SUSE-SU-2022:0826-1

Опубликовано: 14 мар. 2022

Источник: suse-cvrf

Описание

Security update for sssd

This update for sssd fixes the following issues:

Security issues fixed:

CVE-2021-3621: Fixed shell command injection in sssctl via the logs-fetch and cache-expire subcommands (bsc#1189492).

Non-security issues fixed:

Create timestamp attribute in cache objects if missing. (bsc#1182637)
Add 'ldap_ignore_unreadable_references' parameter to skip unreadable objects referenced by 'member' attributte (bsc#1190775).

Список пакетов

SUSE Enterprise Storage 6

libipa_hbac-devel-1.16.1-8.64.1

libipa_hbac0-1.16.1-8.64.1

libsss_certmap-devel-1.16.1-8.64.1

libsss_certmap0-1.16.1-8.64.1

libsss_idmap-devel-1.16.1-8.64.1

libsss_idmap0-1.16.1-8.64.1

libsss_nss_idmap-devel-1.16.1-8.64.1

libsss_nss_idmap0-1.16.1-8.64.1

libsss_simpleifp-devel-1.16.1-8.64.1

libsss_simpleifp0-1.16.1-8.64.1

python3-sssd-config-1.16.1-8.64.1

sssd-1.16.1-8.64.1

sssd-32bit-1.16.1-8.64.1

sssd-ad-1.16.1-8.64.1

sssd-dbus-1.16.1-8.64.1

sssd-ipa-1.16.1-8.64.1

sssd-krb5-1.16.1-8.64.1

sssd-krb5-common-1.16.1-8.64.1

sssd-ldap-1.16.1-8.64.1

sssd-proxy-1.16.1-8.64.1

sssd-tools-1.16.1-8.64.1

sssd-wbclient-1.16.1-8.64.1

sssd-wbclient-devel-1.16.1-8.64.1

sssd-winbind-idmap-1.16.1-8.64.1

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

libipa_hbac-devel-1.16.1-8.64.1

libipa_hbac0-1.16.1-8.64.1

libsss_certmap-devel-1.16.1-8.64.1

libsss_certmap0-1.16.1-8.64.1

libsss_idmap-devel-1.16.1-8.64.1

libsss_idmap0-1.16.1-8.64.1

libsss_nss_idmap-devel-1.16.1-8.64.1

libsss_nss_idmap0-1.16.1-8.64.1

libsss_simpleifp-devel-1.16.1-8.64.1

libsss_simpleifp0-1.16.1-8.64.1

python3-sssd-config-1.16.1-8.64.1

sssd-1.16.1-8.64.1

sssd-32bit-1.16.1-8.64.1

sssd-ad-1.16.1-8.64.1

sssd-dbus-1.16.1-8.64.1

sssd-ipa-1.16.1-8.64.1

sssd-krb5-1.16.1-8.64.1

sssd-krb5-common-1.16.1-8.64.1

sssd-ldap-1.16.1-8.64.1

sssd-proxy-1.16.1-8.64.1

sssd-tools-1.16.1-8.64.1

sssd-wbclient-1.16.1-8.64.1

sssd-wbclient-devel-1.16.1-8.64.1

sssd-winbind-idmap-1.16.1-8.64.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

