RHSA-2024:1920 — Red Hat Security Advisory: sssd security update

Fixed packages 114

Release	Package	Fixed in
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	libipa_hbac-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	libsss_autofs-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	libsss_certmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	libsss_idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	libsss_nss_idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	libsss_simpleifp-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	libsss_sudo-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	python3-libipa_hbac-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	python3-libsss_nss_idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	python3-sss-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	python3-sss-murmur-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-ad-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-client-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-common-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-common-pac-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-dbus-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-debugsource	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-idp	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-idp-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-ipa-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-kcm-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-krb5-common-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-krb5-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-ldap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-nfs-idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-proxy-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-tools-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	sssd-winbind-idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libipa_hbac	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libipa_hbac-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libsss_autofs	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libsss_autofs-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libsss_certmap	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libsss_certmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libsss_idmap	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libsss_idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libsss_nss_idmap	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libsss_nss_idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libsss_simpleifp	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libsss_simpleifp-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libsss_sudo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	libsss_sudo-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	python3-libipa_hbac	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	python3-libipa_hbac-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	python3-libsss_nss_idmap	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	python3-libsss_nss_idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	python3-sss	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	python3-sss-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	python3-sss-murmur	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	python3-sss-murmur-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	python3-sssdconfig	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-ad	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-ad-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-client	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-client-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-common	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-common-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-common-pac	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-common-pac-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-dbus	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-dbus-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-debugsource	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-idp-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-ipa	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-ipa-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-kcm	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-kcm-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-krb5	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-krb5-common	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-krb5-common-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-krb5-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-ldap	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-ldap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-nfs-idmap	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-nfs-idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-polkit-rules	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-proxy	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-proxy-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-tools	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-tools-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-winbind-idmap	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos	sssd-winbind-idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	libipa_hbac-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	libsss_autofs-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	libsss_certmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	libsss_idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	libsss_nss_idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	libsss_nss_idmap-devel	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	libsss_simpleifp-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	libsss_sudo-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	python3-libipa_hbac-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	python3-libsss_nss_idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	python3-sss-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	python3-sss-murmur-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-ad-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-client-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-common-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-common-pac-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-dbus-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-debugsource	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-idp-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-ipa-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-kcm-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-krb5-common-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-krb5-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-ldap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-nfs-idmap-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-proxy-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-tools-debuginfo	0:2.8.2-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb	sssd-winbind-idmap-debuginfo	0:2.8.2-5.el9_2.4

Vulnerabilities 1

High 7.1

CVE-2023-3758

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Apr 18, 2024

References

article
https://access.redhat.com/security/updates/classification/#moderate
report
https://bugzilla.redhat.com/show_bug.cgi?id=2223762
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1920.json
report
https://access.redhat.com/security/cve/CVE-2023-3758
advisory
https://www.cve.org/CVERecord?id=CVE-2023-3758
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-3758
article
https://github.com/SSSD/sssd/pull/7302

Red Hat Security Advisory: sssd security update

Fixed packages 114

Vulnerabilities 1

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

References