Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:1477-1

Опубликовано: 12 июн. 2019
Источник: suse-cvrf

Описание

Security update for sssd

This update for sssd fixes the following issues:

Security issue fixed:

  • CVE-2018-16838: Fixed an authentication bypass related to the Group Policy Objects implementation (bsc#1124194).

Non-security issue fixed:

  • Create directory to download and cache GPOs (bsc#1132879)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3
libipa_hbac0-1.13.4-34.37.1
libsss_idmap0-1.13.4-34.37.1
libsss_nss_idmap0-1.13.4-34.37.1
libsss_sudo-1.13.4-34.37.1
python-sssd-config-1.13.4-34.37.1
sssd-1.13.4-34.37.1
sssd-ad-1.13.4-34.37.1
sssd-ipa-1.13.4-34.37.1
sssd-krb5-1.13.4-34.37.1
sssd-krb5-common-1.13.4-34.37.1
sssd-ldap-1.13.4-34.37.1
sssd-proxy-1.13.4-34.37.1
sssd-tools-1.13.4-34.37.1
SUSE Linux Enterprise Server 12 SP3
libipa_hbac0-1.13.4-34.37.1
libsss_idmap0-1.13.4-34.37.1
libsss_nss_idmap0-1.13.4-34.37.1
libsss_sudo-1.13.4-34.37.1
python-sssd-config-1.13.4-34.37.1
sssd-1.13.4-34.37.1
sssd-ad-1.13.4-34.37.1
sssd-ipa-1.13.4-34.37.1
sssd-krb5-1.13.4-34.37.1
sssd-krb5-common-1.13.4-34.37.1
sssd-ldap-1.13.4-34.37.1
sssd-proxy-1.13.4-34.37.1
sssd-tools-1.13.4-34.37.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libipa_hbac0-1.13.4-34.37.1
libsss_idmap0-1.13.4-34.37.1
libsss_nss_idmap0-1.13.4-34.37.1
libsss_sudo-1.13.4-34.37.1
python-sssd-config-1.13.4-34.37.1
sssd-1.13.4-34.37.1
sssd-ad-1.13.4-34.37.1
sssd-ipa-1.13.4-34.37.1
sssd-krb5-1.13.4-34.37.1
sssd-krb5-common-1.13.4-34.37.1
sssd-ldap-1.13.4-34.37.1
sssd-proxy-1.13.4-34.37.1
sssd-tools-1.13.4-34.37.1
SUSE Linux Enterprise Software Development Kit 12 SP3
libipa_hbac-devel-1.13.4-34.37.1
libsss_idmap-devel-1.13.4-34.37.1
libsss_nss_idmap-devel-1.13.4-34.37.1

Ссылки

Описание

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:libipa_hbac0-1.13.4-34.37.1
SUSE Linux Enterprise Desktop 12 SP3:libsss_idmap0-1.13.4-34.37.1
SUSE Linux Enterprise Desktop 12 SP3:libsss_nss_idmap0-1.13.4-34.37.1
SUSE Linux Enterprise Desktop 12 SP3:libsss_sudo-1.13.4-34.37.1
Ссылки
Уязвимость SUSE-SU-2019:1477-1