Security update for sssd SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:4181-1 Final 1 1 2025-11-24T07:55:46Z current 2025-11-24T07:55:46Z 2025-11-24T07:55:46Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for sssd This update for sssd fixes the following issues: - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827) Other fixes: - Install file in krb5.conf.d to include sssd krb5 config snippets (bsc#1244325) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2025-4181,SUSE-SLE-Micro-5.3-2025-4181,SUSE-SLE-Micro-5.4-2025-4181,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-4181,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-4181,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-4181,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-4181,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-LTS-2025-4181,SUSE-SLE-Product-SUSE-Manager-Server-4.3-LTS-2025-4181 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20254181-1/ Link for SUSE-SU-2025:4181-1 https://lists.suse.com/pipermail/sle-security-updates/2025-November/023321.html E-Mail link for SUSE-SU-2025:4181-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1244325 SUSE Bug 1244325 https://bugzilla.suse.com/1251827 SUSE Bug 1251827 https://www.suse.com/security/cve/CVE-2025-11561/ SUSE CVE CVE-2025-11561 page SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Manager Proxy LTS 4.3 SUSE Manager Server LTS 4.3 libipa_hbac-devel-2.5.2-150400.4.40.1 libipa_hbac0-2.5.2-150400.4.40.1 libnfsidmap-sss-2.5.2-150400.4.40.1 libsss_certmap-devel-2.5.2-150400.4.40.1 libsss_certmap0-2.5.2-150400.4.40.1 libsss_idmap-devel-2.5.2-150400.4.40.1 libsss_idmap0-2.5.2-150400.4.40.1 libsss_nss_idmap-devel-2.5.2-150400.4.40.1 libsss_nss_idmap0-2.5.2-150400.4.40.1 libsss_simpleifp-devel-2.5.2-150400.4.40.1 libsss_simpleifp0-2.5.2-150400.4.40.1 python3-ipa_hbac-2.5.2-150400.4.40.1 python3-sss-murmur-2.5.2-150400.4.40.1 python3-sss_nss_idmap-2.5.2-150400.4.40.1 python3-sssd-config-2.5.2-150400.4.40.1 sssd-2.5.2-150400.4.40.1 sssd-ad-2.5.2-150400.4.40.1 sssd-common-2.5.2-150400.4.40.1 sssd-common-32bit-2.5.2-150400.4.40.1 sssd-common-64bit-2.5.2-150400.4.40.1 sssd-dbus-2.5.2-150400.4.40.1 sssd-ipa-2.5.2-150400.4.40.1 sssd-kcm-2.5.2-150400.4.40.1 sssd-krb5-2.5.2-150400.4.40.1 sssd-krb5-common-2.5.2-150400.4.40.1 sssd-ldap-2.5.2-150400.4.40.1 sssd-proxy-2.5.2-150400.4.40.1 sssd-tools-2.5.2-150400.4.40.1 sssd-winbind-idmap-2.5.2-150400.4.40.1 libipa_hbac-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libipa_hbac0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libsss_certmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libsss_certmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libsss_idmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libsss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libsss_nss_idmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libsss_nss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libsss_simpleifp-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libsss_simpleifp0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS python3-sssd-config-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-ad-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-common-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-common-32bit-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-dbus-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-ipa-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-kcm-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-krb5-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-krb5-common-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-ldap-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-proxy-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-tools-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS sssd-winbind-idmap-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libipa_hbac-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libipa_hbac0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libsss_certmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libsss_certmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libsss_idmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libsss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libsss_nss_idmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libsss_nss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libsss_simpleifp-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libsss_simpleifp0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS python3-sssd-config-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-ad-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-common-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-common-32bit-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-dbus-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-ipa-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-kcm-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-krb5-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-krb5-common-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-ldap-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-proxy-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-tools-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS sssd-winbind-idmap-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libsss_certmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.3 libsss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.3 libsss_nss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.3 sssd-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.3 sssd-common-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.3 sssd-krb5-common-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.3 sssd-ldap-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.3 libsss_certmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.4 libsss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.4 libsss_nss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.4 sssd-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.4 sssd-common-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.4 sssd-krb5-common-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.4 sssd-ldap-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Micro 5.4 libipa_hbac-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libipa_hbac0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libsss_certmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libsss_certmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libsss_idmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libsss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libsss_nss_idmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libsss_nss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libsss_simpleifp-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libsss_simpleifp0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS python3-sssd-config-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-ad-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-common-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-common-32bit-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-dbus-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-ipa-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-kcm-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-krb5-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-krb5-common-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-ldap-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-proxy-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-tools-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS sssd-winbind-idmap-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libipa_hbac-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libipa_hbac0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libsss_certmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libsss_certmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libsss_idmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libsss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libsss_nss_idmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libsss_nss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libsss_simpleifp-devel-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libsss_simpleifp0-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 python3-sssd-config-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-ad-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-common-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-common-32bit-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-dbus-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-ipa-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-kcm-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-krb5-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-krb5-common-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-ldap-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-proxy-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-tools-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 sssd-winbind-idmap-2.5.2-150400.4.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libipa_hbac-devel-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 libipa_hbac0-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 libsss_certmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 libsss_certmap0-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 libsss_idmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 libsss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 libsss_nss_idmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 libsss_nss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 libsss_simpleifp-devel-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 libsss_simpleifp0-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 python3-sssd-config-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-ad-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-common-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-common-32bit-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-dbus-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-ipa-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-kcm-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-krb5-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-krb5-common-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-ldap-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-proxy-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-tools-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 sssd-winbind-idmap-2.5.2-150400.4.40.1 as a component of SUSE Manager Proxy LTS 4.3 libipa_hbac-devel-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 libipa_hbac0-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 libsss_certmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 libsss_certmap0-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 libsss_idmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 libsss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 libsss_nss_idmap-devel-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 