| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: sssd-common | Distribution: CentOS |
| Version: 2.13.1 | Vendor: CentOS |
| Release: 2.el10 | Build date: Wed Jul 8 11:40:19 2026 |
| Group: Unspecified | Build host: ppc64le-07.stream.rdu2.redhat.com |
| Size: 7430953 | Source RPM: sssd-2.13.1-2.el10.src.rpm |
| Packager: builder@centos.org | |
| Url: https://github.com/SSSD/sssd/ | |
| Summary: Common files for the SSSD | |
Common files for the SSSD. The common package includes all the files needed to run a particular back end, however, the back ends are packaged in separate subpackages such as sssd-ldap.
GPL-3.0-or-later
* Thu Jul 02 2026 Madhuri Upadhye <mupadhye@redhat.com> - 2.13.1-2
- Resolves: RHEL-190529 CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssd_pam' process
- Resolves: RHEL-185008 Regression in IPA + Idp authentication with keycloak
- Resolves: RHEL-111571 'sssctl config-check' does not work correctly for "Accessing AD with a MSA"
- Resolves: RHEL-192054 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192069 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root
* Wed Jun 10 2026 Sumit Bose <sbose@redhat.com> - 2.13.1-1
- Resolves: RHEL-183331 Rebase SSSD for RHEL 10.3
- Resolves: RHEL-178180 'sssctl analyze --help' shows incorrect command in usage field
- Resolves: RHEL-173663 [Regression] Cannot log in to FreeIPA account with password immediately after boot
- Resolves: RHEL-173660 SSSD 2.13 doesn't work in offline mode, generates plenty of Permission denied errors
- Resolves: RHEL-172303 SSSD: LDAP backend ('sssd_be') initialization fails if DNS in unresponsive
- Resolves: RHEL-151491 SSSD kerberos plugins export symbols which clash
- Resolves: RHEL-133013 /etc/hosts containing an entry with a name and alias but no IPv4 address results in sssd_be crash
- Resolves: RHEL-5054 Smart card reader with pinpad fails C_Login. (CKF_PROTECTED_AUTHENTICATION_PATH not handled correctly)
* Tue Apr 28 2026 Sumit Bose <sbose@redhat.com> - 2.13.0-1
- Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
- Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
- Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
- Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
- Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
- Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
- Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
- Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them
* Tue Apr 14 2026 Tomas Halman <thalman@redhat.com> - 2.12.0-3
- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified
* Thu Apr 02 2026 Tomas Halman <thalman@redhat.com> - 2.12.0-2
- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group
* Thu Jan 15 2026 Sumit Bose <sbose@redhat.com> - 2.12.0-1
- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)
* Mon Sep 22 2025 Pavel Filipenský <pfilipen@redhat.com> - 2.11.1-3
- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release
* Thu Aug 14 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.
* Thu Jul 31 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
* Fri Jun 13 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-3
- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release
* Fri Jun 06 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-2
- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
* Thu Jun 05 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names
* Fri May 02 2025 Andrea Bolognani <abologna@redhat.com> - 2.10.2-4
- Resolves: RHEL-89474 - Fails to build on riscv64
