Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2019-3651

Опубликовано: 14 нояб. 2019
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2019-3651: sssd security, bug fix, and enhancement update (LOW)

[2.2.0-19]

  • Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)

[2.2.0-18]

  • Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  • Also sync. kcm multihost tests with master

[2.2.0-17]

  • Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring
  • Also apply a patch to fix gating tests issue

[2.2.0-16]

  • Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup

[2.2.0-15]

  • Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided

[2.2.0-14]

  • Resolves: rhbz#1736796 - sssd config option 'default_domain_suffix' should not cause files domain entries to be qualified, this can break sudo access

[2.2.0-13]

  • Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8

[2.2.0-12]

  • Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets

[2.2.0-11]

  • Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user

[2.2.0-10]

  • Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon

[2.2.0-9]

  • Resolves: rhbz#1382750 - Conflicting default timeout values

[2.2.0-8]

  • Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.

[2.2.0-7]

  • Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant

[2.2.0-6]

  • Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains

[2.2.0-5]

  • Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo

[2.2.0-4]

  • Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server

[2.2.0-3]

  • Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members

[2.2.0-2]

  • Resolves: rhbz#1673443 - sssd man pages: The default value of 'ldap_user_home_directory' is not mentioned with AD server configuration

[2.2.0-1]

  • Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release

[2.1.0-1]

  • Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release

[2.0.0-45]

  • Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase.
  • Related: rhbz#1682305

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

libipa_hbac

2.2.0-19.el8

libsss_autofs

2.2.0-19.el8

libsss_certmap

2.2.0-19.el8

libsss_idmap

2.2.0-19.el8

libsss_nss_idmap

2.2.0-19.el8

libsss_nss_idmap-devel

2.2.0-19.el8

libsss_simpleifp

2.2.0-19.el8

libsss_sudo

2.2.0-19.el8

python3-libipa_hbac

2.2.0-19.el8

python3-libsss_nss_idmap

2.2.0-19.el8

python3-sss

2.2.0-19.el8

python3-sss-murmur

2.2.0-19.el8

python3-sssdconfig

2.2.0-19.el8

sssd

2.2.0-19.el8

sssd-ad

2.2.0-19.el8

sssd-client

2.2.0-19.el8

sssd-common

2.2.0-19.el8

sssd-common-pac

2.2.0-19.el8

sssd-dbus

2.2.0-19.el8

sssd-ipa

2.2.0-19.el8

sssd-kcm

2.2.0-19.el8

sssd-krb5

2.2.0-19.el8

sssd-krb5-common

2.2.0-19.el8

sssd-ldap

2.2.0-19.el8

sssd-libwbclient

2.2.0-19.el8

sssd-nfs-idmap

2.2.0-19.el8

sssd-polkit-rules

2.2.0-19.el8

sssd-proxy

2.2.0-19.el8

sssd-tools

2.2.0-19.el8

sssd-winbind-idmap

2.2.0-19.el8

Oracle Linux x86_64

libipa_hbac

2.2.0-19.el8

libsss_autofs

2.2.0-19.el8

libsss_certmap

2.2.0-19.el8

libsss_idmap

2.2.0-19.el8

libsss_nss_idmap

2.2.0-19.el8

libsss_nss_idmap-devel

2.2.0-19.el8

libsss_simpleifp

2.2.0-19.el8

libsss_sudo

2.2.0-19.el8

python3-libipa_hbac

2.2.0-19.el8

python3-libsss_nss_idmap

2.2.0-19.el8

python3-sss

2.2.0-19.el8

python3-sss-murmur

2.2.0-19.el8

python3-sssdconfig

2.2.0-19.el8

sssd

2.2.0-19.el8

sssd-ad

2.2.0-19.el8

sssd-client

2.2.0-19.el8

sssd-common

2.2.0-19.el8

sssd-common-pac

2.2.0-19.el8

sssd-dbus

2.2.0-19.el8

sssd-ipa

2.2.0-19.el8

sssd-kcm

2.2.0-19.el8

sssd-krb5

2.2.0-19.el8

sssd-krb5-common

2.2.0-19.el8

sssd-ldap

2.2.0-19.el8

sssd-libwbclient

2.2.0-19.el8

sssd-nfs-idmap

2.2.0-19.el8

sssd-polkit-rules

2.2.0-19.el8

sssd-proxy

2.2.0-19.el8

sssd-tools

2.2.0-19.el8

sssd-winbind-idmap

2.2.0-19.el8

Связанные CVE

Связанные уязвимости

CVSS3: 5.4
ubuntu
почти 7 лет назад

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.

CVSS3: 5.4
redhat
около 7 лет назад

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.

CVSS3: 5.4
nvd
почти 7 лет назад

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.

CVSS3: 5.4
debian
почти 7 лет назад

A flaw was found in sssd Group Policy Objects implementation. When the ...

suse-cvrf
больше 6 лет назад

Security update for sssd