Linux · Security advisory · November 25, 2025

ELSA-2025-20954: Security update for 31 packages

ELSA-2025-20954, released November 25, 2025, fixes 1 CVE across 31 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0082
57th percentile

Fixed package versions

ProductReleaseFixed in
libipa_hbacol 90:2.9.7-4.0.1.el9_7.1
libsss_autofsol 90:2.9.7-4.0.1.el9_7.1
libsss_certmapol 90:2.9.7-4.0.1.el9_7.1
libsss_idmapol 90:2.9.7-4.0.1.el9_7.1
libsss_nss_idmapol 90:2.9.7-4.0.1.el9_7.1
libsss_nss_idmap-develol 90:2.9.7-4.0.1.el9_7.1
libsss_simpleifpol 90:2.9.7-4.0.1.el9_7.1
libsss_sudool 90:2.9.7-4.0.1.el9_7.1
python3-libipa_hbacol 90:2.9.7-4.0.1.el9_7.1
python3-libsss_nss_idmapol 90:2.9.7-4.0.1.el9_7.1
python3-sssol 90:2.9.7-4.0.1.el9_7.1
python3-sss-murmurol 90:2.9.7-4.0.1.el9_7.1
python3-sssdconfigol 90:2.9.7-4.0.1.el9_7.1
sssdol 90:2.9.7-4.0.1.el9_7.1
sssd-adol 90:2.9.7-4.0.1.el9_7.1
sssd-clientol 90:2.9.7-4.0.1.el9_7.1
sssd-commonol 90:2.9.7-4.0.1.el9_7.1
sssd-common-pacol 90:2.9.7-4.0.1.el9_7.1
sssd-dbusol 90:2.9.7-4.0.1.el9_7.1
sssd-idpol 90:2.9.7-4.0.1.el9_7.1
sssd-ipaol 90:2.9.7-4.0.1.el9_7.1
sssd-kcmol 90:2.9.7-4.0.1.el9_7.1
sssd-krb5ol 90:2.9.7-4.0.1.el9_7.1
sssd-krb5-commonol 90:2.9.7-4.0.1.el9_7.1
sssd-ldapol 90:2.9.7-4.0.1.el9_7.1
sssd-nfs-idmapol 90:2.9.7-4.0.1.el9_7.1
sssd-passkeyol 90:2.9.7-4.0.1.el9_7.1
sssd-polkit-rulesol 90:2.9.7-4.0.1.el9_7.1
sssd-proxyol 90:2.9.7-4.0.1.el9_7.1
sssd-toolsol 90:2.9.7-4.0.1.el9_7.1
sssd-winbind-idmapol 90:2.9.7-4.0.1.el9_7.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-11561 sssd: This update for sssd fixes the following issues: - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux sys... 8.8 0.0082 None reported
Showing 1 to 1 of 1 1