48ff7208c3a6f6834c7ec3b77bc73922c671a4e2e1e72b0ba6ff4b1f81a0b98
  • libsss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:ca269a077e0c2c3e346a8baf3835deac20edfe9573fa8340a28bc623509937f4
  • libsss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:053dc4110aa626f7e8941baea35933bb2d9fe29af07ca041ea9cde39730d297d
  • libsss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:b04cd4cc5f9edc0e5a8735fe17f9705cc776427a9581298eb4fd3c8764624b6b
  • libsss_idmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:5b580f68d22d2df9c5ae5e945aa12f3e0941e34a22af5054050db9d87abe9650
  • libsss_idmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:10babb33dff78d6186254ba221138a27a603694c284c8bde8b5f9e784df35008
  • libsss_idmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:767972b6af7824f820579606cf81879d638f2224404803d4fb5ac4fd90df5fbb
  • libsss_nss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:744803ca4d7e5c4431c65773b739ec757ee8d710a8e0e6a2d987842d2274498f
  • libsss_nss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:e0249bd6b4a440052609fc9b53a778c4a7b37be8ba9bdacf477f3c8d6db8f929
  • libsss_nss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:cbb29e3dd137bd750c24d8844f947c962c1b7acfbd7cbc179df0043cb0dfb5df
  • libsss_nss_idmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:5caf9e685c1a582e1c0c0b3f460ab6a0644626424b8035c315e88170ae973809
  • libsss_nss_idmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:c102efb7fc33d71b24178581de803d55efe0b3eeadfc73fd6dc3ca9dfa97f4be
  • libsss_nss_idmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:a53ea4412358dabb678826832a3785f216a67fb19b684352e66994e9f4285a0f
  • libsss_simpleifp-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:b0c975109d78313464a186063c9bbf100d005e3589c881e1f841a0f1e7be4277
  • libsss_simpleifp-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:d7ab07b4f560aaff0a93f0dc2649a05912ce184447c726a7ca6488f97a454282
  • libsss_simpleifp-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:7aa072c5ac70478b1f310b7c69fca8c03bf892ac2cd651fee90825e9785432b6
  • libsss_simpleifp-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:399b5413c141ee316c7716bb20329832ad56aa3ad5d577d55ccbbfabe1d00d26
  • libsss_simpleifp-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:e87b8f5afd50b6e2e193722f458b165a23d5b4afaf69be64d83e57769d85643f
  • libsss_simpleifp-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:46dca9aafdea8cb7f9aefb92fc580d463cbb9bc71c58c124120edaf98f1aa70d
  • libsss_sudo-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:f3afcb22137ae3e54037934a33dbc89785ad995dd9ae3f44212f8cc77bc5d5d0
  • libsss_sudo-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:a88a51b213432da6afb845aa9e9cf5562ef5c8b010e4d3cf625f96fbaaf0856f
  • libsss_sudo-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:509d7eb7acb219047b03925964f941a692e6fa8912aa85b825fe04bd830582d3
  • python-libipa_hbac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:7b1905844c71ac93bfa6abeb66dc2ea78575aadc8aae90eba82da0a5de03d3db
  • python-libipa_hbac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:455c98f374b0362d760fe85d99dc19548286099304479422268c77b57fa55938
  • python-libipa_hbac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:eaac047ec3db43b506eaef099bdefa16c2a50cadaddf6062f6d0d89c28759a09
  • python-libsss_nss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:4d39452c8d500b0b0da267c0244c806f3cf421e2fc34cc5f3b1ace85889ec138
  • python-libsss_nss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:29e0177a59516a3832d4707528e1f0320043c70f7efa3fc1508c66d84ec70775
  • python-libsss_nss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:31ab587920f572bbf1264b630d3a8bf6f8cb58341ed8fd6955eaac381770886e
  • python-sss-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:8dce81fe202ee1d4a0ec82de3ef639d7a79e154ef7719708ceb70a84e40fc12f
