Headline
Ubuntu Security Notice USN-6156-2
Ubuntu Security Notice 6156-2 - USN-6156-1 fixed a vulnerability in SSSD. In certain environments, not all packages ended up being upgraded at the same time, resulting in authentication failures when the PAM module was being used. This update fixes the problem. It was discovered that SSSD incorrectly sanitized certificate data used in LDAP filters. When using this issue in combination with FreeIPA, a remote attacker could possibly use this issue to escalate privileges.
==========================================================================Ubuntu Security Notice USN-6156-2June 16, 2023sssd regression==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 20.04 LTSSummary:USN-6156-1 introduced a regression in SSSD.Software Description:- sssd: System Security Services DaemonDetails:USN-6156-1 fixed a vulnerability in SSSD. In certain environments, not allpackages ended up being upgraded at the same time, resulting inauthentication failures when the PAM module was being used.This update fixes the problem. We apologize for the inconvenience.Original advisory details: It was discovered that SSSD incorrrectly sanitized certificate data used in LDAP filters. When using this issue in combination with FreeIPA, a remote attacker could possibly use this issue to escalate privileges.Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 20.04 LTS: sssd 2.2.3-3ubuntu0.12In general, a standard system update will make all the necessary changes.References: https://ubuntu.com/security/notices/USN-6156-2 https://ubuntu.com/security/notices/USN-6156-1 https://launchpad.net/bugs/2023598Package Information: https://launchpad.net/ubuntu/+source/sssd/2.2.3-3ubuntu0.12