ALBA-2021:2571
sssd bug fix and enhancement update
The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.
Bug Fix(es) and Enhancement(s):
-
Wrong default debug level of sssd tools (BZ#1942438)
-
IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 (BZ#1945654)
-
SSSD not detecting subdomain from AD forest (AlmaLinux 8.3) (BZ#1945655)
-
No gpo found and ad_gpo_implicit_deny set to True still permits user login (BZ#1945656)
-
pam_sss_gss.so doesn't work with large kerberos tickets (BZ#1949170)
What each source reports
OSV No score
sssd bug fix and enhancement update
The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.
Bug Fix(es) and Enhancement(s):
-
Wrong default debug level of sssd tools (BZ#1942438)
-
IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 (BZ#1945654)
-
SSSD not detecting subdomain from AD forest (AlmaLinux 8.3) (BZ#1945655)
-
No gpo found and ad_gpo_implicit_deny set to True still permits user login (BZ#1945656)
-
pam_sss_gss.so doesn't work with large kerberos tickets (BZ#1949170)
- Record
ALBA-2021:2571- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libsss_nss_idmap-develAlmaLinux:8 |
before 2.4.0-9.el8_4.1 | 2.4.0-9.el8_4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
ALBA-2021:2571 is a vulnerability with no CVSS score yet in libsss_nss_idmap-devel, published June 29, 2021. No source lists public exploit code. Fixed in libsss_nss_idmap-devel 2.4.0-9.el8_4.1.