Oval Definition:oval:com.redhat.rhsa:def:20213151
Revision Date:2021-08-16Version:635
Title:RHSA-2021:3151: sssd security update (Important)
Description:The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: shell command injection in sssctl (CVE-2021-3621)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2021-3621
    RHSA-2021:3151
    Platform(s):Red Hat Enterprise Linux 8
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 8 is installed
  • OR Red Hat CoreOS 4 is installed
  • AND
  • libipa_hbac is earlier than 0:2.4.0-9.el8_4.2
  • AND libipa_hbac is signed with Red Hat redhatrelease2 key
  • libsss_autofs is earlier than 0:2.4.0-9.el8_4.2
  • AND libsss_autofs is signed with Red Hat redhatrelease2 key
  • libsss_certmap is earlier than 0:2.4.0-9.el8_4.2
  • AND libsss_certmap is signed with Red Hat redhatrelease2 key
  • libsss_idmap is earlier than 0:2.4.0-9.el8_4.2
  • AND libsss_idmap is signed with Red Hat redhatrelease2 key
  • libsss_nss_idmap is earlier than 0:2.4.0-9.el8_4.2
  • AND libsss_nss_idmap is signed with Red Hat redhatrelease2 key
  • libsss_nss_idmap-devel is earlier than 0:2.4.0-9.el8_4.2
  • AND libsss_nss_idmap-devel is signed with Red Hat redhatrelease2 key
  • libsss_simpleifp is earlier than 0:2.4.0-9.el8_4.2
  • AND libsss_simpleifp is signed with Red Hat redhatrelease2 key
  • libsss_sudo is earlier than 0:2.4.0-9.el8_4.2
  • AND libsss_sudo is signed with Red Hat redhatrelease2 key
  • python3-libipa_hbac is earlier than 0:2.4.0-9.el8_4.2
  • AND python3-libipa_hbac is signed with Red Hat redhatrelease2 key
  • python3-libsss_nss_idmap is earlier than 0:2.4.0-9.el8_4.2
  • AND python3-libsss_nss_idmap is signed with Red Hat redhatrelease2 key
  • python3-sss is earlier than 0:2.4.0-9.el8_4.2
  • AND python3-sss is signed with Red Hat redhatrelease2 key
  • python3-sss-murmur is earlier than 0:2.4.0-9.el8_4.2
  • AND python3-sss-murmur is signed with Red Hat redhatrelease2 key
  • python3-sssdconfig is earlier than 0:2.4.0-9.el8_4.2
  • AND python3-sssdconfig is signed with Red Hat redhatrelease2 key
  • sssd is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd is signed with Red Hat redhatrelease2 key
  • sssd-ad is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-ad is signed with Red Hat redhatrelease2 key
  • sssd-client is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-client is signed with Red Hat redhatrelease2 key
  • sssd-common is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-common is signed with Red Hat redhatrelease2 key
  • sssd-common-pac is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-common-pac is signed with Red Hat redhatrelease2 key
  • sssd-dbus is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-dbus is signed with Red Hat redhatrelease2 key
  • sssd-ipa is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-ipa is signed with Red Hat redhatrelease2 key
  • sssd-kcm is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-kcm is signed with Red Hat redhatrelease2 key
  • sssd-krb5 is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-krb5 is signed with Red Hat redhatrelease2 key
  • sssd-krb5-common is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-krb5-common is signed with Red Hat redhatrelease2 key
  • sssd-ldap is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-ldap is signed with Red Hat redhatrelease2 key
  • sssd-libwbclient is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-libwbclient is signed with Red Hat redhatrelease2 key
  • sssd-nfs-idmap is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-nfs-idmap is signed with Red Hat redhatrelease2 key
  • sssd-polkit-rules is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-polkit-rules is signed with Red Hat redhatrelease2 key
  • sssd-proxy is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-proxy is signed with Red Hat redhatrelease2 key
  • sssd-tools is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-tools is signed with Red Hat redhatrelease2 key
  • sssd-winbind-idmap is earlier than 0:2.4.0-9.el8_4.2
  • AND sssd-winbind-idmap is signed with Red Hat redhatrelease2 key
  • BACK