OESA-2024-1572

Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1572
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2024-1572.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2024-1572
Upstream
Published
2024-05-17T11:07:58Z
Modified
2025-09-03T06:19:18.605170Z
Summary
sssd security update
Details

SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms such as LDAP, Kerberos or FreeIPA. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources.

Security Fix(es):

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.(CVE-2023-3758)

Database specific
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP4 / sssd

Package

Name
sssd
Purl
pkg:rpm/openEuler/sssd&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.2-16.oe2003sp4

Ecosystem specific

{
    "src": [
        "sssd-2.2.2-16.oe2003sp4.src.rpm"
    ],
    "x86_64": [
        "python3-sssd-2.2.2-16.oe2003sp4.x86_64.rpm",
        "sssd-devel-2.2.2-16.oe2003sp4.x86_64.rpm",
        "sssd-debuginfo-2.2.2-16.oe2003sp4.x86_64.rpm",
        "sssd-2.2.2-16.oe2003sp4.x86_64.rpm",
        "sssd-debugsource-2.2.2-16.oe2003sp4.x86_64.rpm",
        "python2-sssd-2.2.2-16.oe2003sp4.x86_64.rpm"
    ],
    "aarch64": [
        "python3-sssd-2.2.2-16.oe2003sp4.aarch64.rpm",
        "sssd-debugsource-2.2.2-16.oe2003sp4.aarch64.rpm",
        "sssd-2.2.2-16.oe2003sp4.aarch64.rpm",
        "python2-sssd-2.2.2-16.oe2003sp4.aarch64.rpm",
        "sssd-debuginfo-2.2.2-16.oe2003sp4.aarch64.rpm",
        "sssd-devel-2.2.2-16.oe2003sp4.aarch64.rpm"
    ],
    "noarch": [
        "sssd-help-2.2.2-16.oe2003sp4.noarch.rpm"
    ]
}