A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libipa_hbacUpgrade libsss_certmap-develUpgrade python-sss-murmurUpgrade python-sssUpgrade sssd-dbusUpgrade sssd-adUpgrade sssd-winbind-idmapUpgrade sssd-libwbclientUpgrade libsss_simpleifpUpgrade python-libsss_nss_idmapUpgrade libsss_idmap-develUpgrade python-sssdconfigUpgrade libsss_sudoUpgrade sssd-ipaUpgrade sssd-krb5-commonUpgrade sssd-kcmUpgrade python-libipa_hbacUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade sssd-polkit-rulesUpgrade sssd-debuginfoUpgrade libsss_simpleifp-develUpgrade libipa_hbac-develUpgrade sssd-commonUpgrade sssd-toolsUpgrade sssd-libwbclient-develUpgrade sssd-krb5Upgrade libsss_autofsUpgrade libsss_idmapUpgrade libsss_nss_idmap-develUpgrade sssd-ldapUpgrade sssd-proxyUpgrade sssdUpgrade libsss_certmapUpgrade sssd-client | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libsss_certmap-develUpgrade sssd-proxy-debuginfoUpgrade libsss_sudo-debuginfoUpgrade libsss_autofsUpgrade python3-sssUpgrade sssdUpgrade libipa_hbac-develUpgrade python3-sss-murmurUpgrade python-sssUpgrade sssd-kcmUpgrade libsss_autofs-debuginfoUpgrade sssd-dbusUpgrade libsss_nss_idmap-develUpgrade sssd-clientUpgrade sssd-polkit-rulesUpgrade libsss_certmap-debuginfoUpgrade libsss_certmapUpgrade python-libsss_nss_idmapUpgrade sssd-krb5-commonUpgrade libsss_simpleifp-develUpgrade libipa_hbac-debuginfoUpgrade libsss_nss_idmapUpgrade sssd-ldap-debuginfoUpgrade libsss_nss_idmap-debuginfoUpgrade sssd-debugsourceUpgrade sssd-nfs-idmap-debuginfoUpgrade sssd-libwbclientUpgrade sssd-krb5Upgrade python3-libsss_nss_idmapUpgrade python-sss-murmurUpgrade sssd-common-pacUpgrade sssd-client-debuginfoUpgrade sssd-ldapUpgrade libsss_simpleifp-debuginfoUpgrade sssd-ipa-debuginfoUpgrade sssd-toolsUpgrade sssd-tools-debuginfoUpgrade python3-sss-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade python3-sssdconfigUpgrade sssd-adUpgrade python3-libipa_hbacUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssd-kcm-debuginfoUpgrade sssd-ipaUpgrade sssd-libwbclient-develUpgrade python3-sss-murmur-debuginfoUpgrade sssd-krb5-debuginfoUpgrade libsss_idmap-debuginfoUpgrade sssd-proxyUpgrade sssd-winbind-idmapUpgrade sssd-nfs-idmapUpgrade libsss_idmap-develUpgrade python-sssdconfigUpgrade libsss_sudoUpgrade python-libipa_hbacUpgrade sssd-ad-debuginfoUpgrade libipa_hbacUpgrade libsss_simpleifpUpgrade python3-libipa_hbac-debuginfoUpgrade sssd-libwbclient-debuginfoUpgrade sssd-dbus-debuginfoUpgrade libsss_idmapUpgrade sssd-debuginfoUpgrade sssd-common-pac-debuginfoUpgrade sssd-commonUpgrade sssd-krb5-common-debuginfoUpgrade sssd-common-debuginfo | Aug 28, 2019 | Mar 25, 2019 |
| Debian | — | Upgrade sssd | May 31, 2023 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-libsss_nss_idmapUpgrade libsss_idmapUpgrade sssdUpgrade libsss_simpleifpUpgrade sssd-proxyUpgrade sssd-ipaUpgrade python-sssdconfigUpgrade sssd-toolsUpgrade sssd-adUpgrade libsss_sudoUpgrade sssd-krb5-commonUpgrade sssd-ldapUpgrade python-sss-murmurUpgrade python-libipa_hbacUpgrade libipa_hbacUpgrade libsss_autofsUpgrade sssd-libwbclientUpgrade sssd-commonUpgrade sssd-clientUpgrade sssd-common-pacUpgrade libsss_certmapUpgrade sssd-dbusUpgrade libsss_nss_idmapUpgrade python-sssUpgrade sssd-krb5 | Dec 4, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sssd-proxyUpgrade libsss_idmapUpgrade libsss_autofsUpgrade sssd-libwbclientUpgrade sssdUpgrade sssd-commonUpgrade libsss_simpleifpUpgrade libsss_nss_idmapUpgrade python-libipa_hbacUpgrade sssd-clientUpgrade sssd-ldapUpgrade sssd-krb5Upgrade sssd-toolsUpgrade sssd-krb5-commonUpgrade sssd-common-pacUpgrade sssd-adUpgrade python-sssUpgrade libsss_sudoUpgrade libipa_hbacUpgrade sssd-dbusUpgrade libsss_certmapUpgrade python-libsss_nss_idmapUpgrade python-sss-murmurUpgrade sssd-ipaUpgrade python-sssdconfig | Dec 18, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-libipa_hbacUpgrade sssd-commonUpgrade libsss_sudoUpgrade python-sssdconfigUpgrade libipa_hbacUpgrade sssd-ipaUpgrade libsss_idmapUpgrade sssd-proxyUpgrade sssd-adUpgrade