[Bug 2275905] New: TRIAGE CVE-2023-3758 sssd: Race condition during authorization leads to GPO policies functioning inconsistently [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
Bug ID: 2275905 Summary: TRIAGE CVE-2023-3758 sssd: Race condition during authorization leads to GPO policies functioning inconsistently [fedora-all] Product: Fedora Version: 39 Status: NEW Component: sssd Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: sssd-maintainers@lists.fedoraproject.org Reporter: askrabec@redhat.com QA Contact: extras-qa@fedoraproject.org CC: abokovoy@redhat.com, atikhono@redhat.com, lslebodn@redhat.com, mzidek@redhat.com, pbrezina@redhat.com, sbose@redhat.com, ssorce@redhat.com, sssd-maintainers@lists.fedoraproject.org Target Milestone: --- Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2223762
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
--- Comment #1 from Anten Skrabec askrabec@redhat.com --- Use the following template to for the 'fedpkg update' request to submit an update for this issue as it contains the top-level parent bug(s) as well as this tracking bug. This will ensure that all associated bugs get updated when new packages are pushed to stable.
=====
# bugfix, security, enhancement, newpackage (required) type=security
# low, medium, high, urgent (required) severity=medium
# testing, stable request=testing
# Bug numbers: 1234,9876 bugs=2223762,2275905
# Description of your update notes=Security fix for [PUT CVEs HERE]
# Enable request automation based on the stable/unstable karma thresholds autokarma=True stable_karma=3 unstable_karma=-3
# Automatically close bugs when this marked as stable close_bugs=True
# Suggest that users restart after update suggest_reboot=False
======
Additionally, you may opt to use the bodhi web interface to submit updates:
https://bodhi.fedoraproject.org/updates/new
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
Anten Skrabec askrabec@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |2223762 (CVE-2023-3758)
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2223762 [Bug 2223762] CVE-2023-3758 sssd: Race condition during authorization leads to GPO policies functioning inconsistently
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
Alexey Tikhonov atikhono@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |POST
--- Comment #2 from Alexey Tikhonov atikhono@redhat.com --- Pushed PR: https://github.com/SSSD/sssd/pull/7302
`master` * d7db7971682da2dbf7642ac94940d6b0577ec35a - ad-gpo: use hash to store intermediate results
`sssd-2-8` * f4ebe1408e0bc67abfbfb5f0ca2ea13803b36726 - ad-gpo: use hash to store intermediate results
`sssd-2-9` * e1bfbc2493c4194988acc3b2413df3dde0735ae3 - ad-gpo: use hash to store intermediate results
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
Fedora Update System updates@fedoraproject.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|POST |MODIFIED
--- Comment #3 from Fedora Update System updates@fedoraproject.org --- FEDORA-2024-44602bead8 (sssd-2.9.4-2.fc38) has been submitted as an update to Fedora 38. https://bodhi.fedoraproject.org/updates/FEDORA-2024-44602bead8
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
--- Comment #4 from Fedora Update System updates@fedoraproject.org --- FEDORA-2024-78240de990 (sssd-2.9.4-2.fc39) has been submitted as an update to Fedora 39. https://bodhi.fedoraproject.org/updates/FEDORA-2024-78240de990
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
--- Comment #5 from Fedora Update System updates@fedoraproject.org --- FEDORA-2024-3798818c82 (sssd-2.9.4-7.fc40) has been submitted as an update to Fedora 40. https://bodhi.fedoraproject.org/updates/FEDORA-2024-3798818c82
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
--- Comment #6 from Fedora Update System updates@fedoraproject.org --- FEDORA-2024-4e850a0f86 (sssd-2.9.4-7.fc41) has been submitted as an update to Fedora 41. https://bodhi.fedoraproject.org/updates/FEDORA-2024-4e850a0f86
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
Fedora Update System updates@fedoraproject.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Fixed In Version| |sssd-2.9.4-7.fc41 Resolution|--- |ERRATA Status|MODIFIED |CLOSED Last Closed| |2024-04-22 10:24:14
--- Comment #7 from Fedora Update System updates@fedoraproject.org --- FEDORA-2024-4e850a0f86 (sssd-2.9.4-7.fc41) has been pushed to the Fedora 41 stable repository. If problem still persists, please make note of it in this bug report.
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
--- Comment #8 from Fedora Update System updates@fedoraproject.org --- FEDORA-2024-78240de990 has been pushed to the Fedora 39 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-78240de990` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-78240de990
See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
--- Comment #9 from Fedora Update System updates@fedoraproject.org --- FEDORA-2024-44602bead8 has been pushed to the Fedora 38 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-44602bead8` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-44602bead8
See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
--- Comment #10 from Fedora Update System updates@fedoraproject.org --- FEDORA-2024-3798818c82 has been pushed to the Fedora 40 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-3798818c82` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-3798818c82
See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
--- Comment #11 from Fedora Update System updates@fedoraproject.org --- FEDORA-2024-3798818c82 (sssd-2.9.4-7.fc40) has been pushed to the Fedora 40 stable repository. If problem still persists, please make note of it in this bug report.
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
Fedora Update System updates@fedoraproject.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Fixed In Version|sssd-2.9.4-7.fc41 |sssd-2.9.4-7.fc41 | |sssd-2.9.4-2.fc39
--- Comment #12 from Fedora Update System updates@fedoraproject.org --- FEDORA-2024-78240de990 (sssd-2.9.4-2.fc39) has been pushed to the Fedora 39 stable repository. If problem still persists, please make note of it in this bug report.
https://bugzilla.redhat.com/show_bug.cgi?id=2275905
--- Comment #13 from Fedora Update System updates@fedoraproject.org --- FEDORA-2024-44602bead8 (sssd-2.9.4-2.fc38) has been pushed to the Fedora 38 stable repository. If problem still persists, please make note of it in this bug report.
sssd-maintainers@lists.fedoraproject.org
-
bugzilla＠redhat.com