Lucene search

K
oraclelinuxOracleLinuxELSA-2023-0403
HistoryJan 24, 2023 - 12:00 a.m.

sssd security and bug fix update

2023-01-2400:00:00
linux.oracle.com
44
sssd
security update
bug fix
redhat
ldap
smartcards
cve-2022-4254

0.002 Low

EPSS

Percentile

51.7%

[1.16.5-10.0.3]

  • Revert Redhat’s change of disallowing duplicated incomplete gid
    when ‘id_provider=ldap’ is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]
    [1.16.5-10.15]
  • Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
  • Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]