ALBA-2021:5228 sssd bug fix and enhancement update
SSSD update fixes functional bugs in name lookups, autofs delays, and domain handling, with no explicit security vulnerability described.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- Available
What is ALBA-2021:5228?
ALBA-2021:5228 is a vulnerability in libsss_nss_idmap-devel, published on 21 Dec 2021.
Official description
The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.
Bug Fix(es) and Enhancement(s):
Lookup with fully-qualified name does not work with 'cache_first = True' (BZ#2013379)
autofs lookups for unknown mounts are delayed for 50s (BZ#2016923)
2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) (BZ#2018440)
Make backtrace less "chatty" (avoid duplicate backtraces) (BZ#2021499)
pam responder does not call initgroups to refresh the user entry (BZ#2028828)
Which versions are affected by ALBA-2021:5228?
Linux distribution packages (1)
libsss_nss_idmap-devel AlmaLinux:8 | All versions | 2.5.2-2.el8_5.3 |
How do I fix ALBA-2021:5228?
Apply the vendor's patch.
Is ALBA-2021:5228 being exploited?
There is no known exploitation of ALBA-2021:5228 in the wild and no public exploit code.