diff --git a/2002-orabug32810448-restore-default-debug-sss_cache.patch b/2002-orabug32810448-restore-default-debug-sss_cache.patch deleted file mode 100644 index 0d56be5..0000000 --- a/2002-orabug32810448-restore-default-debug-sss_cache.patch +++ /dev/null @@ -1,26 +0,0 @@ -From: Alex Burmashev -Date: Tue, 04 May 2021 13:31:41 +0100 -Subject: [PATCH] restore default debug level for sss_cache - -We want only fatal failures to be logged, otherwise in some conditions log is. -flooded with unneeded "errors" - -Resolves: https://github.com/SSSD/sssd/issues/5488 - -Orabug: 32810448 -Signed-off-by: Alex Burmashev - -Patch migrated from ol8 to ol9 without any modification -Signed-off-by: Darren Archibald -diff -uNr a/src/tools/sss_cache.c b/src/tools/sss_cache.c ---- a/src/tools/sss_cache.c 2024-06-26 02:11:39.000000000 -0700 -+++ b/src/tools/sss_cache.c 2024-09-05 16:17:12.686336046 -0700 -@@ -722,7 +722,7 @@ - struct cache_tool_ctx *ctx = NULL; - int idb = INVALIDATE_NONE; - struct input_values values = { 0 }; -- int debug = SSSDBG_TOOLS_DEFAULT; -+ int debug = SSSDBG_FATAL_FAILURE; - errno_t ret = EOK; - - poptContext pc = NULL; diff --git a/sssd.spec b/sssd.spec index 5e3d564..edaa99f 100644 --- a/sssd.spec +++ b/sssd.spec @@ -21,13 +21,12 @@ Name: sssd Version: 2.12.0 -Release: 3.0.1%{?dist}.1 +Release: 3%{?dist}.1 Summary: System Security Services Daemon License: GPL-3.0-or-later URL: https://github.com/SSSD/sssd/ Source0: https://github.com/SSSD/sssd/releases/download/2.12.0/sssd-2.12.0.tar.gz Source1: sssd.sysusers -Patch2002: 2002-orabug32810448-restore-default-debug-sss_cache.patch ### Patches ### Patch1: 0001-do-not-require-GID-for-non-POSIX-group.patch @@ -1093,9 +1092,6 @@ fi %systemd_postun_with_restart sssd.service %changelog -* Mon Jul 20 2026 EL Errata - 2.12.0-3.0.1.el10_2.1 -- Restore default debug level for sss_cache [Orabug: 32810448] - * Wed Jul 8 2026 - Tomas Halman - 2.12.0-3.1 - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole - Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass