[CLSA-2026:1793020447] sssd: Fix of CVE-2026-104048
Type:
security
Severity:
Important
Release date:
2026-10-26 13:14:17 UTC
Description:
- CVE-2026-104048: compare HBAC users with domain awareness so a trusted-domain user whose shortname matches an IPA-local user cannot satisfy an allow rule
CVEs fixed:
Updated packages:
  • libipa_hbac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:ef40232728d31ce48b93b91d8f2a59ed2c3169d039ab7731bc111a10069b5560
  • libipa_hbac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:8222c8a3042a7429d324017af7063c19cee601a674203593cd890c6070c45287
  • libipa_hbac-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:1b27b587aa15e3e4c15d5fa868bd84e0ea8403ac20cb1260c6de4bf324014f65
  • libipa_hbac-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:b355b159353809b3d5e8dedd0c9f0ad7c0da477532caa8aabcb97cb961f903de
  • libsss_autofs-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:dc1fd9ca25dcfa283445352d94c7cdbe7ae7df4ee21a2a2fbf23450968303c1a
  • libsss_autofs-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:16670a267261379cfad00cef947e79e057bb53c88915bfc021abe80c8ff75ed7
  • libsss_certmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:2682a5aea8e58fac7d295a1545e5fd556d0edd6d5251d1d91d382c6634f7db48
  • libsss_certmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:2ea768421e5f8fe8115268c001d6288a9f6cf7479e7f58dd8a3027c1631b54cc
  • libsss_certmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:861d537740454447abb896a9dd614b6cb3f00ae18593ee96295d274c005a8887
  • libsss_certmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:8fa613a6ab8d6d5a3d5f975275442afeec192ecdcf309a50e570e8065a092c55
  • libsss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:ed27ed48d662fc5c75e687cfc912fb4d6d50f58dd2351ca2cc307bf4c9eef7a8
  • libsss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:46728b902b03cdd998ab051984c3245696112dac24ea46366b1d7b990bd034ab
  • libsss_idmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:d80283145ade13cf2cfafedc9d0c29256417a9e3610d241ef5b1bbec3269465f
  • libsss_idmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:815bcaa0bc3a44cb8499dde777060dec552a37ae547d0c2cdcedc98867d42709
  • libsss_nss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:d880825ee324baeeca6229ffdcae8756b10dd1cf3bb795e604434c9a74609c22
  • libsss_nss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:b37791d45daf936636d7e6795346739869a5b066fdcb8bf03d874ec94a7c1997
  • libsss_nss_idmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:1de1c4fee1d62799d16853d4037d7468bd8a2a0447d3417291a60390bf09806e
  • libsss_nss_idmap-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:eab627213c9c1bc8405caf25a8b991183fa0b89f938723267387c38d853e4e77
  • libsss_simpleifp-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:5ce1ade04aabf546c807f59e3b301eba90c267ff55b5fd75d7a9ebfcd032387f
  • libsss_simpleifp-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:73362495e49a380605e91a0164cf32b504e25f4c813f26c355c7ab8af7222549
  • libsss_simpleifp-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:399087d4d1d9c56744478ddf44b64023049169b6e20a565c735da1ce509ee4ed
  • libsss_simpleifp-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:9d4b29c47f7380273c9389469a22f2fa7c96575cb091856a69f54dbfa9c96e7b
  • libsss_sudo-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:7e8c7ae3673880a73cd86e2f071ed57277b10f2d0f4afaf9adeb583896eaea48
  • libsss_sudo-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:13565f610762eb1689312a99e98ef7a7087e8140c40e8331f00142af9e43ae86
  • python-libipa_hbac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:3377ecef6e6143df455697de10adf2bbbe84e854bc13846b57fd47f3587fdd72
  • python-libipa_hbac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:187af6275493afaf5979e5f6e051849e9a3717fbf6f7a60fdb50744f256d1d24
  • python-libsss_nss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:ea44cc74df3eae166330327609373ba31017913657088e4e20532f5bcd9bec26
  • python-libsss_nss_idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:71f66e691e2cf14a6288c4ab29d6e2c238c8ee9b1b90140fb6ac58cb399b6213
  • python-sss-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:412d44f835ad3ed33751c1b8e496101707bbb03592d0a09fe034898aab9c65cb
  • python-sss-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:3e18551634015c8f49e169b2aa10edcd0d3e432fe81466a06cae2b355fbccca4
  • python-sss-murmur-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:e6d087c02ac684691d4b5dbf8c1a1dbb07155c8d8bfab0cac5d4c9f89355b204
  • python-sss-murmur-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:3c3f4906506d6a94eab58889521120b61ae2d5b67657b7172b980e2592d88c80
  • python-sssdconfig-1.16.5-10.0.7.el7_9.16.tuxcare.els2.noarch.rpm
