Red Hat Security AdvisoryRHSA-2024:3270
sssd security update
Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) sssd-idp-2.9.4-3.el8_10
- Red Hat Enterprise Linux BaseOS (v. 8) libipa_hbac-2.9.4-3.el8_10, libsss_autofs-2.9.4-3.el8_10, libsss_certmap-2.9.4-3.el8_10 +25
- Red Hat Enterprise Linux CRB (v. 8) libsss_nss_idmap-devel-2.9.4-3.el8_10
Fixes 1 record
Priority LOW 35
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users.
CVSS 3.1HIGH 7.1· Adjacent network · Low privileges · No interaction · EPSS 0.01041 · Published 2024-04-18 · Partial fix · 2.9.5, 2.9.4-3.el8_10 +5 CWE-362
