SUSE-RU-2024:0217-1: Recommended update for sssd
This update for sssd fixes the following issues: Only send cldap-ping to our local domain; (bsc#1217319); (gh#SSSD/sssd#5822); Do not write kdc info file for GC lookup; (bsc#1217319); (gh#SSSD/sssd#5956); sssd Unable to obtain cached rules filling up sssdsudo.log; (bsc#1216907);
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/sssd-proxyto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-krb5to a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-debugsourceto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/libnfsidmap-sssto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-ad-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-proxy-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-ldap-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-commonto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-common-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-ipato a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-toolsto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-krb5-common-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-kcmto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/python3-sss-murmur-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-ipa-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-krb5-commonto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/python3-sssd-configto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-winbind-idmapto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssdto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-winbind-idmap-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/python3-sss-murmurto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-kcm-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-krb5-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-dbus-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-ldapto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-dbusto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/libnfsidmap-sss-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-tools-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/python3-sssd-config-debuginfoto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-adto a version that resolves this vulnerability.Fixed in 2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-commonto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-commonto a version that resolves this vulnerability.Fixed in 32bit-2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-commonto a version that resolves this vulnerability.Fixed in 64bit-2.5.2-150400.4.24.1 - Upgrade
Upgrade
suse/sssd-commonto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-2.5.2-150400.4.24.1 - Upgrade
Upgrade
sssdto a version that resolves this vulnerability.Patch SUSE-2024-217=1
Event History
Frequently Asked Questions
Which systems are most likely affected by the CLDAP and Global Catalog lookup issues?
Systems using SSSD with directory-service integration are relevant, particularly where CLDAP pings or Global Catalog lookups are used. The update changes CLDAP pings to target only the local domain and prevents KDC info files from being written for Global Catalog lookups.
What operational symptom may indicate that this update is needed?
The available issue data identifies repeated “Unable to obtain cached rules” messages filling up sssd_sudo.log. Systems showing that log-growth behavior are directly relevant to this update.
Which SSSD packages are included in the update?
The listed packages include sssd, sssd-common, sssd-krb5-common, and sssd-ldap, along with their listed debuginfo and debugsource packages.