SUSE-SU-2023:0292-1

UNKNOWN

Security update for sssd

Published Feb 7, 2023

Modified 3 years ago

Fix available

Details

This update for sssd fixes the following issues:

CVE-2022-4254: Fixed a bug in libsss_certmap which could allow an attacker to gain control of the admin account and perform a full domain takeover. (bsc#1207474)

Affected Packages(24 packages)

libipa_hbac-devel

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.16.1-150000.8.70.1

libipa_hbac0

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.16.1-150000.8.70.1

libsss_certmap-devel

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.16.1-150000.8.70.1

libsss_certmap0

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.16.1-150000.8.70.1

libsss_idmap-devel

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.16.1-150000.8.70.1

libsss_idmap0

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.16.1-150000.8.70.1

libsss_nss_idmap-devel

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.16.1-150000.8.70.1

libsss_nss_idmap0

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.16.1-150000.8.70.1

libsss_simpleifp-devel

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.16.1-150000.8.70.1

libsss_simpleifp0

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.16.1-150000.8.70.1

References

REPORT

https://bugzilla.suse.com/1207474

WEB

https://www.suse.com/security/cve/CVE-2022-4254

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20230292-1/

Upstream

CVE-2022-4254

Ecosystems

SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP1

Timeline

PublishedFeb 7, 2023

ModifiedFeb 7, 2023

SUSE-SU-2023:0292-1 | Mondoo Vulnerability Intelligence