  • python-sss-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:4e34d243b5aeb7a7916100ea89f62474564b0ececbf875911e94107817257542
  • python-sss-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:c2612e430a62984f1aee376e1c1bb12e1d29a3980327115e06b434cdaf4bd029
  • python-sss-murmur-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:75e272a79076ee5dab94b04f9b7981776afd360e45670e9889c6ffc868a55521
  • python-sss-murmur-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:f138b660739e9e651b516cd4189eff8fa835f5c2f9d46fec7027fadfc780fb1c
  • python-sss-murmur-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:f935f91709d5af411249913c4f1a2ce5e6eabf8da5ef1180b69d027693b5cbe7
  • python-sssdconfig-1.16.5-10.0.7.el7_9.16.tuxcare.els2.noarch.rpm
    sha:fe88974260e9513e51f0dcb50a09f7898253ecb3fe6f5c01d3a0305318faf489
  • sssd-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:20804775f0a620dd3b43b45bc9cab9ef5f9b8d35f2e6d0bd29a06df114e862e5
  • sssd-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:f35e32baaa5268fbf0bea3a054abf24552bf2e297efa803aa44f26e74391bacd
  • sssd-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:c6b90e23548cf9e1c733c0b8be95c341ebb3296ad4f7478b9ea0cc08fd4e3645
  • sssd-ad-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:5c5fe348e8219ba9af52f330c70427e54d2918088fd991dda7aac5562a4f7ce8
  • sssd-ad-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:81d744cae884a48a5bb02da79dc98c270421b927bd79dac5bcf151f833585706
  • sssd-ad-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:3c62a79dc43296dc813416dae58ca9d50f8009c5e182653444b43fa9c91618ac
  • sssd-client-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:53571fe16d6285efa822b908428a2a00b205bc5511fdd4ea1536d66a1ba8215d
  • sssd-client-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:c45ea491cefbbe33f5cc1f93139131115459de5a59248dd548746b7d0fb46ae1
  • sssd-client-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:2debe8d6596d76dcc926c728d4d5c2bc0f65386c0c45c07647a9b723f93e67ed
  • sssd-common-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:f716b7efc9f19fd0931954a3fa68a4fe16d1ccab3080010e4cbc11b33e4079f0
  • sssd-common-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:c26340e2d22054cfa5f3a79a7b7104480e68249362943a400f9ae1b05062d623
  • sssd-common-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:520bf4a4f7d0dc9bc2af84dc4f7e3ff1d0046589b9d552791f11245ee2f7678c
  • sssd-common-pac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:9ce16002e19c751623f21fd429ee6a74327adfa5a68a22b210191dfc7e1daa63
  • sssd-common-pac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:3f370152613a06a06e06c0836f368fa9de6ada106c931017906de5bdd7455b20
  • sssd-common-pac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:25edce3d11d7e4104562621adb986a43b78a098fdb9568e087cef9e09676b684
  • sssd-dbus-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:b71b70025a531a6ddf4f3717a1beed17d0fc7f4798e9a37d1687af32532b5d28
  • sssd-dbus-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:a66f6f956eabe3d38f106e55eddbfda3ceb2bd9c91172ca03935d5fa3cd59e0e
  • sssd-dbus-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:998f2fac0a477892b1f711d80e2ff0469d25e4b5dc72e59408d897631e1cf2a3
  • sssd-ipa-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:f774aa251b93bf53d6e9b7e6a97cfe6b64dd1762c3fa1afaa8ac9fd1ee8a123f
  • sssd-ipa-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:7422c43da3bcbda979e311ed12b5c2e8e4b622c6807c0adb29d2cddf2e73538f
  • sssd-ipa-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:2a9b499d30d1463ea952bc224a1c09f2e0fb4a5ba207d666d7f41a4287988c6a
  • sssd-kcm-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:2761b020e6234abb78e0d5b5ce36eff3967a51a34472f231d003ddcb886b2164
  • sssd-kcm-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:8d8b880dc6a68fd1a480d09d943b089319f98538df7d928ca96efc1e9b310189
