Authd Bug Fix Update - Vulnerability in authd package
Summary
ALBA-2019:1970: authd bug fix update. Affects authd versions < 1.4.4-5.el8_0.1. Fixed in 1.4.4-5.el8_0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The authd package is a small and fast RFC 1413 ident protocol daemon. It supports both IPv6 and IPv4 and includes features from pidentd. It can operate as an xinetd server or in interactive mode. The package is widely used for authentication purposes.
Vulnerability Detail
The authd package is affected by a bug that causes authentication to fail with the error message 'ERROR:NO-USER'. This bug can lead to authentication issues and may prevent users from accessing the system or services that rely on authd for identification. The vulnerability was identified in version 0 of the package and has been fixed in version 1.4.4-5.el8_0.1.
How To Fix
Minimum fixed version
1.4.4-5.el8_0.1
This is the first release that contains the fix.
sudo dnf update authdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The authd package is affected by a vulnerability that causes authentication failures. Users are advised to upgrade to the latest version of the package to fix this issue. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for authd →
FAQ
Authd is a small and fast RFC 1413 ident protocol daemon used for authentication purposes. It supports both IPv6 and IPv4 and includes features from pidentd.
The vulnerability in authd can cause authentication failures with the error message 'ERROR:NO-USER'. This can prevent users from accessing the system or services that rely on authd for identification.
The vulnerability was identified in version 0 of the authd package. Users of older versions are advised to upgrade to the fixed version (1.4.4-5.el8_0.1).
To fix this vulnerability, upgrade to the latest version of the authd package (1.4.4-5.el8_0.1).
You can find more information about this vulnerability in the authd package on the AlmaLinux OSV Database: https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALBA-2019:1970.json
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
