Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

Release libipa_hbac-2.12.0-3.el10_2.2 ALSA-2026:77534

Open
  • Is something wrong?
#3,781 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
8/100
Issue type
Bug
Clarity
Needs clarification
Activity status
Active
Tech stack
python
Domain
authentication, security

Research direction

This is an automated AlmaLinux release tracker for the sssd 2.12.0-3.el10_2.2 security update, not a code task. The payload names the fix only as CVE-2026-87853, an IdP authentication prefix comparison that allows cross-user impersonation, and lists the built packages such as sssd-idp and python3-sss. Reading the upstream sssd fix for the CVE and the referenced advisory is the first step. Done means the packages are built, signed and published for all listed architectures by maintainers.

Written by the indexing model from the issue text.

Description

sssd security update
Severity: Moderate
Description
The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: sssd: IdP authentication prefix comparison allows cross-user impersonation (CVE-2026-87853)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected packages:
libipa_hbac-2.12.0-3.el10_2.2.x86_64
libsss_autofs-2.12.0-3.el10_2.2.x86_64
libsss_certmap-2.12.0-3.el10_2.2.x86_64
libsss_idmap-2.12.0-3.el10_2.2.x86_64
libsss_nss_idmap-2.12.0-3.el10_2.2.x86_64
libsss_sudo-2.12.0-3.el10_2.2.x86_64
python3-libipa_hbac-2.12.0-3.el10_2.2.x86_64
python3-libsss_nss_idmap-2.12.0-3.el10_2.2.x86_64
python3-sss-2.12.0-3.el10_2.2.x86_64
python3-sss-murmur-2.12.0-3.el10_2.2.x86_64
python3-sssdconfig-2.12.0-3.el10_2.2.noarch
sssd-2.12.0-3.el10_2.2.x86_64
sssd-ad-2.12.0-3.el10_2.2.x86_64
sssd-client-2.12.0-3.el10_2.2.x86_64
sssd-common-2.12.0-3.el10_2.2.x86_64
sssd-common-pac-2.12.0-3.el10_2.2.x86_64
sssd-dbus-2.12.0-3.el10_2.2.x86_64
sssd-idp-2.12.0-3.el10_2.2.x86_64
sssd-ipa-2.12.0-3.el10_2.2.x86_64
sssd-kcm-2.12.0-3.el10_2.2.x86_64
sssd-krb5-2.12.0-3.el10_2.2.x86_64
sssd-krb5-common-2.12.0-3.el10_2.2.x86_64
sssd-ldap-2.12.0-3.el10_2.2.x86_64
sssd-nfs-idmap-2.12.0-3.el10_2.2.x86_64
sssd-passkey-2.12.0-3.el10_2.2.x86_64
sssd-proxy-2.12.0-3.el10_2.2.x86_64
sssd-tools-2.12.0-3.el10_2.2.x86_64
sssd-winbind-idmap-2.12.0-3.el10_2.2.x86_64
libipa_hbac-2.12.0-3.el10_2.2.s390x
libsss_autofs-2.12.0-3.el10_2.2.s390x
libsss_certmap-2.12.0-3.el10_2.2.s390x
libsss_idmap-2.12.0-3.el10_2.2.s390x
libsss_nss_idmap-2.12.0-3.el10_2.2.s390x
libsss_sudo-2.12.0-3.el10_2.2.s390x
python3-libipa_hbac-2.12.0-3.el10_2.2.s390x
python3-libsss_nss_idmap-2.12.0-3.el10_2.2.s390x
python3-sss-2.12.0-3.el10_2.2.s390x
python3-sss-murmur-2.12.0-3.el10_2.2.s390x
python3-sssdconfig-2.12.0-3.el10_2.2.noarch
sssd-2.12.0-3.el10_2.2.s390x
sssd-ad-2.12.0-3.el10_2.2.s390x
sssd-client-2.12.0-3.el10_2.2.s390x
sssd-common-2.12.0-3.el10_2.2.s390x
sssd-common-pac-2.12.0-3.el10_2.2.s390x
sssd-dbus-2.12.0-3.el10_2.2.s390x
sssd-idp-2.12.0-3.el10_2.2.s390x
sssd-ipa-2.12.0-3.el10_2.2.s390x
sssd-kcm-2.12.0-3.el10_2.2.s390x
sssd-krb5-2.12.0-3.el10_2.2.s390x
sssd-krb5-common-2.12.0-3.el10_2.2.s390x
sssd-ldap-2.12.0-3.el10_2.2.s390x
sssd-nfs-idmap-2.12.0-3.el10_2.2.s390x
sssd-passkey-2.12.0-3.el10_2.2.s390x
sssd-proxy-2.12.0-3.el10_2.2.s390x
sssd-tools-2.12.0-3.el10_2.2.s390x
sssd-winbind-idmap-2.12.0-3.el10_2.2.s390x
libipa_hbac-2.12.0-3.el10_2.2.ppc64le
libsss_autofs-2.12.0-3.el10_2.2.ppc64le
libsss_certmap-2.12.0-3.el10_2.2.ppc64le
libsss_idmap-2.12.0-3.el10_2.2.ppc64le
libsss_nss_idmap-2.12.0-3.el10_2.2.ppc64le
libsss_sudo-2.12.0-3.el10_2.2.ppc64le
python3-libipa_hbac-2.12.0-3.el10_2.2.ppc64le
python3-libsss_nss_idmap-2.12.0-3.el10_2.2.ppc64le
python3-sss-2.12.0-3.el10_2.2.ppc64le
python3-sss-murmur-2.12.0-3.el10_2.2.ppc64le
python3-sssdconfig-2.12.0-3.el10_2.2.noarch
sssd-2.12.0-3.el10_2.2.ppc64le
sssd-ad-2.12.0-3.el10_2.2.ppc64le
sssd-client-2.12.0-3.el10_2.2.ppc64le
sssd-common-2.12.0-3.el10_2.2.ppc64le
sssd-common-pac-2.12.0-3.el10_2.2.ppc64le
sssd-dbus-2.12.0-3.el10_2.2.ppc64le
sssd-idp-2.12.0-3.el10_2.2.ppc64le
sssd-ipa-2.12.0-3.el10_2.2.ppc64le
sssd-kcm-2.12.0-3.el10_2.2.ppc64le
sssd-krb5-2.12.0-3.el10_2.2.ppc64le
sssd-krb5-common-2.12.0-3.el10_2.2.ppc64le
sssd-ldap-2.12.0-3.el10_2.2.ppc64le
sssd-nfs-idmap-2.12.0-3.el10_2.2.ppc64le
sssd-passkey-2.12.0-3.el10_2.2.ppc64le
sssd-proxy-2.12.0-3.el10_2.2.ppc64le
sssd-tools-2.12.0-3.el10_2.2.ppc64le
sssd-winbind-idmap-2.12.0-3.el10_2.2.ppc64le
libipa_hbac-2.12.0-3.el10_2.2.aarch64
libsss_autofs-2.12.0-3.el10_2.2.aarch64
libsss_certmap-2.12.0-3.el10_2.2.aarch64
libsss_idmap-2.12.0-3.el10_2.2.aarch64
libsss_nss_idmap-2.12.0-3.el10_2.2.aarch64
libsss_sudo-2.12.0-3.el10_2.2.aarch64
python3-libipa_hbac-2.12.0-3.el10_2.2.aarch64
python3-libsss_nss_idmap-2.12.0-3.el10_2.2.aarch64
python3-sss-2.12.0-3.el10_2.2.aarch64
python3-sss-murmur-2.12.0-3.el10_2.2.aarch64
python3-sssdconfig-2.12.0-3.el10_2.2.noarch
sssd-2.12.0-3.el10_2.2.aarch64
sssd-ad-2.12.0-3.el10_2.2.aarch64
sssd-client-2.12.0-3.el10_2.2.aarch64
sssd-common-2.12.0-3.el10_2.2.aarch64
sssd-common-pac-2.12.0-3.el10_2.2.aarch64
sssd-dbus-2.12.0-3.el10_2.2.aarch64
sssd-idp-2.12.0-3.el10_2.2.aarch64
sssd-ipa-2.12.0-3.el10_2.2.aarch64
sssd-kcm-2.12.0-3.el10_2.2.aarch64
sssd-krb5-2.12.0-3.el10_2.2.aarch64
sssd-krb5-common-2.12.0-3.el10_2.2.aarch64
sssd-ldap-2.12.0-3.el10_2.2.aarch64
sssd-nfs-idmap-2.12.0-3.el10_2.2.aarch64
sssd-passkey-2.12.0-3.el10_2.2.aarch64
sssd-proxy-2.12.0-3.el10_2.2.aarch64
sssd-tools-2.12.0-3.el10_2.2.aarch64
sssd-winbind-idmap-2.12.0-3.el10_2.2.aarch64
libsss_nss_idmap-devel-2.12.0-3.el10_2.2.x86_64
libsss_nss_idmap-devel-2.12.0-3.el10_2.2.ppc64le
libsss_nss_idmap-devel-2.12.0-3.el10_2.2.aarch64
libsss_nss_idmap-devel-2.12.0-3.el10_2.2.s390x
libipa_hbac-2.12.0-3.el10_2.2.x86_64_v2
libsss_autofs-2.12.0-3.el10_2.2.x86_64_v2
libsss_certmap-2.12.0-3.el10_2.2.x86_64_v2
libsss_idmap-2.12.0-3.el10_2.2.x86_64_v2
libsss_nss_idmap-2.12.0-3.el10_2.2.x86_64_v2
libsss_sudo-2.12.0-3.el10_2.2.x86_64_v2
python3-libipa_hbac-2.12.0-3.el10_2.2.x86_64_v2
python3-libsss_nss_idmap-2.12.0-3.el10_2.2.x86_64_v2
python3-sss-2.12.0-3.el10_2.2.x86_64_v2
python3-sss-murmur-2.12.0-3.el10_2.2.x86_64_v2
sssd-2.12.0-3.el10_2.2.x86_64_v2
sssd-ad-2.12.0-3.el10_2.2.x86_64_v2
sssd-client-2.12.0-3.el10_2.2.x86_64_v2
sssd-common-2.12.0-3.el10_2.2.x86_64_v2
sssd-common-pac-2.12.0-3.el10_2.2.x86_64_v2
sssd-dbus-2.12.0-3.el10_2.2.x86_64_v2
sssd-idp-2.12.0-3.el10_2.2.x86_64_v2
sssd-ipa-2.12.0-3.el10_2.2.x86_64_v2
sssd-kcm-2.12.0-3.el10_2.2.x86_64_v2
sssd-krb5-2.12.0-3.el10_2.2.x86_64_v2
sssd-krb5-common-2.12.0-3.el10_2.2.x86_64_v2
sssd-ldap-2.12.0-3.el10_2.2.x86_64_v2
sssd-nfs-idmap-2.12.0-3.el10_2.2.x86_64_v2
sssd-passkey-2.12.0-3.el10_2.2.x86_64_v2
sssd-proxy-2.12.0-3.el10_2.2.x86_64_v2
sssd-tools-2.12.0-3.el10_2.2.x86_64_v2
sssd-winbind-idmap-2.12.0-3.el10_2.2.x86_64_v2
libsss_nss_idmap-devel-2.12.0-3.el10_2.2.x86_64_v2
python3-sssdconfig-2.12.0-3.el10_2.2.noarch

Dominant language
No language data
Stars
2
Forks
0
No merged PRs in 30d

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from AlmaLinux/updates

All issues in AlmaLinux/updates

Similar issues

More Security issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.