(RHSA-2024:1919) Moderate: sssd security update

2024-04-1810:42:42

access.redhat.com

sssd

remote directories access

authentication mechanisms

nss interface

pam interface

race condition

gpo policies

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.1%

JSON

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9ppc64lepython3-libsss_nss_idmap-debuginfo< 2.6.2-4.el9_0.3python3-libsss_nss_idmap-debuginfo-2.6.2-4.el9_0.3.ppc64le.rpm
RedHat9s390xsssd-kcm< 2.6.2-4.el9_0.3sssd-kcm-2.6.2-4.el9_0.3.s390x.rpm
RedHat9aarch64libsss_autofs< 2.6.2-4.el9_0.3libsss_autofs-2.6.2-4.el9_0.3.aarch64.rpm
RedHat9aarch64python3-sss-murmur-debuginfo< 2.6.2-4.el9_0.3python3-sss-murmur-debuginfo-2.6.2-4.el9_0.3.aarch64.rpm
RedHat9x86_64sssd-dbus-debuginfo< 2.6.2-4.el9_0.3sssd-dbus-debuginfo-2.6.2-4.el9_0.3.x86_64.rpm
RedHat9aarch64sssd-krb5-debuginfo< 2.6.2-4.el9_0.3sssd-krb5-debuginfo-2.6.2-4.el9_0.3.aarch64.rpm
RedHat9s390xsssd-common-debuginfo< 2.6.2-4.el9_0.3sssd-common-debuginfo-2.6.2-4.el9_0.3.s390x.rpm
RedHat9s390xpython3-sss< 2.6.2-4.el9_0.3python3-sss-2.6.2-4.el9_0.3.s390x.rpm
RedHat9i686sssd-common-pac-debuginfo< 2.6.2-4.el9_0.3sssd-common-pac-debuginfo-2.6.2-4.el9_0.3.i686.rpm
RedHat9s390xsssd-common-pac< 2.6.2-4.el9_0.3sssd-common-pac-2.6.2-4.el9_0.3.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	ppc64le	python3-libsss_nss_idmap-debuginfo	< 2.6.2-4.el9_0.3	python3-libsss_nss_idmap-debuginfo-2.6.2-4.el9_0.3.ppc64le.rpm
RedHat	9	s390x	sssd-kcm	< 2.6.2-4.el9_0.3	sssd-kcm-2.6.2-4.el9_0.3.s390x.rpm
RedHat	9	aarch64	libsss_autofs	< 2.6.2-4.el9_0.3	libsss_autofs-2.6.2-4.el9_0.3.aarch64.rpm
RedHat	9	aarch64	python3-sss-murmur-debuginfo	< 2.6.2-4.el9_0.3	python3-sss-murmur-debuginfo-2.6.2-4.el9_0.3.aarch64.rpm
RedHat	9	x86_64	sssd-dbus-debuginfo	< 2.6.2-4.el9_0.3	sssd-dbus-debuginfo-2.6.2-4.el9_0.3.x86_64.rpm
RedHat	9	aarch64	sssd-krb5-debuginfo	< 2.6.2-4.el9_0.3	sssd-krb5-debuginfo-2.6.2-4.el9_0.3.aarch64.rpm
RedHat	9	s390x	sssd-common-debuginfo	< 2.6.2-4.el9_0.3	sssd-common-debuginfo-2.6.2-4.el9_0.3.s390x.rpm
RedHat	9	s390x	python3-sss	< 2.6.2-4.el9_0.3	python3-sss-2.6.2-4.el9_0.3.s390x.rpm
RedHat	9	i686	sssd-common-pac-debuginfo	< 2.6.2-4.el9_0.3	sssd-common-pac-debuginfo-2.6.2-4.el9_0.3.i686.rpm
RedHat	9	s390x	sssd-common-pac	< 2.6.2-4.el9_0.3	sssd-common-pac-2.6.2-4.el9_0.3.s390x.rpm