    sha:3ed8e14c898ac356942b5ea251e6632670d182eda6beac0229aed034d4c86b8d
  • sssd-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:438903d772daca177b171210a91d8e27b873518dc97b014945c209d567378ca9
  • sssd-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:bac6273b71b0ec7f00a30e3cca1a69934894c7bb8f120b70eee8d6a09014b8dc
  • sssd-ad-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:fbbd744bbbd3eac22a1c70e0b1a2bb471ad21b001aee59f719efa718aac50c6b
  • sssd-ad-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:09dcd28367093207b30fb3bdd9cedfed650588042f8a07175960609f7b61af87
  • sssd-client-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:9af629b76c0f5de7d376424f621725e2391eb5061bd56bfb128672d2db0ab085
  • sssd-client-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:603d10c0168df3c8982a425160bfd32cfe5918477d8f6c2406e1841251e584e1
  • sssd-common-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:ae7b774b5df7790ee8b703a214dfb23d292cd0760fe87af66d27a6cb969ab289
  • sssd-common-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:ae24ff8c145369a599a8b10ad8accc9a047c0ea86dec7caa11ee2de27e0bead4
  • sssd-common-pac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:edb45c1569063f79ac43ea3e33bca52f31bf003fc8d8084a930c8a1ce4c6bf0c
  • sssd-common-pac-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:c957f1d055ff473fd72bb0f0fe0a10f0e7cff8c91bfb57615a1a46e171375b62
  • sssd-dbus-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:a353331d081fa44c9004a164622cfcce8d412b26330dca56236b43c183ed040f
  • sssd-dbus-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:9ee00abcfaccbe57bf87f85cee8597c51ad0123a00a80839ee15f25f5a13b171
  • sssd-ipa-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:7f36bd5177a1228736948bb2b56a963c2a0a9bdd8ed6a037f40265ce9f95cdfe
  • sssd-ipa-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:9f7672b70d1d9d1bddc6e71b92bd494856d2bbb347745fe4af6da5cd5bfd1737
  • sssd-kcm-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:9919bcb3f68811bf6e2e6a7cf1c8e949abaf4608b52d19f2031fa2410bf3f40b
  • sssd-kcm-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:6d41615ac4ec1c394124d52cf06336ab100f784123bce7037b592f340294fef5
  • sssd-krb5-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:1d632e2ec7387be67b8450c4efa33df9ea41662a32267f0fb09ac70b7a7785b2
  • sssd-krb5-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:3cbc724f804ff2c6e9540d8a4f611972c0180d99de73265513c505a1fdc7ed5f
  • sssd-krb5-common-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:2d72de687e4336d3658cef96080a1b92f54e3b32e449dd33d8095354852b864c
  • sssd-krb5-common-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:5f50efe2b6fae1f7805cd913817404c08421301fdc41a829db01ba75e96d10a4
  • sssd-ldap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:c0c3c72b462dbb148e34722c03c82d1b92f55a11db6c7517815938a4fa09a9f9
  • sssd-ldap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:183826b12aebb37ac1d284dd9f07f3f040181582a994d691034504fccd7dcbe0
  • sssd-libwbclient-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:0969af80c6d9e8b49927282a84a5486f640663620b7678c3ed8256611522f29e
  • sssd-libwbclient-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:e97f24f4024dc64d09706e1e0728f292da43937f3c569ced397e0ef43e92a2cb
  • sssd-libwbclient-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:e445739e1591602b0735249dcc11924d89bf035306a0ab79df3261429c2d3ab5
  • sssd-libwbclient-devel-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:60e22b5a289aa19cb60983c990643f95d5f5f77bdc0592ac6c9ec5dc277402b9
  • sssd-polkit-rules-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:3b454c135ec727b9c71846930baf85e779184125951890f4833fe46df3b252b4
  • sssd-polkit-rules-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:16bc31b1c78a3417573e681b5735787615029933735f2c808e12b471a67ee495
  • sssd-proxy-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:34572a07a0d21ca38a01124f8863242dc622e98774ade7c83906a79d30636c26
  • sssd-proxy-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:f8834cb8606a19326517658f137dca0bb9e675365164a98f9385e19b11b4bc13
  • sssd-tools-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:6d3ed2e4f280383711fb185e05de85b0c810a01fd24b52924a978f1ddfe0cf58
  • sssd-tools-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:e66699a413440b2531ac99d808ed3ee2aa6c9825f7399ee4adcd9160a540b85f
  • sssd-winbind-idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.i686.rpm
    sha:cba5b246417607a698ea69cac855eb26b9af49d52e27c9fbff2bad29a03f5edd
  • sssd-winbind-idmap-1.16.5-10.0.7.el7_9.16.tuxcare.els2.x86_64.rpm
    sha:75f45636fffbe0d63e6ae9d6a23b91a381e28cc27585da881ad7d8608ee097e8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.