Skip to content
OpenAdvisories
High ELSA-2021-3151 1 CVE

Important: sssd security update (Oracle Linux 8)

Published Aug 17, 2021 · Updated Aug 17, 2021

Ecosystem: Oracle Linux

Summary

[2.4.0-9.0.1]
- Restore default debug level for sss_cache [Orabug: 32810448]
- Restore default debug level for shadow-utils tools [Orabug: 32810448]
- Revert Redhat's change of disallowing duplicated incomplete gid
when 'id_provider=ldap' is used, which caused regression in AD
environment. [Orabug: 29286774] [Doc ID 2605732.1]

[2.4.0-9.2]
- Resolves: rhbz#1985456 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8.4.0.z]

Fixed packages 30

ReleasePackageFixed in
Oracle Linux · 8 libipa_hbac 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 libsss_autofs 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 libsss_certmap 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 libsss_idmap 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 libsss_nss_idmap 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 libsss_nss_idmap-devel 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 libsss_simpleifp 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 libsss_sudo 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 python3-libipa_hbac 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 python3-libsss_nss_idmap 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 python3-sss 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 python3-sss-murmur 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 python3-sssdconfig 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-ad 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-client 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-common 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-common-pac 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-dbus 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-ipa 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-kcm 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-krb5 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-krb5-common 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-ldap 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-libwbclient 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-nfs-idmap 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-polkit-rules 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-proxy 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-tools 0:2.4.0-9.0.1.el8_4.2
Oracle Linux · 8 sssd-winbind-idmap 0:2.4.0-9.0.1.el8_4.2

Vulnerabilities 1

  • Unscored —
    CVE-2021-3621

    A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cac…

    sssd sssd Debian Ubuntu