Ubuntu
sssd package

sssd 2.9.4-1.1ubuntu6.1 source package in Ubuntu

Changelog

sssd (2.9.4-1.1ubuntu6.1) noble-security; urgency=medium

  * SECURITY UPDATE: race when GPO policy is being applied
    - debian/patches/CVE-2023-3758.patch: use hash to store intermediate
      results in src/providers/ad/ad_gpo.c.
    - CVE-2023-3758

 -- Marc Deslauriers <email address hidden>  Fri, 07 Jun 2024 10:50:41 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Noble
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Noble security main utils

Downloads

File Size SHA-256 Checksum
sssd_2.9.4.orig.tar.gz 7.6 MiB 82b5ef80be47c96d518de26cfb440000f1bc6b9e3441a8393a007d21af316b18
sssd_2.9.4-1.1ubuntu6.1.debian.tar.xz 50.1 KiB a21121dae27273d4e462f6100a333369ac1c08f572f9e0369c764562a75b2eec
sssd_2.9.4-1.1ubuntu6.1.dsc 4.9 KiB 592a0017db9bedd96babc2e157782c184f90f89720b070636bcf01207b917ab3

View changes file

Binary packages built by this source

libipa-hbac-dev: FreeIPA HBAC Evaluator library -- development files

 Utility library to validate FreeIPA HBAC rules for authorization requests.
 .
 This package contains header files and symlinks to develop programs which will
 use the libipa-hbac library.

libipa-hbac0t64: FreeIPA HBAC Evaluator library

 Utility library to validate FreeIPA HBAC rules for authorization requests.

libipa-hbac0t64-dbgsym: debug symbols for libipa-hbac0t64
libnss-sss: Nss library for the System Security Services Daemon

 Provides a set of daemons to manage access to remote directories and
 authentication mechanisms. It provides an NSS and PAM interface toward
 the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 .
 This package provide the nss library to connect to the sssd daemon.

libnss-sss-dbgsym: debug symbols for libnss-sss
libpam-sss: Pam module for the System Security Services Daemon

 Provides a set of daemons to manage access to remote directories and
 authentication mechanisms. It provides an NSS and PAM interface toward
 the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 .
 This package provide the pam module to connect to the sssd daemon.

libpam-sss-dbgsym: debug symbols for libpam-sss
libsss-certmap-dev: Certificate mapping library for SSSD -- development files

 Utility library to map certificates to users based on rules.
 .
 This package contains header files and symlinks to develop programs which will
 use the libsss-certmap library.

libsss-certmap0: Certificate mapping library for SSSD

 Library to map certificates to users based on rules.

libsss-certmap0-dbgsym: debug symbols for libsss-certmap0
libsss-idmap-dev: ID mapping library for SSSD -- development files

 Utility library to convert SIDs to Unix uids and gids.
 .
 This package contains header files and symlinks to develop programs which will
 use the libsss-idmap library.

libsss-idmap0: ID mapping library for SSSD

 Utility library to convert SIDs to Unix uids and gids.

libsss-idmap0-dbgsym: debug symbols for libsss-idmap0
libsss-nss-idmap-dev: SID based lookups library for SSSD -- development files

 Utility library for SID based lookups.
 .
 This package contains header files and symlinks to develop programs which will
 use the libsss-nss-idmap library.

libsss-nss-idmap0: SID based lookups library for SSSD

 Utility library for SID based lookups.

libsss-nss-idmap0-dbgsym: debug symbols for libsss-nss-idmap0
libsss-sudo: Communicator library for sudo

 Utility library to allow communication between sudo and SSSD for caching
 sudo rules by SSSD.

libsss-sudo-dbgsym: debug symbols for libsss-sudo
python3-libipa-hbac: Python3 bindings for the FreeIPA HBAC Evaluator library

 The libipa_hbac-python contains the bindings so that libipa_hbac can be
 used by Python applications.
 .
 This package installs the library for Python 3.

python3-libipa-hbac-dbgsym: debug symbols for python3-libipa-hbac
python3-libsss-nss-idmap: Python3 bindings for the SID lookups library

 This package contains the bindings for libnss_sss_idmap to be used by
 Python applications.
 .
 This package installs the library for Python 3.

python3-libsss-nss-idmap-dbgsym: debug symbols for python3-libsss-nss-idmap
python3-sss: Python3 module for the System Security Services Daemon

 Provides a set of daemons to manage access to remote directories and
 authentication mechanisms. It provides an NSS and PAM interface toward
 the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 .
 This package provide a module to access the configuration of the sssd daemon.
 .
 This package installs the library for Python 3.

python3-sss-dbgsym: debug symbols for python3-sss
sssd: System Security Services Daemon -- metapackage

 Provides a set of daemons to manage access to remote directories and
 authentication mechanisms. It provides an NSS and PAM interface toward
 the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 .
 This package is a metapackage which installs the daemon and existing
 authentication back ends.

sssd-ad: System Security Services Daemon -- Active Directory back end

 Provides the Active Directory back end that the SSSD can utilize to fetch
 identity data from and authenticate against an Active Directory server.

sssd-ad-common: System Security Services Daemon -- PAC responder

 Provides the PAC responder that the AD and IPA backends can use for
 fetching additional attributes from the kerberos ticket.

sssd-ad-common-dbgsym: debug symbols for sssd-ad-common
sssd-ad-dbgsym: debug symbols for sssd-ad
sssd-common: System Security Services Daemon -- common files

 Provides a set of daemons to manage access to remote directories and
 authentication mechanisms. It provides an NSS and PAM interface toward
 the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 .
 This package provides the daemon and other common files needed by the
 authentication back ends.

sssd-common-dbgsym: debug symbols for sssd-common
sssd-dbus: System Security Services Daemon -- D-Bus responder

 Provides the D-Bus responder called InfoPipe, that allows the information
 from the SSSD to be transmitted over the system bus.

sssd-dbus-dbgsym: debug symbols for sssd-dbus
sssd-idp: System Security Services Daemon -- Kerberos plugins for external id providers

 Provides Kerberos plugins that are required to enable authentication against
 external identity providers.

sssd-idp-dbgsym: debug symbols for sssd-idp
sssd-ipa: System Security Services Daemon -- IPA back end

 Provides the IPA back end that the SSSD can utilize to fetch identity data
 from and authenticate against an IPA server.

sssd-ipa-dbgsym: debug symbols for sssd-ipa
sssd-kcm: System Security Services Daemon -- Kerberos KCM server implementation

 Provides an implementation of a Kerberos KCM server. Use this package if
 you want to use the KCM: Kerberos credentials cache.

sssd-kcm-dbgsym: debug symbols for sssd-kcm
sssd-krb5: System Security Services Daemon -- Kerberos back end

 Provides the Kerberos back end that the SSSD can utilize authenticate
 against a Kerberos server.

sssd-krb5-common: System Security Services Daemon -- Kerberos helpers

 Provides helper processes that the LDAP and Kerberos back ends can use for
 Kerberos user or host authentication.

sssd-krb5-common-dbgsym: debug symbols for sssd-krb5-common
sssd-krb5-dbgsym: debug symbols for sssd-krb5
sssd-ldap: System Security Services Daemon -- LDAP back end

 Provides the LDAP back end that the SSSD can utilize to fetch identity data
 from and authenticate against an LDAP server.

sssd-ldap-dbgsym: debug symbols for sssd-ldap
sssd-passkey: System Security Services Daemon -- passkey helpers and plugins

 Provides the helper processes and Kerberos plugins that are required to
 enable authentication with a passkey token.

sssd-passkey-dbgsym: debug symbols for sssd-passkey
sssd-proxy: System Security Services Daemon -- proxy back end

 Provides the proxy back end which can be used to wrap an existing NSS and/or
 PAM modules to leverage SSSD caching.

sssd-proxy-dbgsym: debug symbols for sssd-proxy
sssd-tools: System Security Services Daemon -- tools

 Provides a set of daemons to manage access to remote directories and
 authentication mechanisms. It provides an NSS and PAM interface toward
 the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 .
 This package provides tools to manage users, groups and nested groups when
 using the local id provider.

sssd-tools-dbgsym: debug symbols for sssd-tools