* Mon Apr 07 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.10.2-3.2
- Resolves: RHEL-79158 - Disk cache failure with large db sizes
* Wed Apr 02 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.10.2-3.1
- Resolves: RHEL-79158 - Disk cache failure with large db sizes
* Wed Feb 12 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.10.2-3
- Resolves: RHEL-78061 - 'sssd_kcm' leaks memory
* Mon Feb 10 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.10.2-2
- Resolves: RHEL-78061 - 'sssd_kcm' leaks memory
* Wed Jan 29 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.10.2-1
- Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
* Wed Dec 18 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-3
- Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
* Wed Dec 18 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-2
- Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
* Tue Dec 10 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
- Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
- Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
- Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
- Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
- Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
- Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
- Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
- Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups
* Mon Oct 21 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-3
- Related: RHEL-59777 - Rebase Samba to the latest 4.21.x release
* Tue Oct 15 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-2
- Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
* Tue Oct 15 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-1
- Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
- Resolves: RHEL-56701 - sss_ssh_knownhosts is breaking ansible-pull
- Resolves: RHEL-55993 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not
* Thu Aug 22 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-3
- Resolves: RHEL-50243 - Please install sssd-polkit-rules by default
* Fri Aug 02 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-2
- Resolves: RHEL-51891 - [RHEL-10]logrotate.service fails to start because /var/log/sssd has insecure permission
- Resolves: RHEL-52400 - SYSDB: remove index on dataExpireTimestamp [rhel-10]
- Resolves: RHEL-50243 - Please install sssd-polkit-rules by default
/etc/logrotate.d /etc/logrotate.d/sssd /etc/pam.d/sssd-shadowutils /etc/rwtab.d /etc/rwtab.d/sssd /etc/sssd /etc/sssd/conf.d /etc/sssd/pki /etc/sssd/sssd.conf /run/sssd /usr/bin/sss_ssh_authorizedkeys /usr/bin/sss_ssh_knownhosts /usr/bin/sss_ssh_knownhostsproxy /usr/lib/.build-id /usr/lib/.build-id/0e /usr/lib/.build-id/0e/9d19eecc029cfc2e1d806b6d75f7bb35e39bd8 /usr/lib/.build-id/11 /usr/lib/.build-id/11/b96f846a1b7afd5833a36d677efaeb063fe670 /usr/lib/.build-id/13 /usr/lib/.build-id/13/ce11094af09c216da00b22dcedb2e8495d266f /usr/lib/.build-id/17 /usr/lib/.build-id/17/1caf22b0fefcc1efda89762030ab873dbfc21b /usr/lib/.build-id/1a /usr/lib/.build-id/1a/2fa0a6a46b46c432b76cf3eb9e93ac17e53ea0 /usr/lib/.build-id/22 /usr/lib/.build-id/22/447faa5b8227d210ff9a58871b3dd8d2a34c13 /usr/lib/.build-id/26 /usr/lib/.build-id/26/ac9f71ea77daa138d4faf0c739df0ae4619cfd /usr/lib/.build-id/38 /usr/lib/.build-id/38/fe1576d1e2a48e4c6b79485c8cc7ffd098fee6 /usr/lib/.build-id/3b /usr/lib/.build-id/3b/7a7e20bba12ab630abfc5fef783e93f29df1ab /usr/lib/.build-id/55 /usr/lib/.build-id/55/ca5a75999de7f187a8d0f1e64ba645f6753fa4 /usr/lib/.build-id/59 /usr/lib/.build-id/59/096646b0f5c9e791bcd27293e8078db4a891e2 /usr/lib/.build-id/5a /usr/lib/.build-id/5a/86c31ec05b4cb0f532252c3ac17597c79bc107 /usr/lib/.build-id/62 /usr/lib/.build-id/62/4fe3f76d503ddfc005af8aed47a69076d37938 /usr/lib/.build-id/83 /usr/lib/.build-id/83/4a9702c960bf548d760f031dace0b81a355887 /usr/lib/.build-id/89 /usr/lib/.build-id/89/e6f659b52f31a28e40caf7120b11a5f9662d0a /usr/lib/.build-id/8e /usr/lib/.build-id/8e/c5e4993083202d9f02b86b99351c0c5b5266fe /usr/lib/.build-id/90 /usr/lib/.build-id/90/34c91a0c9a645ccdff513a438bb4f76a5222fd /usr/lib/.build-id/a1 /usr/lib/.build-id/a1/c48352bda530f0d17ddf570a7af6ccc4b13186 /usr/lib/.build-id/b2 /usr/lib/.build-id/b2/3951a58cebc520271eab8eb5ebe13ac197bb1e /usr/lib/.build-id/c0 /usr/lib/.build-id/c0/5d30abc1371289b3a67e5e56e396c572fcfa47 /usr/lib/.build-id/c6 /usr/lib/.build-id/c6/5e51836debb5a33b3c37cda66a16fd746baaf6 /usr/lib/.build-id/d6 /usr/lib/.build-id/d6/6a234950cd1a17750396395eea2e08b566b932 /usr/lib/.build-id/da /usr/lib/.build-id/da/b10f01402961b00579016f33b16632fb062654 /usr/lib/.build-id/e0 /usr/lib/.build-id/e0/6332776faa05c72435ac0926083538e44c1a6c /usr/lib/.build-id/e4 /usr/lib/.build-id/e4/452660dbebbc85ffe04aeaacf68107244540be /usr/lib/.build-id/ed /usr/lib/.build-id/ed/a4746743d227f59be02212e740c90721a8e17c /usr/lib/.build-id/f2 /usr/lib/.build-id/f2/0ff48c4d3344d9b451194824e476c24fb7dee6 /usr/lib/.build-id/f5 /usr/lib/.build-id/f5/c4d63bbce56fa7f89ea3429a0486726344369c /usr/lib/.build-id/f7 /usr/lib/.build-id/f7/b552bb1a47410b8e5e72f81cc07613b4a8ca80 /usr/lib/systemd/system/sssd-autofs.service /usr/lib/systemd/system/sssd-autofs.socket /usr/lib/systemd/system/sssd-nss.service /usr/lib/systemd/system/sssd-nss.socket /usr/lib/systemd/system/sssd-pac.service /usr/lib/systemd/system/sssd-pac.socket /usr/lib/systemd/system/sssd-pam.service /usr/lib/systemd/system/sssd-pam.socket /usr/lib/systemd/system/sssd-ssh.service /usr/lib/systemd/system/sssd-ssh.socket /usr/lib/systemd/system/sssd-sudo.service /usr/lib/systemd/system/sssd-sudo.socket /usr/lib/systemd/system/sssd.service /usr/lib/sysusers.d/sssd.conf /usr/lib/tmpfiles.d/sssd.conf /usr/lib64/samba/ldb/memberof.so /usr/lib64/sssd /usr/lib64/sssd/conf /usr/lib64/sssd/conf/sssd.conf /usr/lib64/sssd/libifp_iface.so /usr/lib64/sssd/libifp_iface_sync.so /usr/lib64/sssd/libsss_cert.so /usr/lib64/sssd/libsss_child.so /usr/lib64/sssd/libsss_crypt.so /usr/lib64/sssd/libsss_debug.so /usr/lib64/sssd/libsss_iface.so /usr/lib64/sssd/libsss_iface_sync.so /usr/lib64/sssd/libsss_krb5_common.so /usr/lib64/sssd/libsss_ldap_common.so /usr/lib64/sssd/libsss_sbus.so /usr/lib64/sssd/libsss_sbus_sync.so /usr/lib64/sssd/libsss_simple.so /usr/lib64/sssd/libsss_util.so /usr/libexec/sssd /usr/libexec/sssd/p11_child /usr/libexec/sssd/sss_signal /usr/libexec/sssd/sssd_autofs /usr/libexec/sssd/sssd_be /usr/libexec/sssd/sssd_check_socket_activated_responders /usr/libexec/sssd/sssd_nss /usr/libexec/sssd/sssd_pam /usr/libexec/sssd/sssd_ssh /usr/libexec/sssd/sssd_sudo /usr/sbin/sss_cache /usr/sbin/sssd /usr/share/doc/sssd-common /usr/share/doc/sssd-common/sssd-example.conf /usr/share/licenses/sssd-common /usr/share/licenses/sssd-common/COPYING /usr/share/locale/bg/LC_MESSAGES/sssd.mo /usr/share/locale/br/LC_MESSAGES/sssd.mo /usr/share/locale/ca/LC_MESSAGES/sssd.mo /usr/share/locale/cs/LC_MESSAGES/sssd.mo /usr/share/locale/de/LC_MESSAGES/sssd.mo /usr/share/locale/es/LC_MESSAGES/sssd.mo /usr/share/locale/eu/LC_MESSAGES/sssd.mo /usr/share/locale/fi/LC_MESSAGES/sssd.mo /usr/share/locale/fr/LC_MESSAGES/sssd.mo /usr/share/locale/hu/LC_MESSAGES/sssd.mo /usr/share/locale/id/LC_MESSAGES/sssd.mo /usr/share/locale/it/LC_MESSAGES/sssd.mo /usr/share/locale/ja/LC_MESSAGES/sssd.mo /usr/share/locale/ka/LC_MESSAGES/sssd.mo /usr/share/locale/ko/LC_MESSAGES/sssd.mo /usr/share/locale/lv/LC_MESSAGES/sssd.mo /usr/share/locale/nb/LC_MESSAGES/sssd.mo /usr/share/locale/nl/LC_MESSAGES/sssd.mo /usr/share/locale/pl/LC_MESSAGES/sssd.mo /usr/share/locale/pt/LC_MESSAGES/sssd.mo /usr/share/locale/pt_BR/LC_MESSAGES/sssd.mo /usr/share/locale/ru/LC_MESSAGES/sssd.mo /usr/share/locale/sv/LC_MESSAGES/sssd.mo /usr/share/locale/tg/LC_MESSAGES/sssd.mo /usr/share/locale/tr/LC_MESSAGES/sssd.mo /usr/share/locale/uk/LC_MESSAGES/sssd.mo /usr/share/locale/zh_CN/LC_MESSAGES/sssd.mo /usr/share/locale/zh_TW/LC_MESSAGES/sssd.mo /usr/share/man/man1/sss_ssh_authorizedkeys.1.gz /usr/share/man/man1/sss_ssh_knownhosts.1.gz /usr/share/man/man5/sssd-session-recording.5.gz /usr/share/man/man5/sssd-simple.5.gz /usr/share/man/man5/sssd-sudo.5.gz /usr/share/man/man5/sssd-systemtap.5.gz /usr/share/man/man5/sssd.conf.5.gz /usr/share/man/man8/sss_cache.8.gz /usr/share/man/man8/sssd.8.gz /usr/share/man/pt/man1/sss_ssh_authorizedkeys.1.gz /usr/share/man/pt/man1/sss_ssh_knownhosts.1.gz /usr/share/man/pt/man5/sssd-idp.5.gz /usr/share/man/pt/man5/sssd-session-recording.5.gz /usr/share/man/pt/man5/sssd-simple.5.gz /usr/share/man/pt/man5/sssd-sudo.5.gz /usr/share/man/pt/man5/sssd-systemtap.5.gz /usr/share/man/pt/man5/sssd.conf.5.gz /usr/share/man/pt/man8/sss_cache.8.gz /usr/share/man/pt/man8/sssd.8.gz /usr/share/man/ru/man1/sss_ssh_authorizedkeys.1.gz /usr/share/man/ru/man1/sss_ssh_knownhosts.1.gz /usr/share/man/ru/man5/sssd-idp.5.gz /usr/share/man/ru/man5/sssd-session-recording.5.gz /usr/share/man/ru/man5/sssd-simple.5.gz /usr/share/man/ru/man5/sssd-sudo.5.gz /usr/share/man/ru/man5/sssd-systemtap.5.gz /usr/share/man/ru/man5/sssd.conf.5.gz /usr/share/man/ru/man8/sss_cache.8.gz /usr/share/man/ru/man8/sssd.8.gz /usr/share/man/sv/man1/sss_ssh_authorizedkeys.1.gz /usr/share/man/sv/man1/sss_ssh_knownhosts.1.gz /usr/share/man/sv/man5/sssd-idp.5.gz /usr/share/man/sv/man5/sssd-session-recording.5.gz /usr/share/man/sv/man5/sssd-simple.5.gz /usr/share/man/sv/man5/sssd-sudo.5.gz /usr/share/man/sv/man5/sssd-systemtap.5.gz /usr/share/man/sv/man5/sssd.conf.5.gz /usr/share/man/sv/man8/sss_cache.8.gz /usr/share/man/sv/man8/sssd.8.gz /usr/share/man/uk/man1/sss_ssh_authorizedkeys.1.gz /usr/share/man/uk/man1/sss_ssh_knownhosts.1.gz /usr/share/man/uk/man5/sssd-idp.5.gz /usr/share/man/uk/man5/sssd-session-recording.5.gz /usr/share/man/uk/man5/sssd-simple.5.gz /usr/share/man/uk/man5/sssd-sudo.5.gz /usr/share/man/uk/man5/sssd-systemtap.5.gz /usr/share/man/uk/man5/sssd.conf.5.gz /usr/share/man/uk/man8/sss_cache.8.gz /usr/share/man/uk/man8/sssd.8.gz /usr/share/polkit-1/rules.d/sssd-pcsc.rules /usr/share/polkit-1/rules.d/sssd-realmd.rules /usr/share/sssd /usr/share/sssd/cfg_rules.ini /usr/share/sssd/systemtap /usr/share/sssd/systemtap/dp_request.stp /usr/share/sssd/systemtap/id_perf.stp /usr/share/sssd/systemtap/ldap_perf.stp /usr/share/sssd/systemtap/nested_group_perf.stp /usr/share/systemtap /usr/share/systemtap/tapset /usr/share/systemtap/tapset/sssd.stp /usr/share/systemtap/tapset/sssd_functions.stp /var/cache/krb5rcache /var/lib/sss /var/lib/sss/db /var/lib/sss/deskprofile /var/lib/sss/gpo_cache /var/lib/sss/mc /var/lib/sss/pipes /var/lib/sss/pipes/private /var/lib/sss/pubconf /var/lib/sss/secrets /var/log/sssd
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Jul 14 04:06:32 2026