https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:21:49.250179+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2571 ALSA-2024:2571 — Moderate: sssd security and bug fix update 2026-10-03T12:21:49.286201+00:00

Affected: AlmaLinux:9: libipa_hbac, AlmaLinux:9: libsss_autofs, AlmaLinux:9: libsss_certmap, AlmaLinux:9: libsss_idmap, AlmaLinux:9: libsss_nss_idmap, AlmaLinux:9: libsss_nss_idmap-devel, AlmaLinux:9: libsss_simpleifp, AlmaLinux:9: libsss_sudo, AlmaLinux:9: python3-libipa_hbac, AlmaLinux:9: python3-libsss_nss_idmap and 21 more

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

Bug Fix(es):

* socket leak (JIRA:AlmaLinux-22340) * Passkey cannot fall back to password (JIRA:AlmaLinux-28161) * sssd: Race condition during authorization leads to GPO policies functioning inconsistently (JIRA:AlmaLinux-27209)

 https://cve.radiocsirt.org/vuln/bdu:2024-04108 bdu:2024-04108 2026-10-03T12:21:49.286302+00:00 bdu:2024-04108 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0470 certfr-2024-avi-0470 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T12:21:49.286320+00:00 certfr-2024-avi-0470 https://cve.radiocsirt.org/vuln/cnvd-2024-20778 cnvd-2024-20778 2026-10-03T12:21:49.286337+00:00 cnvd-2024-20778 https://cve.radiocsirt.org/vuln/euvd-2026-260289 EUVD-2026-260289 2026-10-03T12:21:49.286348+00:00 EUVD-2026-260289 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3758 fkie_cve-2023-3758 2026-10-03T12:21:49.286359+00:00

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

 https://cve.radiocsirt.org/vuln/ghsa-7pwr-cfrc-px4f GHSA-7pwr-cfrc-px4f 2026-10-03T12:21:49.286380+00:00

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

 https://cve.radiocsirt.org/vuln/gsd-2023-3758 gsd-2023-3758 2026-10-03T12:21:49.286394+00:00 gsd-2023-3758 https://cve.radiocsirt.org/vuln/oesa-2024-1546 OESA-2024-1546 — sssd security update 2026-10-03T12:21:49.286404+00:00

Affected: openEuler:20.03-LTS-SP1: sssd, openEuler:22.03-LTS: sssd, openEuler:22.03-LTS-SP1: sssd, openEuler:22.03-LTS-SP3: sssd

SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms such as LDAP, Kerberos or FreeIPA. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. Security Fix(es): A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.(CVE-2023-3758)

 https://cve.radiocsirt.org/vuln/rhsa-2024:1919 RHSA-2024:1919 — Red Hat Security Advisory: sssd security update 2026-10-03T12:21:49.286431+00:00

sssd: Race condition during authorization leads to GPO policies functioning inconsistently

 https://cve.radiocsirt.org/vuln/rhsa-2024:2571 RHSA-2024:2571 — Red Hat Security Advisory: sssd security and bug fix update 2026-10-03T12:21:49.286449+00:00

sssd: Race condition during authorization leads to GPO policies functioning inconsistently

 https://cve.radiocsirt.org/vuln/suse-su-2024:1549-1 SUSE-SU-2024:1549-1 — Security update for sssd 2026-10-03T12:21:49.286464+00:00

Security update for sssd

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-3758 UBUNTU-CVE-2023-3758 2026-10-03T12:21:49.286479+00:00

Affected: Ubuntu:Pro:16.04:LTS: sssd, Ubuntu:Pro:18.04:LTS: sssd, Ubuntu:20.04:LTS: sssd, Ubuntu:22.04:LTS: sssd, Ubuntu:24.04:LTS: sssd

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0930 WID-SEC-W-2024-0930 — Red Hat Enterprise Linux (sssd): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T12:21:49.286502+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.