  • sssd-kcm-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:fb1d85187e260e1dec832d8f129ad1cee0d9fc403f92a8408b52d89535042e67
  • sssd-krb5-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:0c03c75d5296aecf9a76460599a6f2b557d3ebb4f9e791cd25bedf64365f4604
  • sssd-krb5-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:feddff5339c2a2ffee5c3e2ccc39775a8f0764c8a71db8686d6899fe8383d8ab
  • sssd-krb5-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:0fd6b0e98846d89e99928e6eee04fd8ab5a3d8aa12cdacfbfa7b6c4f9c8e72f6
  • sssd-krb5-common-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:6a7f55e4df0cd547b2bba32bc424f83c895eea5a71e00f14bfe08f133036799e
  • sssd-krb5-common-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:87dd44d7589a2da467ac27d51acd2d0fd78b4b6abfd9a9a42eb3cb3b6f41406c
  • sssd-krb5-common-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:d3153b1e9c3bf0a5fb407f7b4ecbd62a55339ed80fa3178bf4d8432ee8f99915
  • sssd-ldap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:90e8e78bd644304279f79390518de39be8cf75a53292b00bf08a3f5dbd2a920a
  • sssd-ldap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:790b37c79d4135d02b651ba5edc090d64c4eb0ec16d2e57497f225e78b60e131
  • sssd-ldap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:b1c493989eed53922956fd0793c015d22bf52f2d1e0ec00ee24eda9017234b45
  • sssd-libwbclient-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:642f0a7c1431fc7b368aec48ba8c8464db60b52e733d7e2b337b6d3d81b21e4e
  • sssd-libwbclient-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:cd3e6fabc59403f11d6a820054aad78f5442e1677633ccf192060f47f3f8b342
  • sssd-libwbclient-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:f6473bc5c0ff1dc598f45bb59fcfddae23f24dc1ceada3bd3ce4c6f5c1f3b51a
  • sssd-libwbclient-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:94b33d6143f2634d8fbc523c002d1373ceb2a1a94d4a27dad939d61e237a3b8e
  • sssd-libwbclient-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:afc53e5eca4a6c48962c0c22168d97e97a2dfa3686ef3086c761feb1e162c665
  • sssd-libwbclient-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:e06b19f646d8acb5c67e1c3c352af147b6607c86bc6fadcc98dffbed78a6d720
  • sssd-polkit-rules-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:2f6ddbb57145f9633350ede15c765456e87a89ee511f72e55608601daaa7b0a5
  • sssd-polkit-rules-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:7082a328f6cd0a7a2307c6ee6c4d82991e3eb133248f4f84ba183ce00475eb8a
  • sssd-polkit-rules-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:2361b977b467dc42881f3da97996bf6ee509a3e8fa64635f046ced564996248b
  • sssd-proxy-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:052da84ad78e3df57b6bf2bf928cc906f64c6636763db821459623ce63a600ff
  • sssd-proxy-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:e24ba7c5ea702e965f971b65596cb29b14ebabe008911be5c7e8de303b69d487
  • sssd-proxy-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:3665237089d050562bda1947bb97ac8e99c221b1c691bf4eb852bb740dd7a90c
  • sssd-tools-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:9d4531cc2d9592b3ce5e1feb5bc0708d2dadb9761e9f25de46e8addac9aa46d1
  • sssd-tools-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:3adeba71b3ed6069bf70c7a1acceba773eb2cda82f9b97f49d271eb627de724d
  • sssd-tools-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:85a73b105fd3f38fef87513dccb68e86090a1fa2540c6435c392adf68e7748f1
  • sssd-winbind-idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.aarch64.rpm
    sha:11e4ab77c3985c5a49be520bcdb6904012732f981abb1ac60a11795d6b6ddf43
  • sssd-winbind-idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:539aa0e74ed8c5bd0893c87f0246dbdd10bb56a8477a348829cdcadc4a0100c1
  • sssd-winbind-idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:5f9726ce18b14f280448e333bce4561727741786a490b27feadbe267ab4da30e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.