Oracle Linux Security Advisory ELSA-2024-2571

http://linux.oracle.com/errata/ELSA-2024-2571.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
libipa_hbac-2.9.4-6.0.1.el9_4.i686.rpm
libipa_hbac-2.9.4-6.0.1.el9_4.x86_64.rpm
libsss_autofs-2.9.4-6.0.1.el9_4.x86_64.rpm
libsss_certmap-2.9.4-6.0.1.el9_4.i686.rpm
libsss_certmap-2.9.4-6.0.1.el9_4.x86_64.rpm
libsss_idmap-2.9.4-6.0.1.el9_4.i686.rpm
libsss_idmap-2.9.4-6.0.1.el9_4.x86_64.rpm
libsss_nss_idmap-2.9.4-6.0.1.el9_4.i686.rpm
libsss_nss_idmap-2.9.4-6.0.1.el9_4.x86_64.rpm
libsss_simpleifp-2.9.4-6.0.1.el9_4.i686.rpm
libsss_simpleifp-2.9.4-6.0.1.el9_4.x86_64.rpm
libsss_sudo-2.9.4-6.0.1.el9_4.x86_64.rpm
python3-libipa_hbac-2.9.4-6.0.1.el9_4.x86_64.rpm
python3-libsss_nss_idmap-2.9.4-6.0.1.el9_4.x86_64.rpm
libsss_nss_idmap-devel-2.9.4-6.0.1.el9_4.i686.rpm
libsss_nss_idmap-devel-2.9.4-6.0.1.el9_4.x86_64.rpm
python3-sss-2.9.4-6.0.1.el9_4.x86_64.rpm
python3-sssdconfig-2.9.4-6.0.1.el9_4.noarch.rpm
python3-sss-murmur-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-ad-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-client-2.9.4-6.0.1.el9_4.i686.rpm
sssd-client-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-common-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-common-pac-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-dbus-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-idp-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-ipa-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-kcm-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-krb5-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-krb5-common-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-ldap-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-nfs-idmap-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-passkey-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-polkit-rules-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-proxy-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-tools-2.9.4-6.0.1.el9_4.x86_64.rpm
sssd-winbind-idmap-2.9.4-6.0.1.el9_4.x86_64.rpm

aarch64:
libipa_hbac-2.9.4-6.0.1.el9_4.aarch64.rpm
libsss_autofs-2.9.4-6.0.1.el9_4.aarch64.rpm
libsss_certmap-2.9.4-6.0.1.el9_4.aarch64.rpm
libsss_idmap-2.9.4-6.0.1.el9_4.aarch64.rpm
libsss_nss_idmap-2.9.4-6.0.1.el9_4.aarch64.rpm
libsss_nss_idmap-devel-2.9.4-6.0.1.el9_4.aarch64.rpm
libsss_simpleifp-2.9.4-6.0.1.el9_4.aarch64.rpm
libsss_sudo-2.9.4-6.0.1.el9_4.aarch64.rpm
python3-libipa_hbac-2.9.4-6.0.1.el9_4.aarch64.rpm
python3-libsss_nss_idmap-2.9.4-6.0.1.el9_4.aarch64.rpm
python3-sss-2.9.4-6.0.1.el9_4.aarch64.rpm
python3-sssdconfig-2.9.4-6.0.1.el9_4.noarch.rpm
python3-sss-murmur-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-ad-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-client-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-common-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-common-pac-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-dbus-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-ipa-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-idp-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-kcm-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-krb5-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-krb5-common-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-ldap-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-nfs-idmap-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-passkey-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-polkit-rules-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-proxy-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-tools-2.9.4-6.0.1.el9_4.aarch64.rpm
sssd-winbind-idmap-2.9.4-6.0.1.el9_4.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//sssd-2.9.4-6.0.1.el9_4.src.rpm

Related CVEs:

CVE-2023-3758




Description of changes:

[2.9.4-6.0.1]
- Restore default debug level for sss_cache [Orabug: 32810448]

[2.9.4-6]
- Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]

[2.9.4-5]
- Resolves: RHEL-28161 - Passkey cannot fall back to password

[2.9.4-4]
- Resolves: RHEL-28161 - Passkey cannot fall back to password

[2.9.4-3]
- Resolves: RHEL-22340 - socket leak
- Resolves: RHEL-28161 - Passkey cannot fall back to password


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata

Oracle9: ELSA-2024-2571: sssd Moderate Security Advisory Updates

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[2.9.4-6.0.1] - Restore default debug level for sss_cache [Orabug: 32810448] [2.9.4-6] - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0] [2.9.4-5] - Resolves: RHEL-28161 - Passkey cannot fall back to password [2.9.4-4] - Resolves: RHEL-28161 - Passkey cannot fall back to password [2.9.4-3] - Resolves: RHEL-22340 - socket leak - Resolves: RHEL-28161 - Passkey cannot fall back to password

