From 2869ae9edaa898a3c9f18507d315fec991a4f735 Mon Sep 17 00:00:00 2001 From: AlmaLinux RelEng Bot Date: Thu, 23 Jul 2026 15:23:36 -0400 Subject: [PATCH] Revert OL modifications --- ...0448-restore-default-debug-sss_cache.patch | 26 ------------------- SPECS/sssd.spec | 7 ++--- 2 files changed, 2 insertions(+), 31 deletions(-) delete mode 100644 SOURCES/2002-orabug32810448-restore-default-debug-sss_cache.patch diff --git a/SOURCES/2002-orabug32810448-restore-default-debug-sss_cache.patch b/SOURCES/2002-orabug32810448-restore-default-debug-sss_cache.patch deleted file mode 100644 index fbf8d90..0000000 --- a/SOURCES/2002-orabug32810448-restore-default-debug-sss_cache.patch +++ /dev/null @@ -1,26 +0,0 @@ -From: Alex Burmashev -Date: Tue, 04 May 2021 13:31:41 +0100 -Subject: [PATCH] restore default debug level for sss_cache - -We want only fatal failures to be logged, otherwise in some conditions log is. -flooded with unneeded "errors" - -Resolves: https://github.com/SSSD/sssd/issues/5488 - -Orabug: 32810448 -Signed-off-by: Alex Burmashev - -Patch migrated from ol8 to ol9 without any modification -Signed-off-by: Darren Archibald -diff -ruN sssd-2.4.0.orig/src/tools/sss_cache.c sssd-2.4.0/src/tools/sss_cache.c ---- sssd-2.4.0.orig/src/tools/sss_cache.c 2021-06-29 12:48:07.035970021 -0700 -+++ sssd-2.4.0/src/tools/sss_cache.c 2021-06-29 13:11:23.126918933 -0700 -@@ -709,7 +709,7 @@ - struct cache_tool_ctx *ctx = NULL; - int idb = INVALIDATE_NONE; - struct input_values values = { 0 }; -- int debug = SSSDBG_TOOLS_DEFAULT; -+ int debug = SSSDBG_FATAL_FAILURE; - errno_t ret = EOK; - - poptContext pc = NULL; diff --git a/SPECS/sssd.spec b/SPECS/sssd.spec index 4fe0240..bb74e39 100644 --- a/SPECS/sssd.spec +++ b/SPECS/sssd.spec @@ -27,12 +27,11 @@ Name: sssd Version: 2.9.8 -Release: 4.0.1%{?dist}.1 +Release: 4%{?dist}.1 Summary: System Security Services Daemon License: GPLv3+ URL: https://github.com/SSSD/sssd/ Source0: https://github.com/SSSD/sssd/releases/download/%{version}/sssd-%{version}.tar.gz -Patch2002: 2002-orabug32810448-restore-default-debug-sss_cache.patch ### Patches ### Patch1: 0001-do-not-require-GID-for-non-POSIX-group.patch @@ -1089,9 +1088,6 @@ fi %systemd_postun_with_restart sssd.service %changelog -* Mon Jul 20 2026 EL Errata - 2.9.8-4.0.1.el9_8.1 -- Restore default debug level for sss_cache [Orabug: 32810448] - * Wed Jul 8 2026 Justin Stephenson - 2.9.8-5 - Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation - Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root @@ -1237,6 +1233,7 @@ fi - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working) - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code + * Mon Jul 10 2023 Alexey Tikhonov - 2.9.1-2 - Resolves: rhbz#2218858 - [sssd] SSSD enters failed state after heavy load in the system