<?xml version="1.0" encoding="utf-8"?>
  <?xml-stylesheet type="text/xsl" href="sa-render.xsl"?>
  <update from="huaweicloud.com" type="security" status="stable" version="1">
    <id>HCE2-SA-2024-0143</id>
    <title>An update for sssd is now available for HCE 2.0</title>
    <severity>Important</severity>
    <release>HCE 2.0</release>
    <issued date="2024-05-25 06:44:28"/>
    <updated date="2024-05-25 06:44:28"/>
    <references>
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3758" id="CVE-2023-3758" title="CVE-2023-3758 Base Score: 7.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" type="cve"/>
    </references>
    <description>Security Fix(es):

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately. (CVE-2023-3758)
</description>
    <pkglist>
      <collection short="HCE 2.0" package="sssd">
        <name>HCE 2.0</name>
        <package arch="aarch64" name="python3-sssd" version="2.6.1" release="1.r16.hce2">
          <filename>python3-sssd-2.6.1-1.r16.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="sssd" version="2.6.1" release="1.r16.hce2">
          <filename>sssd-2.6.1-1.r16.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="sssd-devel" version="2.6.1" release="1.r16.hce2">
          <filename>sssd-devel-2.6.1-1.r16.hce2.aarch64.rpm</filename>
        </package>
        <package arch="noarch" name="sssd-help" version="2.6.1" release="1.r16.hce2">
          <filename>sssd-help-2.6.1-1.r16.hce2.noarch.rpm</filename>
        </package>
        <package arch="x86_64" name="python3-sssd" version="2.6.1" release="1.r16.hce2">
          <filename>python3-sssd-2.6.1-1.r16.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="sssd" version="2.6.1" release="1.r16.hce2">
          <filename>sssd-2.6.1-1.r16.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="sssd-devel" version="2.6.1" release="1.r16.hce2">
          <filename>sssd-devel-2.6.1-1.r16.hce2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
