Skip to content
OpenAdvisories
Unscored RHSA-2021:3336 1 CVE

Red Hat Security Advisory: sssd security and bug fix update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 113

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client libipa_hbac 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client libipa_hbac-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client libsss_autofs 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client libsss_certmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client libsss_certmap-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client libsss_idmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client libsss_idmap-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client libsss_nss_idmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client libsss_nss_idmap-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client libsss_simpleifp 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client libsss_simpleifp-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client libsss_sudo 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client python-libipa_hbac 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client python-libsss_nss_idmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client python-sss 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client python-sss-murmur 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client python-sssdconfig 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-ad 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-client 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-common 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-common-pac 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-dbus 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-debuginfo 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-ipa 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-kcm 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-krb5 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-krb5-common 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-ldap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-libwbclient 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-libwbclient-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-polkit-rules 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-proxy 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-tools 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::client sssd-winbind-idmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::computenode libipa_hbac-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::computenode libsss_certmap-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::computenode libsss_idmap-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::computenode libsss_nss_idmap-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::computenode libsss_simpleifp-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::computenode python-libsss_nss_idmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::computenode sssd-debuginfo 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::computenode sssd-libwbclient-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server libipa_hbac 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server libipa_hbac-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server libsss_autofs 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server libsss_certmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server libsss_certmap-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server libsss_idmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server libsss_idmap-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server libsss_nss_idmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server libsss_nss_idmap-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server libsss_simpleifp 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server libsss_simpleifp-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server libsss_sudo 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server python-libipa_hbac 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server python-libsss_nss_idmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server python-sss 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server python-sss-murmur 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server python-sssdconfig 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-ad 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-client 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-common 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-common-pac 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-dbus 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-debuginfo 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-ipa 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-kcm 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-krb5 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-krb5-common 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-ldap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-libwbclient 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-libwbclient-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-polkit-rules 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-proxy 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-tools 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::server sssd-winbind-idmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation libipa_hbac 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation libipa_hbac-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation libsss_autofs 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation libsss_certmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation libsss_certmap-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation libsss_idmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation libsss_idmap-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation libsss_nss_idmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation libsss_nss_idmap-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation libsss_simpleifp 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation libsss_simpleifp-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation libsss_sudo 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation python-libipa_hbac 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation python-libsss_nss_idmap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation python-sss 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation python-sss-murmur 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation python-sssdconfig 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-ad 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-client 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-common 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-common-pac 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-dbus 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-debuginfo 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-ipa 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-kcm 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-krb5 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-krb5-common 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-ldap 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-libwbclient 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-libwbclient-devel 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-polkit-rules 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-proxy 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-tools 0:1.16.5-10.el7_9.10
Red Hat · RHEL 7 enterprise_linux:7::workstation sssd-winbind-idmap 0:1.16.5-10.el7_9.10

Vulnerabilities 1

  • Unscored —
    CVE-2021-3621

    A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cac…

    sssd sssd Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1964415
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1968330
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1975142
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1988463
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3336.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3621
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3621
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3621