Security update for sssd SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:0200-1 Final 1 1 2023-01-27T14:23:59Z current 2023-01-27T14:23:59Z 2023-01-27T14:23:59Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for sssd This update for sssd fixes the following issues: - CVE-2022-4254: Fixed a bug in libsss_certmap which could allow an attacker to gain control of the admin account and perform a full domain takeover. (bsc#1207474) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-200,SUSE-OpenStack-Cloud-9-2023-200,SUSE-OpenStack-Cloud-Crowbar-9-2023-200,SUSE-SLE-SAP-12-SP4-2023-200,SUSE-SLE-SERVER-12-SP4-LTSS-2023-200 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20230200-1/ Link for SUSE-SU-2023:0200-1 https://lists.suse.com/pipermail/sle-security-updates/2023-January/013563.html E-Mail link for SUSE-SU-2023:0200-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1207474 SUSE Bug 1207474 https://www.suse.com/security/cve/CVE-2022-4254/ SUSE CVE CVE-2022-4254 page SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 libipa_hbac-devel-1.16.1-4.43.1 libipa_hbac0-1.16.1-4.43.1 libnfsidmap-sss-1.16.1-4.43.1 libsss_certmap-devel-1.16.1-4.43.1 libsss_certmap0-1.16.1-4.43.1 libsss_idmap-devel-1.16.1-4.43.1 libsss_idmap0-1.16.1-4.43.1 libsss_nss_idmap-devel-1.16.1-4.43.1 libsss_nss_idmap0-1.16.1-4.43.1 libsss_simpleifp-devel-1.16.1-4.43.1 libsss_simpleifp0-1.16.1-4.43.1 python-ipa_hbac-1.16.1-4.43.1 python-sss-murmur-1.16.1-4.43.1 python-sss_nss_idmap-1.16.1-4.43.1 python-sssd-config-1.16.1-4.43.1 sssd-1.16.1-4.43.1 sssd-32bit-1.16.1-4.43.1 sssd-64bit-1.16.1-4.43.1 sssd-ad-1.16.1-4.43.1 sssd-dbus-1.16.1-4.43.1 sssd-ipa-1.16.1-4.43.1 sssd-krb5-1.16.1-4.43.1 sssd-krb5-common-1.16.1-4.43.1 sssd-ldap-1.16.1-4.43.1 sssd-proxy-1.16.1-4.43.1 sssd-tools-1.16.1-4.43.1 libipa_hbac0-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libsss_certmap0-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libsss_idmap-devel-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libsss_idmap0-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libsss_nss_idmap-devel-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libsss_nss_idmap0-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libsss_simpleifp0-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS python-sssd-config-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sssd-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sssd-32bit-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sssd-ad-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sssd-dbus-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sssd-ipa-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sssd-krb5-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sssd-krb5-common-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sssd-ldap-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sssd-proxy-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sssd-tools-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libipa_hbac0-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libsss_certmap0-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libsss_idmap0-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libsss_nss_idmap0-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libsss_simpleifp0-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-sssd-config-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sssd-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sssd-32bit-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sssd-ad-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sssd-dbus-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sssd-ipa-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sssd-krb5-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sssd-krb5-common-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sssd-ldap-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sssd-proxy-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sssd-tools-1.16.1-4.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libipa_hbac0-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 libsss_certmap0-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 libsss_idmap0-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 libsss_nss_idmap0-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 libsss_simpleifp0-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 python-sssd-config-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 sssd-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 sssd-32bit-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 sssd-ad-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 sssd-dbus-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 sssd-ipa-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 sssd-krb5-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 sssd-krb5-common-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 sssd-ldap-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 sssd-proxy-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 sssd-tools-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud 9 libipa_hbac0-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 libsss_certmap0-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 libsss_idmap0-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 libsss_nss_idmap0-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 libsss_simpleifp0-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-sssd-config-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 sssd-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 sssd-32bit-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 sssd-ad-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 sssd-dbus-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 sssd-ipa-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 sssd-krb5-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 sssd-krb5-common-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 sssd-ldap-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 sssd-proxy-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 sssd-tools-1.16.1-4.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters CVE-2022-4254 SUSE Linux Enterprise Server 12 SP4-LTSS:libipa_hbac0-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libsss_certmap0-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libsss_idmap-devel-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libsss_idmap0-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libsss_nss_idmap-devel-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libsss_nss_idmap0-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libsss_simpleifp0-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:python-sssd-config-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sssd-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sssd-32bit-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sssd-ad-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sssd-dbus-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sssd-ipa-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sssd-krb5-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sssd-krb5-common-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sssd-ldap-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sssd-proxy-1.16.1-4.43.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sssd-tools-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libipa_hbac0-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsss_certmap0-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsss_idmap0-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsss_nss_idmap0-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsss_simpleifp0-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-sssd-config-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sssd-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sssd-32bit-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sssd-ad-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sssd-dbus-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sssd-ipa-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sssd-krb5-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sssd-krb5-common-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sssd-ldap-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sssd-proxy-1.16.1-4.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sssd-tools-1.16.1-4.43.1 SUSE OpenStack Cloud 9:libipa_hbac0-1.16.1-4.43.1 SUSE OpenStack Cloud 9:libsss_certmap0-1.16.1-4.43.1 SUSE OpenStack Cloud 9:libsss_idmap0-1.16.1-4.43.1 SUSE OpenStack Cloud 9:libsss_nss_idmap0-1.16.1-4.43.1 SUSE OpenStack Cloud 9:libsss_simpleifp0-1.16.1-4.43.1 SUSE OpenStack Cloud 9:python-sssd-config-1.16.1-4.43.1 SUSE OpenStack Cloud 9:sssd-1.16.1-4.43.1 SUSE OpenStack Cloud 9:sssd-32bit-1.16.1-4.43.1 SUSE OpenStack Cloud 9:sssd-ad-1.16.1-4.43.1 SUSE OpenStack Cloud 9:sssd-dbus-1.16.1-4.43.1 SUSE OpenStack Cloud 9:sssd-ipa-1.16.1-4.43.1 SUSE OpenStack Cloud 9:sssd-krb5-1.16.1-4.43.1 SUSE OpenStack Cloud 9:sssd-krb5-common-1.16.1-4.43.1 SUSE OpenStack Cloud 9:sssd-ldap-1.16.1-4.43.1 SUSE OpenStack Cloud 9:sssd-proxy-1.16.1-4.43.1 SUSE OpenStack Cloud 9:sssd-tools-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:libipa_hbac0-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:libsss_certmap0-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:libsss_idmap0-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:libsss_nss_idmap0-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:libsss_simpleifp0-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:python-sssd-config-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:sssd-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:sssd-32bit-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:sssd-ad-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:sssd-dbus-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:sssd-ipa-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:sssd-krb5-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:sssd-krb5-common-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:sssd-ldap-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:sssd-proxy-1.16.1-4.43.1 SUSE OpenStack Cloud Crowbar 9:sssd-tools-1.16.1-4.43.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230200-1/ https://www.suse.com/security/cve/CVE-2022-4254.html CVE-2022-4254 https://bugzilla.suse.com/1207474 SUSE Bug 1207474