Red Hat Security AdvisoryRHSA-2024:1921
sssd security update
Released 2024-04-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.8.6) libsss_nss_idmap-devel-2.6.2-4.el8_6.3
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) libipa_hbac-2.6.2-4.el8_6.3, libsss_autofs-2.6.2-4.el8_6.3, libsss_certmap-2.6.2-4.el8_6.3 +25
- Red Hat Virtualization 4 Hypervisor for RHEL 8 libipa_hbac-2.6.2-4.el8_6.3, libsss_autofs-2.6.2-4.el8_6.3, libsss_certmap-2.6.2-4.el8_6.3 +25
Fixes 1 record
Priority LOW 35
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users.
CVSS 3.1HIGH 7.1· Adjacent network · Low privileges · No interaction · EPSS 0.01041 · Published 2024-04-18 · Partial fix · 2.9.5, 2.9.4-3.el8_10 +5 CWE-362