Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:2579-1

Опубликовано: 20 окт. 2016
Источник: suse-cvrf

Описание

Security update for sssd

This update for sssd fixes one security issue and three bugs.

The following vulnerability was fixed:

  • CVE-2014-0249: Incorrect expansion of group membership when encountering a non-POSIX group. (bsc#880245)

The following non-security fixes were also included:

  • Prevent crashes of statically linked binaries using getpwuid when sssd is used and nscd is turned off or has caching disabled. (bsc#993582)
  • Add logrotate configuration to prevent log files from growing too large when running with debug mode enabled. (bsc#1004220)
  • Order sudo rules by the same logic used by the native LDAP support from sudo. (bsc#1002973)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP1
libipa_hbac0-1.11.5.1-28.1
libsss_idmap0-1.11.5.1-28.1
libsss_sudo-1.11.5.1-28.1
python-sssd-config-1.11.5.1-28.1
sssd-1.11.5.1-28.1
sssd-32bit-1.11.5.1-28.1
sssd-ad-1.11.5.1-28.1
sssd-ipa-1.11.5.1-28.1
sssd-krb5-1.11.5.1-28.1
sssd-krb5-common-1.11.5.1-28.1
sssd-ldap-1.11.5.1-28.1
sssd-proxy-1.11.5.1-28.1
sssd-tools-1.11.5.1-28.1
SUSE Linux Enterprise Server 12 SP1
libipa_hbac0-1.11.5.1-28.1
libsss_idmap0-1.11.5.1-28.1
libsss_sudo-1.11.5.1-28.1
python-sssd-config-1.11.5.1-28.1
sssd-1.11.5.1-28.1
sssd-32bit-1.11.5.1-28.1
sssd-ad-1.11.5.1-28.1
sssd-ipa-1.11.5.1-28.1
sssd-krb5-1.11.5.1-28.1
sssd-krb5-common-1.11.5.1-28.1
sssd-ldap-1.11.5.1-28.1
sssd-proxy-1.11.5.1-28.1
sssd-tools-1.11.5.1-28.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libipa_hbac0-1.11.5.1-28.1
libsss_idmap0-1.11.5.1-28.1
libsss_sudo-1.11.5.1-28.1
python-sssd-config-1.11.5.1-28.1
sssd-1.11.5.1-28.1
sssd-32bit-1.11.5.1-28.1
sssd-ad-1.11.5.1-28.1
sssd-ipa-1.11.5.1-28.1
sssd-krb5-1.11.5.1-28.1
sssd-krb5-common-1.11.5.1-28.1
sssd-ldap-1.11.5.1-28.1
sssd-proxy-1.11.5.1-28.1
sssd-tools-1.11.5.1-28.1
SUSE Linux Enterprise Software Development Kit 12 SP1
libipa_hbac-devel-1.11.5.1-28.1
libsss_idmap-devel-1.11.5.1-28.1
libsss_nss_idmap-devel-1.11.5.1-28.1
libsss_nss_idmap0-1.11.5.1-28.1

Ссылки

Описание

The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libipa_hbac0-1.11.5.1-28.1
SUSE Linux Enterprise Desktop 12 SP1:libsss_idmap0-1.11.5.1-28.1
SUSE Linux Enterprise Desktop 12 SP1:libsss_sudo-1.11.5.1-28.1
SUSE Linux Enterprise Desktop 12 SP1:python-sssd-config-1.11.5.1-28.1
Ссылки