(RHSA-2024:1922) Moderate: sssd security update

2024-04-1810:43:08

access.redhat.com

sssd service

remote directories

authentication mechanisms

nss

pam

back-end system

race condition

gpo policies

cve-2023-3758

unix

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.2%

JSON

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

sssd: Race condition during authorization leads to GPO policies functioning
inconsistently (CVE-2023-3758)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8ppc64lesssd-polkit-rules< 2.8.2-4.el8_8.2sssd-polkit-rules-2.8.2-4.el8_8.2.ppc64le.rpm
RedHat8s390xlibsss_autofs< 2.8.2-4.el8_8.2libsss_autofs-2.8.2-4.el8_8.2.s390x.rpm
RedHat8s390xsssd-proxy< 2.8.2-4.el8_8.2sssd-proxy-2.8.2-4.el8_8.2.s390x.rpm
RedHat8noarchpython3-sssdconfig< 2.8.2-4.el8_8.2python3-sssdconfig-2.8.2-4.el8_8.2.noarch.rpm
RedHat8x86_64libsss_idmap< 2.8.2-4.el8_8.2libsss_idmap-2.8.2-4.el8_8.2.x86_64.rpm
RedHat8aarch64libipa_hbac< 2.8.2-4.el8_8.2libipa_hbac-2.8.2-4.el8_8.2.aarch64.rpm
RedHat8x86_64libsss_nss_idmap< 2.8.2-4.el8_8.2libsss_nss_idmap-2.8.2-4.el8_8.2.x86_64.rpm
RedHat8s390xsssd-dbus-debuginfo< 2.8.2-4.el8_8.2sssd-dbus-debuginfo-2.8.2-4.el8_8.2.s390x.rpm
RedHat8aarch64sssd-krb5< 2.8.2-4.el8_8.2sssd-krb5-2.8.2-4.el8_8.2.aarch64.rpm
RedHat8ppc64lesssd< 2.8.2-4.el8_8.2sssd-2.8.2-4.el8_8.2.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	ppc64le	sssd-polkit-rules	< 2.8.2-4.el8_8.2	sssd-polkit-rules-2.8.2-4.el8_8.2.ppc64le.rpm
RedHat	8	s390x	libsss_autofs	< 2.8.2-4.el8_8.2	libsss_autofs-2.8.2-4.el8_8.2.s390x.rpm
RedHat	8	s390x	sssd-proxy	< 2.8.2-4.el8_8.2	sssd-proxy-2.8.2-4.el8_8.2.s390x.rpm
RedHat	8	noarch	python3-sssdconfig	< 2.8.2-4.el8_8.2	python3-sssdconfig-2.8.2-4.el8_8.2.noarch.rpm
RedHat	8	x86_64	libsss_idmap	< 2.8.2-4.el8_8.2	libsss_idmap-2.8.2-4.el8_8.2.x86_64.rpm
RedHat	8	aarch64	libipa_hbac	< 2.8.2-4.el8_8.2	libipa_hbac-2.8.2-4.el8_8.2.aarch64.rpm
RedHat	8	x86_64	libsss_nss_idmap	< 2.8.2-4.el8_8.2	libsss_nss_idmap-2.8.2-4.el8_8.2.x86_64.rpm
RedHat	8	s390x	sssd-dbus-debuginfo	< 2.8.2-4.el8_8.2	sssd-dbus-debuginfo-2.8.2-4.el8_8.2.s390x.rpm
RedHat	8	aarch64	sssd-krb5	< 2.8.2-4.el8_8.2	sssd-krb5-2.8.2-4.el8_8.2.aarch64.rpm
RedHat	8	ppc64le	sssd	< 2.8.2-4.el8_8.2	sssd-2.8.2-4.el8_8.2.ppc64le.rpm