libsss_nss_idmap0-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 libsss_simpleifp-devel-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 libsss_simpleifp0-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 python3-sssd-config-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-ad-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-common-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-common-32bit-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-dbus-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-ipa-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-kcm-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-krb5-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-krb5-common-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-ldap-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-proxy-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-tools-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 sssd-winbind-idmap-2.5.2-150400.4.40.1 as a component of SUSE Manager Server LTS 4.3 A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts. CVE-2025-11561 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libipa_hbac-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libipa_hbac0-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsss_certmap-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsss_certmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsss_idmap-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsss_idmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsss_nss_idmap-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsss_nss_idmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsss_simpleifp-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsss_simpleifp0-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-sssd-config-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-ad-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-common-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-common-32bit-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-dbus-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-ipa-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-kcm-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-krb5-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-krb5-common-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-ldap-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-proxy-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-tools-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:sssd-winbind-idmap-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libipa_hbac-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libipa_hbac0-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsss_certmap-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsss_certmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsss_idmap-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsss_idmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsss_nss_idmap-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsss_nss_idmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsss_simpleifp-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsss_simpleifp0-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-sssd-config-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-ad-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-common-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-common-32bit-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-dbus-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-ipa-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-kcm-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-krb5-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-krb5-common-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-ldap-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-proxy-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-tools-2.5.2-150400.4.40.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:sssd-winbind-idmap-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.3:libsss_certmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.3:libsss_idmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.3:libsss_nss_idmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.3:sssd-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.3:sssd-common-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.3:sssd-krb5-common-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.3:sssd-ldap-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.4:libsss_certmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.4:libsss_idmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.4:libsss_nss_idmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.4:sssd-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.4:sssd-common-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.4:sssd-krb5-common-2.5.2-150400.4.40.1 SUSE Linux Enterprise Micro 5.4:sssd-ldap-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libipa_hbac-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libipa_hbac0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libsss_certmap-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libsss_certmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libsss_idmap-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libsss_idmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libsss_nss_idmap-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libsss_nss_idmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libsss_simpleifp-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libsss_simpleifp0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:python3-sssd-config-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-ad-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-common-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-common-32bit-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-dbus-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-ipa-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-kcm-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-krb5-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-krb5-common-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-ldap-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-proxy-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-tools-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server 15 SP4-LTSS:sssd-winbind-idmap-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libipa_hbac-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libipa_hbac0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsss_certmap-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsss_certmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsss_idmap-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsss_idmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsss_nss_idmap-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsss_nss_idmap0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsss_simpleifp-devel-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsss_simpleifp0-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-sssd-config-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-ad-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-common-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-common-32bit-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-dbus-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-ipa-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-kcm-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-krb5-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-krb5-common-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-ldap-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-proxy-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-tools-2.5.2-150400.4.40.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:sssd-winbind-idmap-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:libipa_hbac-devel-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:libipa_hbac0-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:libsss_certmap-devel-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:libsss_certmap0-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:libsss_idmap-devel-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:libsss_idmap0-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:libsss_nss_idmap-devel-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:libsss_nss_idmap0-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:libsss_simpleifp-devel-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:libsss_simpleifp0-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:python3-sssd-config-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-ad-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-common-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-common-32bit-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-dbus-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-ipa-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-kcm-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-krb5-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-krb5-common-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-ldap-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-proxy-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-tools-2.5.2-150400.4.40.1 SUSE Manager Proxy LTS 4.3:sssd-winbind-idmap-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:libipa_hbac-devel-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:libipa_hbac0-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:libsss_certmap-devel-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:libsss_certmap0-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:libsss_idmap-devel-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:libsss_idmap0-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:libsss_nss_idmap-devel-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:libsss_nss_idmap0-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:libsss_simpleifp-devel-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:libsss_simpleifp0-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:python3-sssd-config-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-ad-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-common-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-common-32bit-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-dbus-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-ipa-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-kcm-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-krb5-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-krb5-common-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-ldap-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-proxy-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-tools-2.5.2-150400.4.40.1 SUSE Manager Server LTS 4.3:sssd-winbind-idmap-2.5.2-150400.4.40.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254181-1/ https://www.suse.com/security/cve/CVE-2025-11561.html CVE-2025-11561 https://bugzilla.suse.com/1251827 SUSE Bug 1251827