libsss_simpleifpUpgrade python-sss-murmurUpgrade python-libsss_nss_idmapUpgrade sssd-krb5-commonUpgrade libsss_nss_idmapUpgrade python-sssUpgrade sssd-clientUpgrade libsss_autofsUpgrade libsss_certmapUpgrade sssd-ldapUpgrade sssd-krb5Upgrade sssdUpgrade sssd-dbusUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade sssd-common-pac | Nov 19, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade python3-sssUpgrade libsss_nss_idmap-develUpgrade libsss_autofsUpgrade libsss_certmap-develUpgrade libipa_hbac-develUpgrade libsss_certmapUpgrade libipa_hbacUpgrade libsss_simpleifp-develUpgrade python3-sssdconfigUpgrade sssd-ldapUpgrade sssd-commonUpgrade sssd-krb5Upgrade sssd-libwbclientUpgrade sssd-clientUpgrade python-sss-murmurUpgrade sssd-dbusUpgrade sssd-krb5-commonUpgrade sssd-kcmUpgrade python-libipa_hbacUpgrade python-libsss_nss_idmapUpgrade sssd-polkit-rulesUpgrade sssd-libwbclient-develUpgrade sssd-common-pacUpgrade python3-sss-murmurUpgrade python-sssUpgrade libsss_sudoUpgrade sssd-toolsUpgrade python3-libsss_nss_idmapUpgrade python3-libipa_hbacUpgrade libsss_nss_idmapUpgrade sssd-winbind-idmapUpgrade sssd-proxyUpgrade libsss_simpleifpUpgrade libsss_idmap-develUpgrade sssd-adUpgrade libsss_idmapUpgrade sssdUpgrade python-sssdconfigUpgrade sssd-ipaUpgrade sssd-nfs-idmap | Jul 21, 2020 | Feb 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 25, 2019 |
| Redhat_linux | — | Upgrade libipa_hbacUpgrade sssd-ipa-debuginfoUpgrade libsss_simpleifp-debuginfoUpgrade sssd-krb5-common-debuginfoUpgrade python-sss-murmurUpgrade python3-sss-murmurUpgrade sssd-libwbclient-develUpgrade sssd-client-debuginfoUpgrade libsss_nss_idmap-develUpgrade sssd-kcmUpgrade python3-libipa_hbacUpgrade sssd-dbus-debuginfoUpgrade sssd-krb5-commonUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade python3-sss-debuginfoUpgrade sssd-common-pac-debuginfoUpgrade python-sssdconfigUpgrade sssd-krb5-debuginfoUpgrade sssd-dbusUpgrade libsss_simpleifp-develUpgrade sssd-toolsUpgrade libsss_idmap-debuginfoUpgrade python-libsss_nss_idmapUpgrade sssd-nfs-idmap-debuginfoUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssd-common-pacUpgrade libsss_idmapUpgrade python3-sssUpgrade sssd-libwbclientUpgrade sssd-ldapUpgrade python3-sssdconfigUpgrade sssd-debuginfoUpgrade libsss_sudoUpgrade sssd-kcm-debuginfoUpgrade libipa_hbac-develUpgrade python3-sss-murmur-debuginfoUpgrade sssd-libwbclient-debuginfoUpgrade sssd-winbind-idmapUpgrade libsss_idmap-develUpgrade libsss_autofsUpgrade sssd-winbind-idmap-debuginfoUpgrade libsss_certmap-debuginfoUpgrade sssd-ipaUpgrade sssd-ad-debuginfoUpgrade sssd-clientUpgrade libsss_nss_idmapUpgrade sssd-proxyUpgrade libsss_sudo-debuginfoUpgrade sssd-tools-debuginfoUpgrade sssd-nfs-idmapUpgrade python-sssUpgrade python3-libipa_hbac-debuginfoUpgrade libsss_certmap-develUpgrade sssd-debugsourceUpgrade libipa_hbac-debuginfoUpgrade sssd-krb5Upgrade libsss_certmapUpgrade libsss_simpleifpUpgrade sssd-common-debuginfoUpgrade sssd-polkit-rulesUpgrade libsss_nss_idmap-debuginfoUpgrade sssd-ldap-debuginfoUpgrade sssd-proxy-debuginfoUpgrade libsss_autofs-debuginfoUpgrade python3-libsss_nss_idmapUpgrade sssd-adUpgrade sssd | Aug 7, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libipa_hbac-develUpgrade sssd-ldapUpgrade sssd-krb5-commonUpgrade libsss_idmap-develUpgrade sssdUpgrade libsss_sudoUpgrade python3-sssd-configUpgrade libsss_idmap0Upgrade sssd-adUpgrade libnfsidmap-sssUpgrade sssd-wbclientUpgrade libsss_nss_idmap-develUpgrade libsss_certmap-develUpgrade sssd-32bitUpgrade sssd-wbclient-develUpgrade libsss_simpleifp-develUpgrade sssd-ipaUpgrade sssd-commonUpgrade libipa_hbac0Upgrade sssd-winbind-idmapUpgrade sssd-toolsUpgrade sssd-proxyUpgrade libsss_certmap0Upgrade python-sssd-configUpgrade libsss_nss_idmap0Upgrade python3-sss-murmurUpgrade sssd-dbusUpgrade python3-sss_nss_idmapUpgrade sssd-krb5Upgrade libsss_simpleifp0Upgrade python3-ipa_hbac | Jun 12, 2019 | Mar 25, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Mar 25, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub