Moderate: sssd security and bug fix update

2024-04-3000:00:00

errata.almalinux.org

sssd

nss

pam

bug fix

security

race condition

gpo

passkey

socket leak

authentication

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.9%

JSON

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

Bug Fix(es):

socket leak (JIRA:AlmaLinux-22340)
Passkey cannot fall back to password (JIRA:AlmaLinux-28161)
sssd: Race condition during authorization leads to GPO policies functioning inconsistently (JIRA:AlmaLinux-27209)

OSVersionArchitecturePackageVersionFilename
almalinux9ppc64lesssd-idp< 2.9.4-6.el9_4sssd-idp-2.9.4-6.el9_4.ppc64le.rpm
almalinux9x86_64sssd-idp< 2.9.4-6.el9_4sssd-idp-2.9.4-6.el9_4.x86_64.rpm
almalinux9aarch64sssd-idp< 2.9.4-6.el9_4sssd-idp-2.9.4-6.el9_4.aarch64.rpm
almalinux9s390xsssd-idp< 2.9.4-6.el9_4sssd-idp-2.9.4-6.el9_4.s390x.rpm
almalinux9noarchpython3-sssdconfig< 2.9.4-6.el9_4python3-sssdconfig-2.9.4-6.el9_4.noarch.rpm
almalinux9x86_64libipa_hbac< 2.9.4-6.el9_4libipa_hbac-2.9.4-6.el9_4.x86_64.rpm
almalinux9i686sssd-client< 2.9.4-6.el9_4sssd-client-2.9.4-6.el9_4.i686.rpm
almalinux9x86_64python3-libsss_nss_idmap< 2.9.4-6.el9_4python3-libsss_nss_idmap-2.9.4-6.el9_4.x86_64.rpm
almalinux9x86_64sssd-common< 2.9.4-6.el9_4sssd-common-2.9.4-6.el9_4.x86_64.rpm
almalinux9x86_64sssd< 2.9.4-6.el9_4sssd-2.9.4-6.el9_4.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	ppc64le	sssd-idp	< 2.9.4-6.el9_4	sssd-idp-2.9.4-6.el9_4.ppc64le.rpm
almalinux	9	x86_64	sssd-idp	< 2.9.4-6.el9_4	sssd-idp-2.9.4-6.el9_4.x86_64.rpm
almalinux	9	aarch64	sssd-idp	< 2.9.4-6.el9_4	sssd-idp-2.9.4-6.el9_4.aarch64.rpm
almalinux	9	s390x	sssd-idp	< 2.9.4-6.el9_4	sssd-idp-2.9.4-6.el9_4.s390x.rpm
almalinux	9	noarch	python3-sssdconfig	< 2.9.4-6.el9_4	python3-sssdconfig-2.9.4-6.el9_4.noarch.rpm
almalinux	9	x86_64	libipa_hbac	< 2.9.4-6.el9_4	libipa_hbac-2.9.4-6.el9_4.x86_64.rpm
almalinux	9	i686	sssd-client	< 2.9.4-6.el9_4	sssd-client-2.9.4-6.el9_4.i686.rpm
almalinux	9	x86_64	python3-libsss_nss_idmap	< 2.9.4-6.el9_4	python3-libsss_nss_idmap-2.9.4-6.el9_4.x86_64.rpm
almalinux	9	x86_64	sssd-common	< 2.9.4-6.el9_4	sssd-common-2.9.4-6.el9_4.x86_64.rpm
almalinux	9	x86_64	sssd	< 2.9.4-6.el9_4	sssd-2.9.4-6.el9_4.x86_64.rpm