Red Hat Security AdvisoryRHSA-2024:1922
sssd security update
Released 2024-04-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.8.8) libsss_nss_idmap-devel-2.8.2-4.el8_8.2
- Red Hat Enterprise Linux AppStream EUS (v.8.8) sssd-idp-2.8.2-4.el8_8.2
- Red Hat Enterprise Linux BaseOS EUS (v.8.8) libipa_hbac-2.8.2-4.el8_8.2, libsss_autofs-2.8.2-4.el8_8.2, libsss_certmap-2.8.2-4.el8_8.2 +25
Fixes 1 record
Priority LOW 35
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users.
CVSS 3.1HIGH 7.1· Adjacent network · Low privileges · No interaction · EPSS 0.01041 · Published 2024-04-18 · Partial fix · 2.9.5, 2.9.4-3.el8_10 +5 CWE-362