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates//sssd-2.9.4-6.0.1.el9_4.src.rpm

x86_64

libipa_hbac-2.9.4-6.0.1.el9_4.i686.rpm libipa_hbac-2.9.4-6.0.1.el9_4.x86_64.rpm libsss_autofs-2.9.4-6.0.1.el9_4.x86_64.rpm libsss_certmap-2.9.4-6.0.1.el9_4.i686.rpm libsss_certmap-2.9.4-6.0.1.el9_4.x86_64.rpm libsss_idmap-2.9.4-6.0.1.el9_4.i686.rpm libsss_idmap-2.9.4-6.0.1.el9_4.x86_64.rpm libsss_nss_idmap-2.9.4-6.0.1.el9_4.i686.rpm libsss_nss_idmap-2.9.4-6.0.1.el9_4.x86_64.rpm libsss_simpleifp-2.9.4-6.0.1.el9_4.i686.rpm libsss_simpleifp-2.9.4-6.0.1.el9_4.x86_64.rpm libsss_sudo-2.9.4-6.0.1.el9_4.x86_64.rpm python3-libipa_hbac-2.9.4-6.0.1.el9_4.x86_64.rpm python3-libsss_nss_idmap-2.9.4-6.0.1.el9_4.x86_64.rpm libsss_nss_idmap-devel-2.9.4-6.0.1.el9_4.i686.rpm libsss_nss_idmap-devel-2.9.4-6.0.1.el9_4.x86_64.rpm python3-sss-2.9.4-6.0.1.el9_4.x86_64.rpm python3-sssdconfig-2.9.4-6.0.1.el9_4.noarch.rpm python3-sss-murmur-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-ad-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-client-2.9.4-6.0.1.el9_4.i686.rpm sssd-client-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-common-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-common-pac-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-dbus-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-idp-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-ipa-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-kcm-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-krb5-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-krb5-common-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-ldap-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-nfs-idmap-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-passkey-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-polkit-rules-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-proxy-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-tools-2.9.4-6.0.1.el9_4.x86_64.rpm sssd-winbind-idmap-2.9.4-6.0.1.el9_4.x86_64.rpm

aarch64

libipa_hbac-2.9.4-6.0.1.el9_4.aarch64.rpm libsss_autofs-2.9.4-6.0.1.el9_4.aarch64.rpm libsss_certmap-2.9.4-6.0.1.el9_4.aarch64.rpm libsss_idmap-2.9.4-6.0.1.el9_4.aarch64.rpm libsss_nss_idmap-2.9.4-6.0.1.el9_4.aarch64.rpm libsss_nss_idmap-devel-2.9.4-6.0.1.el9_4.aarch64.rpm libsss_simpleifp-2.9.4-6.0.1.el9_4.aarch64.rpm libsss_sudo-2.9.4-6.0.1.el9_4.aarch64.rpm python3-libipa_hbac-2.9.4-6.0.1.el9_4.aarch64.rpm python3-libsss_nss_idmap-2.9.4-6.0.1.el9_4.aarch64.rpm python3-sss-2.9.4-6.0.1.el9_4.aarch64.rpm python3-sssdconfig-2.9.4-6.0.1.el9_4.noarch.rpm python3-sss-murmur-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-ad-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-client-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-common-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-common-pac-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-dbus-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-ipa-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-idp-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-kcm-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-krb5-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-krb5-common-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-ldap-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-nfs-idmap-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-passkey-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-polkit-rules-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-proxy-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-tools-2.9.4-6.0.1.el9_4.aarch64.rpm sssd-winbind-idmap-2.9.4-6.0.1.el9_4.aarch64.rpm

i386

Severity
Related CVEs: CVE-2023-3758

Related News

11.Locks IsometricPattern Esm H320
2 - 3 min read
The Kinsing hacker group, or H2Miner, has been orchestrating illicit cryptocurrency mining campaigns since 2019 and poses a persistent security
32.Lock Code Circular Esm H320
2 - 3 min read
The Kimsuky APT group, reportedly linked to North Korea's Reconnaissance General Bureau (RGB), has been identified deploying a Linux version of its
4.Lock AbstractDigital Esm H320
2 - 3 min read
Recent research sheds light on the security vulnerabilities prevalent in Linux vendor kernels due to flawed engineering processes that backport
28.Lock Globe Esm H320
1 - 2 min read
The intersection of Linux and quantum computing has become increasingly apparent, emphasizing the importance of Linux-based operating systems in
6.EmailConnection Touch Esm H320
2 - 3 min read
Recent security updates for Ubuntu and Debian have been released to address vulnerabilities in Thunderbird, the popular open-source mail and
30.Lock Globe Motherboard Esm H320
1 - 2 min read
As cybersecurity practitioners, we are no strangers to the constant threat of malicious actors and the importance of remaining vigilant to protect
22.Lock ScreenEffect Esm H320
1 - 2 min read
EndeavorOS Gemini is a captivating and charming desktop operating system based on Arch Linux. The new release includes a kernel upgrade, 3D graphics
25.@Sign Hook Keyboard Esm H320
1 min read
Cyber risk is increasing for individuals and organizations, making flexible and robust solutions for identifying spam and malware increasingly

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved