-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2021.2767
                           sssd security update
                              17 August 2021

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           sssd
Publisher:         Red Hat
Operating System:  Red Hat
                   Linux variants
Impact/Access:     Root Compromise -- Existing Account
Resolution:        Patch/Upgrade
CVE Names:         CVE-2021-3621  

Original Bulletin: 
   https://access.redhat.com/errata/RHSA-2021:3151

Comment: This advisory references vulnerabilities in products which run on 
         platforms other than Red Hat. It is recommended that administrators
         running sssd check for an updated version of the software for their
         operating system.

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Important: sssd security update
Advisory ID:       RHSA-2021:3151-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2021:3151
Issue date:        2021-08-16
CVE Names:         CVE-2021-3621 
=====================================================================

1. Summary:

An update for sssd is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat CodeReady Linux Builder (v. 8) - aarch64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux BaseOS (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64

3. Description:

The System Security Services Daemon (SSSD) service provides a set of
daemons to manage access to remote directories and authentication
mechanisms. It also provides the Name Service Switch (NSS) and the
Pluggable Authentication Modules (PAM) interfaces toward the system, and a
pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

* sssd: shell command injection in sssctl (CVE-2021-3621)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

1975142 - CVE-2021-3621 sssd: shell command injection in sssctl

6. Package List:

Red Hat Enterprise Linux BaseOS (v. 8):

Source:
sssd-2.4.0-9.el8_4.2.src.rpm

aarch64:
libipa_hbac-2.4.0-9.el8_4.2.aarch64.rpm
libipa_hbac-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_autofs-2.4.0-9.el8_4.2.aarch64.rpm
libsss_autofs-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_certmap-2.4.0-9.el8_4.2.aarch64.rpm
libsss_certmap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_idmap-2.4.0-9.el8_4.2.aarch64.rpm
libsss_idmap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_nss_idmap-2.4.0-9.el8_4.2.aarch64.rpm
libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_simpleifp-2.4.0-9.el8_4.2.aarch64.rpm
libsss_simpleifp-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_sudo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_sudo-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
python3-libipa_hbac-2.4.0-9.el8_4.2.aarch64.rpm
python3-libipa_hbac-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
python3-libsss_nss_idmap-2.4.0-9.el8_4.2.aarch64.rpm
python3-libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
python3-sss-2.4.0-9.el8_4.2.aarch64.rpm
python3-sss-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
python3-sss-murmur-2.4.0-9.el8_4.2.aarch64.rpm
python3-sss-murmur-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-2.4.0-9.el8_4.2.aarch64.rpm
sssd-ad-2.4.0-9.el8_4.2.aarch64.rpm
sssd-ad-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-client-2.4.0-9.el8_4.2.aarch64.rpm
sssd-client-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-common-2.4.0-9.el8_4.2.aarch64.rpm
sssd-common-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-common-pac-2.4.0-9.el8_4.2.aarch64.rpm
sssd-common-pac-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-dbus-2.4.0-9.el8_4.2.aarch64.rpm
sssd-dbus-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-debugsource-2.4.0-9.el8_4.2.aarch64.rpm
sssd-ipa-2.4.0-9.el8_4.2.aarch64.rpm
sssd-ipa-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-kcm-2.4.0-9.el8_4.2.aarch64.rpm
sssd-kcm-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-krb5-2.4.0-9.el8_4.2.aarch64.rpm
sssd-krb5-common-2.4.0-9.el8_4.2.aarch64.rpm
sssd-krb5-common-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-krb5-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-ldap-2.4.0-9.el8_4.2.aarch64.rpm
sssd-ldap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-libwbclient-2.4.0-9.el8_4.2.aarch64.rpm
sssd-libwbclient-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-nfs-idmap-2.4.0-9.el8_4.2.aarch64.rpm
sssd-nfs-idmap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-polkit-rules-2.4.0-9.el8_4.2.aarch64.rpm
sssd-proxy-2.4.0-9.el8_4.2.aarch64.rpm
sssd-proxy-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-tools-2.4.0-9.el8_4.2.aarch64.rpm
sssd-tools-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-winbind-idmap-2.4.0-9.el8_4.2.aarch64.rpm
sssd-winbind-idmap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm

noarch:
python3-sssdconfig-2.4.0-9.el8_4.2.noarch.rpm

ppc64le:
libipa_hbac-2.4.0-9.el8_4.2.ppc64le.rpm
libipa_hbac-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_autofs-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_autofs-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_certmap-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_certmap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_idmap-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_idmap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_nss_idmap-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_simpleifp-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_simpleifp-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_sudo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_sudo-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
python3-libipa_hbac-2.4.0-9.el8_4.2.ppc64le.rpm
python3-libipa_hbac-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
python3-libsss_nss_idmap-2.4.0-9.el8_4.2.ppc64le.rpm
python3-libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
python3-sss-2.4.0-9.el8_4.2.ppc64le.rpm
python3-sss-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
python3-sss-murmur-2.4.0-9.el8_4.2.ppc64le.rpm
python3-sss-murmur-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-ad-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-ad-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-client-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-client-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-common-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-common-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-common-pac-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-common-pac-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-dbus-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-dbus-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-debugsource-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-ipa-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-ipa-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-kcm-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-kcm-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-krb5-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-krb5-common-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-krb5-common-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-krb5-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-ldap-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-ldap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-libwbclient-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-libwbclient-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-nfs-idmap-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-nfs-idmap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-polkit-rules-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-proxy-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-proxy-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-tools-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-tools-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-winbind-idmap-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-winbind-idmap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm

s390x:
libipa_hbac-2.4.0-9.el8_4.2.s390x.rpm
libipa_hbac-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
libsss_autofs-2.4.0-9.el8_4.2.s390x.rpm
libsss_autofs-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
libsss_certmap-2.4.0-9.el8_4.2.s390x.rpm
libsss_certmap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
libsss_idmap-2.4.0-9.el8_4.2.s390x.rpm
libsss_idmap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
libsss_nss_idmap-2.4.0-9.el8_4.2.s390x.rpm
libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
libsss_simpleifp-2.4.0-9.el8_4.2.s390x.rpm
libsss_simpleifp-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
libsss_sudo-2.4.0-9.el8_4.2.s390x.rpm
libsss_sudo-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
python3-libipa_hbac-2.4.0-9.el8_4.2.s390x.rpm
python3-libipa_hbac-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
python3-libsss_nss_idmap-2.4.0-9.el8_4.2.s390x.rpm
python3-libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
python3-sss-2.4.0-9.el8_4.2.s390x.rpm
python3-sss-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
python3-sss-murmur-2.4.0-9.el8_4.2.s390x.rpm
python3-sss-murmur-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-2.4.0-9.el8_4.2.s390x.rpm
sssd-ad-2.4.0-9.el8_4.2.s390x.rpm
sssd-ad-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-client-2.4.0-9.el8_4.2.s390x.rpm
sssd-client-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-common-2.4.0-9.el8_4.2.s390x.rpm
sssd-common-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-common-pac-2.4.0-9.el8_4.2.s390x.rpm
sssd-common-pac-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-dbus-2.4.0-9.el8_4.2.s390x.rpm
sssd-dbus-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-debugsource-2.4.0-9.el8_4.2.s390x.rpm
sssd-ipa-2.4.0-9.el8_4.2.s390x.rpm
sssd-ipa-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-kcm-2.4.0-9.el8_4.2.s390x.rpm
sssd-kcm-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-krb5-2.4.0-9.el8_4.2.s390x.rpm
sssd-krb5-common-2.4.0-9.el8_4.2.s390x.rpm
sssd-krb5-common-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-krb5-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-ldap-2.4.0-9.el8_4.2.s390x.rpm
sssd-ldap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-libwbclient-2.4.0-9.el8_4.2.s390x.rpm
sssd-libwbclient-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-nfs-idmap-2.4.0-9.el8_4.2.s390x.rpm
sssd-nfs-idmap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-polkit-rules-2.4.0-9.el8_4.2.s390x.rpm
sssd-proxy-2.4.0-9.el8_4.2.s390x.rpm
sssd-proxy-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-tools-2.4.0-9.el8_4.2.s390x.rpm
sssd-tools-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-winbind-idmap-2.4.0-9.el8_4.2.s390x.rpm
sssd-winbind-idmap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm

x86_64:
libipa_hbac-2.4.0-9.el8_4.2.i686.rpm
libipa_hbac-2.4.0-9.el8_4.2.x86_64.rpm
libipa_hbac-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libipa_hbac-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_autofs-2.4.0-9.el8_4.2.x86_64.rpm
libsss_autofs-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libsss_autofs-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_certmap-2.4.0-9.el8_4.2.i686.rpm
libsss_certmap-2.4.0-9.el8_4.2.x86_64.rpm
libsss_certmap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libsss_certmap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_idmap-2.4.0-9.el8_4.2.i686.rpm
libsss_idmap-2.4.0-9.el8_4.2.x86_64.rpm
libsss_idmap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libsss_idmap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_nss_idmap-2.4.0-9.el8_4.2.i686.rpm
libsss_nss_idmap-2.4.0-9.el8_4.2.x86_64.rpm
libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_simpleifp-2.4.0-9.el8_4.2.i686.rpm
libsss_simpleifp-2.4.0-9.el8_4.2.x86_64.rpm
libsss_simpleifp-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libsss_simpleifp-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_sudo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_sudo-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libsss_sudo-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
python3-libipa_hbac-2.4.0-9.el8_4.2.x86_64.rpm
python3-libipa_hbac-debuginfo-2.4.0-9.el8_4.2.i686.rpm
python3-libipa_hbac-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
python3-libsss_nss_idmap-2.4.0-9.el8_4.2.x86_64.rpm
python3-libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
python3-libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
python3-sss-2.4.0-9.el8_4.2.x86_64.rpm
python3-sss-debuginfo-2.4.0-9.el8_4.2.i686.rpm
python3-sss-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
python3-sss-murmur-2.4.0-9.el8_4.2.x86_64.rpm
python3-sss-murmur-debuginfo-2.4.0-9.el8_4.2.i686.rpm
python3-sss-murmur-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-2.4.0-9.el8_4.2.x86_64.rpm
sssd-ad-2.4.0-9.el8_4.2.x86_64.rpm
sssd-ad-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-ad-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-client-2.4.0-9.el8_4.2.i686.rpm
sssd-client-2.4.0-9.el8_4.2.x86_64.rpm
sssd-client-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-client-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-common-2.4.0-9.el8_4.2.x86_64.rpm
sssd-common-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-common-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-common-pac-2.4.0-9.el8_4.2.x86_64.rpm
sssd-common-pac-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-common-pac-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-dbus-2.4.0-9.el8_4.2.x86_64.rpm
sssd-dbus-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-dbus-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-debugsource-2.4.0-9.el8_4.2.i686.rpm
sssd-debugsource-2.4.0-9.el8_4.2.x86_64.rpm
sssd-ipa-2.4.0-9.el8_4.2.x86_64.rpm
sssd-ipa-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-ipa-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-kcm-2.4.0-9.el8_4.2.x86_64.rpm
sssd-kcm-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-kcm-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-krb5-2.4.0-9.el8_4.2.x86_64.rpm
sssd-krb5-common-2.4.0-9.el8_4.2.x86_64.rpm
sssd-krb5-common-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-krb5-common-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-krb5-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-krb5-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-ldap-2.4.0-9.el8_4.2.x86_64.rpm
sssd-ldap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-ldap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-libwbclient-2.4.0-9.el8_4.2.x86_64.rpm
sssd-libwbclient-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-libwbclient-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-nfs-idmap-2.4.0-9.el8_4.2.x86_64.rpm
sssd-nfs-idmap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-nfs-idmap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-polkit-rules-2.4.0-9.el8_4.2.x86_64.rpm
sssd-proxy-2.4.0-9.el8_4.2.x86_64.rpm
sssd-proxy-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-proxy-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-tools-2.4.0-9.el8_4.2.x86_64.rpm
sssd-tools-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-tools-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-winbind-idmap-2.4.0-9.el8_4.2.x86_64.rpm
sssd-winbind-idmap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-winbind-idmap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm

Red Hat CodeReady Linux Builder (v. 8):

aarch64:
libipa_hbac-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_autofs-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_certmap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_idmap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_nss_idmap-devel-2.4.0-9.el8_4.2.aarch64.rpm
libsss_simpleifp-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
libsss_sudo-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
python3-libipa_hbac-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
python3-libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
python3-sss-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
python3-sss-murmur-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-ad-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-client-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-common-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-common-pac-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-dbus-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-debugsource-2.4.0-9.el8_4.2.aarch64.rpm
sssd-ipa-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-kcm-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-krb5-common-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-krb5-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-ldap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-libwbclient-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-nfs-idmap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-proxy-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-tools-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm
sssd-winbind-idmap-debuginfo-2.4.0-9.el8_4.2.aarch64.rpm

ppc64le:
libipa_hbac-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_autofs-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_certmap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_idmap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_nss_idmap-devel-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_simpleifp-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
libsss_sudo-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
python3-libipa_hbac-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
python3-libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
python3-sss-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
python3-sss-murmur-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-ad-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-client-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-common-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-common-pac-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-dbus-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-debugsource-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-ipa-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-kcm-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-krb5-common-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-krb5-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-ldap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-libwbclient-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-nfs-idmap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-proxy-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-tools-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm
sssd-winbind-idmap-debuginfo-2.4.0-9.el8_4.2.ppc64le.rpm

s390x:
libipa_hbac-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
libsss_autofs-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
libsss_certmap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
libsss_idmap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
libsss_nss_idmap-devel-2.4.0-9.el8_4.2.s390x.rpm
libsss_simpleifp-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
libsss_sudo-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
python3-libipa_hbac-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
python3-libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
python3-sss-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
python3-sss-murmur-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-ad-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-client-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-common-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-common-pac-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-dbus-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-debugsource-2.4.0-9.el8_4.2.s390x.rpm
sssd-ipa-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-kcm-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-krb5-common-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-krb5-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-ldap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-libwbclient-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-nfs-idmap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-proxy-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-tools-debuginfo-2.4.0-9.el8_4.2.s390x.rpm
sssd-winbind-idmap-debuginfo-2.4.0-9.el8_4.2.s390x.rpm

x86_64:
libipa_hbac-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libipa_hbac-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_autofs-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libsss_autofs-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_certmap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libsss_certmap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_idmap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libsss_idmap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_nss_idmap-devel-2.4.0-9.el8_4.2.i686.rpm
libsss_nss_idmap-devel-2.4.0-9.el8_4.2.x86_64.rpm
libsss_simpleifp-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libsss_simpleifp-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
libsss_sudo-debuginfo-2.4.0-9.el8_4.2.i686.rpm
libsss_sudo-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
python3-libipa_hbac-debuginfo-2.4.0-9.el8_4.2.i686.rpm
python3-libipa_hbac-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
python3-libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
python3-libsss_nss_idmap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
python3-sss-debuginfo-2.4.0-9.el8_4.2.i686.rpm
python3-sss-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
python3-sss-murmur-debuginfo-2.4.0-9.el8_4.2.i686.rpm
python3-sss-murmur-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-ad-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-ad-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-client-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-client-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-common-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-common-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-common-pac-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-common-pac-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-dbus-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-dbus-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-debugsource-2.4.0-9.el8_4.2.i686.rpm
sssd-debugsource-2.4.0-9.el8_4.2.x86_64.rpm
sssd-ipa-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-ipa-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-kcm-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-kcm-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-krb5-common-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-krb5-common-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-krb5-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-krb5-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-ldap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-ldap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-libwbclient-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-libwbclient-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-nfs-idmap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-nfs-idmap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-proxy-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-proxy-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-tools-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-tools-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm
sssd-winbind-idmap-debuginfo-2.4.0-9.el8_4.2.i686.rpm
sssd-winbind-idmap-debuginfo-2.4.0-9.el8_4.2.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2021-3621
https://access.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2021 Red Hat, Inc.
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=vz38
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=Ou8s
-----END PGP SIGNATURE-----