RHSA-2026:97077 — Red Hat Security Advisory: sssd security, bug fix, and enhancement update

Fixed packages 57

Release	Package	Fixed in
Red Hat · RHEL 10 enterprise_linux:10.3	libipa_hbac	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	libipa_hbac-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	libsss_autofs	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	libsss_autofs-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	libsss_certmap	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	libsss_certmap-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	libsss_idmap	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	libsss_idmap-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	libsss_nss_idmap	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	libsss_nss_idmap-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	libsss_nss_idmap-devel	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	libsss_sudo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	libsss_sudo-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	python3-libipa_hbac	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	python3-libipa_hbac-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	python3-libsss_nss_idmap	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	python3-libsss_nss_idmap-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	python3-sss	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	python3-sss-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	python3-sss-murmur	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	python3-sss-murmur-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	python3-sssdconfig	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-ad	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-ad-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-client	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-client-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-common	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-common-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-common-pac	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-common-pac-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-dbus	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-dbus-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-debugsource	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-idp	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-idp-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-ipa	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-ipa-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-kcm	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-kcm-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-krb5	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-krb5-common	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-krb5-common-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-krb5-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-ldap	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-ldap-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-nfs-idmap	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-nfs-idmap-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-passkey	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-passkey-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-proxy	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-proxy-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-tools	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-tools-debuginfo	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-winbind-idmap	0:2.13.1-2.el10
Red Hat · RHEL 10 enterprise_linux:10.3	sssd-winbind-idmap-debuginfo	0:2.13.1-2.el10

Vulnerabilities 2

Medium 6.4

CVE-2026-12610

Sssd: use-after-free crash in sssd' 'sssd_pam' process

A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Jun 30, 2026
Medium 5.5

CVE-2026-6245

Sssd: out-of-bounds read in the sssd

A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string witho…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Apr 15, 2026

References

article
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.3_release_notes/index
article
https://access.redhat.com/security/updates/classification/#moderate
report
https://bugzilla.redhat.com/show_bug.cgi?id=2457954
report
https://bugzilla.redhat.com/show_bug.cgi?id=2490288
article
https://issues.redhat.com/browse/RHEL-109754
article
https://issues.redhat.com/browse/RHEL-111571
article
https://issues.redhat.com/browse/RHEL-123943
article
https://issues.redhat.com/browse/RHEL-142964
article
https://issues.redhat.com/browse/RHEL-151491
article
https://issues.redhat.com/browse/RHEL-154156
article
https://issues.redhat.com/browse/RHEL-172303
article
https://issues.redhat.com/browse/RHEL-173660
article
https://issues.redhat.com/browse/RHEL-173663
article
https://issues.redhat.com/browse/RHEL-183331
article
https://issues.redhat.com/browse/RHEL-185008
article
https://issues.redhat.com/browse/RHEL-5049
article
https://issues.redhat.com/browse/RHEL-5054
article
https://issues.redhat.com/browse/RHEL-83540
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_97077.json
report
https://access.redhat.com/security/cve/CVE-2026-6245
advisory
https://www.cve.org/CVERecord?id=CVE-2026-6245
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6245
report
https://access.redhat.com/security/cve/CVE-2026-12610
advisory
https://www.cve.org/CVERecord?id=CVE-2026-12610
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-12610
article
https://github.com/SSSD/sssd/issues/8796

Red Hat Security Advisory: sssd security, bug fix, and enhancement update

Fixed packages 57

Vulnerabilities 2

Sssd: use-after-free crash in sssd' 'sssd_pam' process

Sssd: out-of-bounds read in the sssd

References