Stay Secure with the Latest Linux Advisories

security advisoryauthentication fixLDAP issue

Oracle Linux 7 ELSA-2023-0412: Critical SSSD Security Update

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2023-0403 https://linux.oracle.com/errata/ELSA-2023-0403.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable LinuxNetwork: x86_64: libipa_hbac-1.16.5-10.0.3.el7_9.15.i686.rpm libipa_hbac-1.16.5-10.0.3.el7_9.15.x86_64.rpm libipa_hbac-devel-1.16.5-10.0.3.el7_9.15.i686.rpm libipa_hbac-devel-1.16.5-10.0.3.el7_9.15.x86_64.rpm libsss_autofs-1.16.5-10.0.3.el7_9.15.x86_64.rpm libsss_certmap-1.16.5-10.0.3.el7_9.15.i686.rpm libsss_certmap-1.16.5-10.0.3.el7_9.15.x86_64.rpm libsss_certmap-devel-1.16.5-10.0.3.el7_9.15.i686.rpm libsss_certmap-devel-1.16.5-10.0.3.el7_9.15.x86_64.rpm libsss_idmap-1.16.5-10.0.3.el7_9.15.i686.rpm libsss_idmap-1.16.5-10.0.3.el7_9.15.x86_64.rpm libsss_idmap-devel-1.16.5-10.0.3.el7_9.15.i686.rpm libsss_idmap-devel-1.16.5-10.0.3.el7_9.15.x86_64.rpm libsss_nss_idmap-1.16.5-10.0.3.el7_9.15.i686.rpm libsss_nss_idmap-1.16.5-10.0.3.el7_9.15.x86_64.rpm libsss_nss_idmap-devel-1.16.5-10.0.3.el7_9.15.i686.rpm libsss_nss_idmap-devel-1.16.5-10.0.3.el7_9.15.x86_64.rpm libsss_simpleifp-1.16.5-10.0.3.el7_9.15.i686.rpm libsss_simpleifp-1.16.5-10.0.3.el7_9.15.x86_64.rpm libsss_simpleifp-devel-1.16.5-10.0.3.el7_9.15.i686.rpm libsss_simpleifp-devel-1.16.5-10.0.3.el7_9.15.x86_64.rpm libsss_sudo-1.16.5-10.0.3.el7_9.15.x86_64.rpm python-libipa_hbac-1.16.5-10.0.3.el7_9.15.x86_64.rpm python-libsss_nss_idmap-1.16.5-10.0.3.el7_9.15.x86_64.rpm python-sss-1.16.5-10.0.3.el7_9.15.x86_64.rpm python-sss-murmur-1.16.5-10.0.3.el7_9.15.x86_64.rpm python-sssdconfig-1.16.5-10.0.3.el7_9.15.noarch.rpm sssd-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-ad-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-client-1.16.5-10.0.3.el7_9.15.i686.rpm sssd-client-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-common-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-common-pac-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-dbus-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-ipa-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-kcm-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-krb5-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-krb5-common-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-ldap-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-libwbclient-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-libwbclient-devel-1.16.5-10.0.3.el7_9.15.i686.rpm sssd-libwbclient-devel-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-polkit-rules-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-proxy-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-tools-1.16.5-10.0.3.el7_9.15.x86_64.rpm sssd-winbind-idmap-1.16.5-10.0.3.el7_9.15.x86_64.rpm SRPMS: https://oss.oracle.com:443/ol7/SRPMS-updates//sssd-1.16.5-10.0.3.el7_9.15.src.rpm Related CVEs: CVE-2022-4254 Description of changes: [1.16.5-10.0.3] - Revert Redhat's change of disallowing duplicated incomplete gid when "id_provider=ldap" is used, which caused regression in AD environment. [Orabug: 29286774] [Doc ID 2605732.1] [1.16.5-10.15] - Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Crucial announcement for Oracle Linux addressing LDAP complications and security flaws in certificate management. Update to the latest RPM packages immediately.. Oracle Linux Update, SSSD Security Fix, RPM Package Updates. . Severity: Critical. LinuxSecurity.com Team

Jan 24, 2023 •Critical Oracle