RHBA-2023:7127 - Bug Fix Advisory

Topic

An update for sssd is now available for Red Hat Enterprise Linux 8.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat CodeReady Linux Builder for x86_64 8 x86_64
• Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
• Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
• Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x

Fixes

• BZ - 2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
• BZ - 2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
• BZ - 2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
• BZ - 2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
• BZ - 2143925 - kinit switches KCM away from the newly issued ticket
• BZ - 2149241 - [sssd] SSSD enters failed state after heavy load in the system
• BZ - 2151403 - AD user is not found on IPA client after upgrading to RHEL8.7
• BZ - 2164805 - man page entry should make clear that a nested group needs a name
• BZ - 2167836 - Rebase SSSD for RHEL 8.9
• BZ - 2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable")
• BZ - 2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
• BZ - 2180981 - sss allows extraneous @ characters prefixed to username #
• BZ - 2189583 - [sssd] RHEL 8.9 Tier 0 Localization
• BZ - 2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
• BZ - 2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
• BZ - 2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index