Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-3758: A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.
Fixed packages 61
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | libipa_hbac | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libipa_hbac-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libipa_hbac-devel | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_autofs | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_autofs-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_certmap | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_certmap-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_certmap-devel | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_idmap | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_idmap-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_idmap-devel | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_nss_idmap | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_nss_idmap-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_nss_idmap-devel | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_simpleifp | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_simpleifp-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_simpleifp-devel | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_sudo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | libsss_sudo-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-libipa_hbac | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-libipa_hbac-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-libsss_nss_idmap | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-libsss_nss_idmap-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-sss | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-sss-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-sss-murmur | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-sss-murmur-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-sssdconfig | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-ad | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-ad-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-client | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-client-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-common | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-common-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-common-pac | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-common-pac-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-dbus | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-dbus-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-debugsource | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-idp | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-idp-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-ipa | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-ipa-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-kcm | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-kcm-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-krb5 | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-krb5-common | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-krb5-common-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-krb5-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-ldap | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-ldap-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-nfs-idmap | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-nfs-idmap-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-proxy | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-proxy-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-tools | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-tools-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-winbind-idmap | 0:2.9.4-1.amzn2023.0.2 |
| Amazon Linux · 2023 | sssd-winbind-idmap-debuginfo | 0:2.9.4-1.amzn2023.0.2 |
Vulnerabilities 1
-
High 7.1
Sssd: race condition during authorization leads to gpo policies functioning inconsistently
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-3758.html