Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:1476-1

Опубликовано: 22 авг. 2019
Источник: suse-cvrf

Описание

Security update for sssd

This update for sssd fixes the following issues:

Security issue fixed:

  • CVE-2018-16838: Fixed an authentication bypass related to the Group Policy Objects implementation (bsc#1124194).

Non-security issues fixed:

  • Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
  • Missing GPOs directory could have led to login problems (bsc#1132879)
  • Fix a crash by adding a netgroup counter to struct nss_enum_index (bsc#1132657)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15
libipa_hbac-devel-1.16.1-3.24.6
libipa_hbac0-1.16.1-3.24.6
libsss_certmap-devel-1.16.1-3.24.6
libsss_certmap0-1.16.1-3.24.6
libsss_idmap-devel-1.16.1-3.24.6
libsss_idmap0-1.16.1-3.24.6
libsss_nss_idmap-devel-1.16.1-3.24.6
libsss_nss_idmap0-1.16.1-3.24.6
libsss_simpleifp-devel-1.16.1-3.24.6
libsss_simpleifp0-1.16.1-3.24.6
python3-sssd-config-1.16.1-3.24.6
sssd-1.16.1-3.24.6
sssd-ad-1.16.1-3.24.6
sssd-dbus-1.16.1-3.24.6
sssd-ipa-1.16.1-3.24.6
sssd-krb5-1.16.1-3.24.6
sssd-krb5-common-1.16.1-3.24.6
sssd-ldap-1.16.1-3.24.6
sssd-proxy-1.16.1-3.24.6
sssd-tools-1.16.1-3.24.6
sssd-wbclient-1.16.1-3.24.6
sssd-wbclient-devel-1.16.1-3.24.6
SUSE Linux Enterprise Module for Basesystem 15 SP1
libipa_hbac-devel-1.16.1-3.24.6
libipa_hbac0-1.16.1-3.24.6
libsss_certmap-devel-1.16.1-3.24.6
libsss_certmap0-1.16.1-3.24.6
libsss_idmap-devel-1.16.1-3.24.6
libsss_idmap0-1.16.1-3.24.6
libsss_nss_idmap-devel-1.16.1-3.24.6
libsss_nss_idmap0-1.16.1-3.24.6
libsss_simpleifp-devel-1.16.1-3.24.6
libsss_simpleifp0-1.16.1-3.24.6
python3-sssd-config-1.16.1-3.24.6
sssd-1.16.1-3.24.6
sssd-ad-1.16.1-3.24.6
sssd-dbus-1.16.1-3.24.6
sssd-ipa-1.16.1-3.24.6
sssd-krb5-1.16.1-3.24.6
sssd-krb5-common-1.16.1-3.24.6
sssd-ldap-1.16.1-3.24.6
sssd-proxy-1.16.1-3.24.6
sssd-tools-1.16.1-3.24.6
sssd-wbclient-1.16.1-3.24.6
sssd-wbclient-devel-1.16.1-3.24.6

Ссылки

Описание

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP1:libipa_hbac-devel-1.16.1-3.24.6
SUSE Linux Enterprise Module for Basesystem 15 SP1:libipa_hbac0-1.16.1-3.24.6
SUSE Linux Enterprise Module for Basesystem 15 SP1:libsss_certmap-devel-1.16.1-3.24.6
SUSE Linux Enterprise Module for Basesystem 15 SP1:libsss_certmap0-1.16.1-3.24.6
Ссылки
Уязвимость SUSE-SU-2019:1476-1