Linux · Security advisory · May 7, 2024

ELSA-2024-2571: Security update for 31 packages

ELSA-2024-2571, released May 7, 2024, fixes 1 CVE across 31 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0104
64th percentile

Fixed package versions

ProductReleaseFixed in
libipa_hbacol 90:2.9.4-6.0.1.el9_4
libsss_autofsol 90:2.9.4-6.0.1.el9_4
libsss_certmapol 90:2.9.4-6.0.1.el9_4
libsss_idmapol 90:2.9.4-6.0.1.el9_4
libsss_nss_idmapol 90:2.9.4-6.0.1.el9_4
libsss_nss_idmap-develol 90:2.9.4-6.0.1.el9_4
libsss_simpleifpol 90:2.9.4-6.0.1.el9_4
libsss_sudool 90:2.9.4-6.0.1.el9_4
python3-libipa_hbacol 90:2.9.4-6.0.1.el9_4
python3-libsss_nss_idmapol 90:2.9.4-6.0.1.el9_4
python3-sssol 90:2.9.4-6.0.1.el9_4
python3-sss-murmurol 90:2.9.4-6.0.1.el9_4
python3-sssdconfigol 90:2.9.4-6.0.1.el9_4
sssdol 90:2.9.4-6.0.1.el9_4
sssd-adol 90:2.9.4-6.0.1.el9_4
sssd-clientol 90:2.9.4-6.0.1.el9_4
sssd-commonol 90:2.9.4-6.0.1.el9_4
sssd-common-pacol 90:2.9.4-6.0.1.el9_4
sssd-dbusol 90:2.9.4-6.0.1.el9_4
sssd-idpol 90:2.9.4-6.0.1.el9_4
sssd-ipaol 90:2.9.4-6.0.1.el9_4
sssd-kcmol 90:2.9.4-6.0.1.el9_4
sssd-krb5ol 90:2.9.4-6.0.1.el9_4
sssd-krb5-commonol 90:2.9.4-6.0.1.el9_4
sssd-ldapol 90:2.9.4-6.0.1.el9_4
sssd-nfs-idmapol 90:2.9.4-6.0.1.el9_4
sssd-passkeyol 90:2.9.4-6.0.1.el9_4
sssd-polkit-rulesol 90:2.9.4-6.0.1.el9_4
sssd-proxyol 90:2.9.4-6.0.1.el9_4
sssd-toolsol 90:2.9.4-6.0.1.el9_4
sssd-winbind-idmapol 90:2.9.4-6.0.1.el9_4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-3758 sssd: This update for sssd fixes the following issues: - CVE-2023-3758: Fixed race condition during authorization leads to... 7.1 0.0104 None reported
Showing 1 to 1 of 1 1