# SSSD 2.9.4
The SSSD team is announcing the release of version 2.9.4 of the
System Security Services Daemon. The tarball can be downloaded from:
https://github.com/SSSD/sssd/releases/tag/2.9.4
See the full release notes at:
https://sssd.io/release-notes/sssd-2.9.4.html
RPM packages will be made available for Fedora shortly.
## Feedback
Please provide comments, bugs and other feedback via the sssd-devel
or sssd-users mailing lists:
https://lists.fedorahosted.org/mailman/listinfo/sssd-develhttps://lists.fedorahosted.org/mailman/listinfo/sssd-users
# SSSD 2.9.4 Release Notes
## Highlights
### Important fixes
* Fixes a crash when PAM passkey processing incorrectly handles
non-passkey data.
* A workaround was implemented to handle gracefully misbehaving
applications that destroy internal state of SSSD client librarires. A
particular example of such application is described in
https://github.com/TigerVNC/tigervnc/issues/1709.
* An error when rotating KCM's logs was fixed. When KCM's logs were
rotated by logrotate, KCM would still use the old file (renamed
sssd_kcm.log.1). Only after KCM was restarted (either manually or
automatically) the new log file would be used. This problem is now
solved and KCM uses the new file immediately.
* Fixed group membership handling when members are coming from
different forest domains and using ldap token groups is prohibited.
* Files provider was erroneously taking into consideration
`local_auth_policy` config option, thus breaking smartcard
authentication of local user in setups that didn't explicitly specify
this option. This is now fixed.
