sssd security and bug fix update

2024-05-0700:00:00

linux.oracle.com

sssd update

bug fix

security

rhel-27209

race condition

gpo policies

passkey

socket leak

authorization

7.1 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.4%

JSON

[2.9.4-6.0.1]

Restore default debug level for sss_cache [Orabug: 32810448]
[2.9.4-6]
Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]
[2.9.4-5]
Resolves: RHEL-28161 - Passkey cannot fall back to password
[2.9.4-4]
Resolves: RHEL-28161 - Passkey cannot fall back to password
[2.9.4-3]
Resolves: RHEL-22340 - socket leak
Resolves: RHEL-28161 - Passkey cannot fall back to password

OSVersionArchitecturePackageVersionFilename
oracle linux9srcsssd< 2.9.4-6.0.1.el9_4sssd-2.9.4-6.0.1.el9_4.src.rpm
oracle linux9srcsssd< 2.9.4-6.0.1.el9_4sssd-2.9.4-6.0.1.el9_4.src.rpm
oracle linux9srcsssd< 2.9.4-6.0.1.el9_4sssd-2.9.4-6.0.1.el9_4.src.rpm
oracle linux9srcsssd< 2.9.4-6.0.1.el9_4sssd-2.9.4-6.0.1.el9_4.src.rpm
oracle linux9aarch64libipa_hbac< 2.9.4-6.0.1.el9_4libipa_hbac-2.9.4-6.0.1.el9_4.aarch64.rpm
oracle linux9aarch64libipa_hbac< 2.9.4-6.0.1.el9_4libipa_hbac-2.9.4-6.0.1.el9_4.aarch64.rpm
oracle linux9aarch64libsss_autofs< 2.9.4-6.0.1.el9_4libsss_autofs-2.9.4-6.0.1.el9_4.aarch64.rpm
oracle linux9aarch64libsss_autofs< 2.9.4-6.0.1.el9_4libsss_autofs-2.9.4-6.0.1.el9_4.aarch64.rpm
oracle linux9aarch64libsss_certmap< 2.9.4-6.0.1.el9_4libsss_certmap-2.9.4-6.0.1.el9_4.aarch64.rpm
oracle linux9aarch64libsss_certmap< 2.9.4-6.0.1.el9_4libsss_certmap-2.9.4-6.0.1.el9_4.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	sssd	< 2.9.4-6.0.1.el9_4	sssd-2.9.4-6.0.1.el9_4.src.rpm
oracle linux	9	src	sssd	< 2.9.4-6.0.1.el9_4	sssd-2.9.4-6.0.1.el9_4.src.rpm
oracle linux	9	src	sssd	< 2.9.4-6.0.1.el9_4	sssd-2.9.4-6.0.1.el9_4.src.rpm
oracle linux	9	src	sssd	< 2.9.4-6.0.1.el9_4	sssd-2.9.4-6.0.1.el9_4.src.rpm
oracle linux	9	aarch64	libipa_hbac	< 2.9.4-6.0.1.el9_4	libipa_hbac-2.9.4-6.0.1.el9_4.aarch64.rpm
oracle linux	9	aarch64	libipa_hbac	< 2.9.4-6.0.1.el9_4	libipa_hbac-2.9.4-6.0.1.el9_4.aarch64.rpm
oracle linux	9	aarch64	libsss_autofs	< 2.9.4-6.0.1.el9_4	libsss_autofs-2.9.4-6.0.1.el9_4.aarch64.rpm
oracle linux	9	aarch64	libsss_autofs	< 2.9.4-6.0.1.el9_4	libsss_autofs-2.9.4-6.0.1.el9_4.aarch64.rpm
oracle linux	9	aarch64	libsss_certmap	< 2.9.4-6.0.1.el9_4	libsss_certmap-2.9.4-6.0.1.el9_4.aarch64.rpm
oracle linux	9	aarch64	libsss_certmap	< 2.9.4-6.0.1.el9_4	libsss_certmap-2.9.4-6.0.1.el9_4.aarch64.rpm