Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Ubuntu 20.04 LTS USN-6156-2: SSSD Authentication Issue Resolved

ubuntu
Calendar Grey June 16, 2023
Dist Ubuntu Esm H88
Ubuntu 20.04 LTS encounters SSSD regression, rectified via security advisory USN-6156-2, enhancing user authentication protocols.
USN-6156-1 introduced a regression in SSSD.

Summary

USN-6156-1 introduced a regression in SSSD.

Software Description:

- sssd: System Security Services Daemon

Details:

USN-6156-1 fixed a vulnerability in SSSD. In certain environments, not all

packages ended up being upgraded at the same time, resulting in

authentication failures when the PAM module was being used.

This update fixes the problem. We apologize for the inconvenience.

Original advisory details:

It was discovered that SSSD incorrrectly sanitized certificate data used in

LDAP filters. When using this issue in combination with FreeIPA, a remote

attacker could possibly use this issue to escalate privileges.

Topics%20covered

Topics Covered

security advisory remote attack authentication issue update instructions ubuntu sssd sssd regression

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
   sssd                            2.2.3-3ubuntu0.12

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6156-2

https://ubuntu.com/security/notices/USN-6156-1

https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/2023598

Severity
important
Lowest
Low
Medium
High
Critical

June 16, 2023

Topics%20covered

Topics Covered

security advisory remote attack authentication issue update instructions ubuntu sssd sssd regression

Package Information

https://launchpad.net/ubuntu/+source/sssd/2.2.3-3ubuntu0.12

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.