(RHSA-2024:2571) Moderate: sssd security and bug fix update

2024-04-3011:38:55

access.redhat.com

sssd

security

bug fix

remote directories

authentication mechanisms

nss

pam

race condition

gpo policies

socket leak

passkey

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.9%

JSON

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

Bug Fix(es):

socket leak (JIRA:RHEL-22340)
Passkey cannot fall back to password (JIRA:RHEL-28161)
sssd: Race condition during authorization leads to GPO policies functioning inconsistently (JIRA:RHEL-27209)

OSVersionArchitecturePackageVersionFilename
RedHat9aarch64sssd-tools< 2.9.4-6.el9_4sssd-tools-2.9.4-6.el9_4.aarch64.rpm
RedHat9s390xpython3-sss-murmur< 2.9.4-6.el9_4python3-sss-murmur-2.9.4-6.el9_4.s390x.rpm
RedHat9ppc64lelibsss_simpleifp< 2.9.4-6.el9_4libsss_simpleifp-2.9.4-6.el9_4.ppc64le.rpm
RedHat9x86_64sssd-passkey< 2.9.4-6.el9_4sssd-passkey-2.9.4-6.el9_4.x86_64.rpm
RedHat9ppc64lesssd-client-debuginfo< 2.9.4-6.el9_4sssd-client-debuginfo-2.9.4-6.el9_4.ppc64le.rpm
RedHat9aarch64sssd-idp< 2.9.4-6.el9_4sssd-idp-2.9.4-6.el9_4.aarch64.rpm
RedHat9ppc64lelibsss_nss_idmap< 2.9.4-6.el9_4libsss_nss_idmap-2.9.4-6.el9_4.ppc64le.rpm
RedHat9x86_64libsss_nss_idmap-devel< 2.9.4-6.el9_4libsss_nss_idmap-devel-2.9.4-6.el9_4.x86_64.rpm
RedHat9aarch64libsss_idmap-debuginfo< 2.9.4-6.el9_4libsss_idmap-debuginfo-2.9.4-6.el9_4.aarch64.rpm
RedHat9ppc64lesssd-common-pac< 2.9.4-6.el9_4sssd-common-pac-2.9.4-6.el9_4.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	aarch64	sssd-tools	< 2.9.4-6.el9_4	sssd-tools-2.9.4-6.el9_4.aarch64.rpm
RedHat	9	s390x	python3-sss-murmur	< 2.9.4-6.el9_4	python3-sss-murmur-2.9.4-6.el9_4.s390x.rpm
RedHat	9	ppc64le	libsss_simpleifp	< 2.9.4-6.el9_4	libsss_simpleifp-2.9.4-6.el9_4.ppc64le.rpm
RedHat	9	x86_64	sssd-passkey	< 2.9.4-6.el9_4	sssd-passkey-2.9.4-6.el9_4.x86_64.rpm
RedHat	9	ppc64le	sssd-client-debuginfo	< 2.9.4-6.el9_4	sssd-client-debuginfo-2.9.4-6.el9_4.ppc64le.rpm
RedHat	9	aarch64	sssd-idp	< 2.9.4-6.el9_4	sssd-idp-2.9.4-6.el9_4.aarch64.rpm
RedHat	9	ppc64le	libsss_nss_idmap	< 2.9.4-6.el9_4	libsss_nss_idmap-2.9.4-6.el9_4.ppc64le.rpm
RedHat	9	x86_64	libsss_nss_idmap-devel	< 2.9.4-6.el9_4	libsss_nss_idmap-devel-2.9.4-6.el9_4.x86_64.rpm
RedHat	9	aarch64	libsss_idmap-debuginfo	< 2.9.4-6.el9_4	libsss_idmap-debuginfo-2.9.4-6.el9_4.aarch64.rpm
RedHat	9	ppc64le	sssd-common-pac	< 2.9.4-6.el9_4	sssd-common-pac-2.9.4-6.el9_4.ppc64le.rpm