libipa_hbac-devel-1.16.1-8.64.1

libipa_hbac0-1.16.1-8.64.1

libsss_certmap-devel-1.16.1-8.64.1

libsss_certmap0-1.16.1-8.64.1

libsss_idmap-devel-1.16.1-8.64.1

libsss_idmap0-1.16.1-8.64.1

libsss_nss_idmap-devel-1.16.1-8.64.1

libsss_nss_idmap0-1.16.1-8.64.1

libsss_simpleifp-devel-1.16.1-8.64.1

libsss_simpleifp0-1.16.1-8.64.1

python3-sssd-config-1.16.1-8.64.1

sssd-1.16.1-8.64.1

sssd-32bit-1.16.1-8.64.1

sssd-ad-1.16.1-8.64.1

sssd-dbus-1.16.1-8.64.1

sssd-ipa-1.16.1-8.64.1

sssd-krb5-1.16.1-8.64.1

sssd-krb5-common-1.16.1-8.64.1

sssd-ldap-1.16.1-8.64.1

sssd-proxy-1.16.1-8.64.1

sssd-tools-1.16.1-8.64.1

sssd-wbclient-1.16.1-8.64.1

sssd-wbclient-devel-1.16.1-8.64.1

sssd-winbind-idmap-1.16.1-8.64.1

SUSE Linux Enterprise High Performance Computing 15-ESPOS

libipa_hbac-devel-1.16.1-8.64.1

libipa_hbac0-1.16.1-8.64.1

libsss_certmap-devel-1.16.1-8.64.1

libsss_certmap0-1.16.1-8.64.1

libsss_idmap-devel-1.16.1-8.64.1

libsss_idmap0-1.16.1-8.64.1

libsss_nss_idmap-devel-1.16.1-8.64.1

libsss_nss_idmap0-1.16.1-8.64.1

libsss_simpleifp-devel-1.16.1-8.64.1

libsss_simpleifp0-1.16.1-8.64.1

python3-sssd-config-1.16.1-8.64.1

sssd-1.16.1-8.64.1

sssd-32bit-1.16.1-8.64.1

sssd-ad-1.16.1-8.64.1

sssd-dbus-1.16.1-8.64.1

sssd-ipa-1.16.1-8.64.1

sssd-krb5-1.16.1-8.64.1

sssd-krb5-common-1.16.1-8.64.1

sssd-ldap-1.16.1-8.64.1

sssd-proxy-1.16.1-8.64.1

sssd-tools-1.16.1-8.64.1

sssd-wbclient-1.16.1-8.64.1

sssd-wbclient-devel-1.16.1-8.64.1

SUSE Linux Enterprise High Performance Computing 15-LTSS

libipa_hbac-devel-1.16.1-8.64.1

libipa_hbac0-1.16.1-8.64.1

libsss_certmap-devel-1.16.1-8.64.1

libsss_certmap0-1.16.1-8.64.1

libsss_idmap-devel-1.16.1-8.64.1

libsss_idmap0-1.16.1-8.64.1

libsss_nss_idmap-devel-1.16.1-8.64.1

libsss_nss_idmap0-1.16.1-8.64.1

libsss_simpleifp-devel-1.16.1-8.64.1

libsss_simpleifp0-1.16.1-8.64.1

python3-sssd-config-1.16.1-8.64.1

sssd-1.16.1-8.64.1

sssd-32bit-1.16.1-8.64.1

sssd-ad-1.16.1-8.64.1

sssd-dbus-1.16.1-8.64.1

sssd-ipa-1.16.1-8.64.1

sssd-krb5-1.16.1-8.64.1

sssd-krb5-common-1.16.1-8.64.1

sssd-ldap-1.16.1-8.64.1

sssd-proxy-1.16.1-8.64.1

sssd-tools-1.16.1-8.64.1

sssd-wbclient-1.16.1-8.64.1

sssd-wbclient-devel-1.16.1-8.64.1

SUSE Linux Enterprise Server 15 SP1-BCL

libipa_hbac-devel-1.16.1-8.64.1

libipa_hbac0-1.16.1-8.64.1

libsss_certmap-devel-1.16.1-8.64.1

libsss_certmap0-1.16.1-8.64.1

libsss_idmap-devel-1.16.1-8.64.1

libsss_idmap0-1.16.1-8.64.1

libsss_nss_idmap-devel-1.16.1-8.64.1

libsss_nss_idmap0-1.16.1-8.64.1

libsss_simpleifp-devel-1.16.1-8.64.1

libsss_simpleifp0-1.16.1-8.64.1

python3-sssd-config-1.16.1-8.64.1

sssd-1.16.1-8.64.1

sssd-32bit-1.16.1-8.64.1

sssd-ad-1.16.1-8.64.1

sssd-dbus-1.16.1-8.64.1

sssd-ipa-1.16.1-8.64.1

sssd-krb5-1.16.1-8.64.1

sssd-krb5-common-1.16.1-8.64.1

sssd-ldap-1.16.1-8.64.1

sssd-proxy-1.16.1-8.64.1

sssd-tools-1.16.1-8.64.1

sssd-wbclient-1.16.1-8.64.1

sssd-wbclient-devel-1.16.1-8.64.1

sssd-winbind-idmap-1.16.1-8.64.1

SUSE Linux Enterprise Server 15 SP1-LTSS

libipa_hbac-devel-1.16.1-8.64.1

libipa_hbac0-1.16.1-8.64.1

libsss_certmap-devel-1.16.1-8.64.1

libsss_certmap0-1.16.1-8.64.1

libsss_idmap-devel-1.16.1-8.64.1

libsss_idmap0-1.16.1-8.64.1

libsss_nss_idmap-devel-1.16.1-8.64.1

libsss_nss_idmap0-1.16.1-8.64.1

libsss_simpleifp-devel-1.16.1-8.64.1

libsss_simpleifp0-1.16.1-8.64.1

python3-sssd-config-1.16.1-8.64.1

sssd-1.16.1-8.64.1

sssd-32bit-1.16.1-8.64.1

sssd-ad-1.16.1-8.64.1

sssd-dbus-1.16.1-8.64.1

sssd-ipa-1.16.1-8.64.1

sssd-krb5-1.16.1-8.64.1

sssd-krb5-common-1.16.1-8.64.1

sssd-ldap-1.16.1-8.64.1

sssd-proxy-1.16.1-8.64.1

sssd-tools-1.16.1-8.64.1

sssd-wbclient-1.16.1-8.64.1

sssd-wbclient-devel-1.16.1-8.64.1

sssd-winbind-idmap-1.16.1-8.64.1

SUSE Linux Enterprise Server 15-LTSS

libipa_hbac-devel-1.16.1-8.64.1

libipa_hbac0-1.16.1-8.64.1

libsss_certmap-devel-1.16.1-8.64.1

libsss_certmap0-1.16.1-8.64.1

libsss_idmap-devel-1.16.1-8.64.1

libsss_idmap0-1.16.1-8.64.1

libsss_nss_idmap-devel-1.16.1-8.64.1

libsss_nss_idmap0-1.16.1-8.64.1

libsss_simpleifp-devel-1.16.1-8.64.1

libsss_simpleifp0-1.16.1-8.64.1

python3-sssd-config-1.16.1-8.64.1

sssd-1.16.1-8.64.1

sssd-32bit-1.16.1-8.64.1

sssd-ad-1.16.1-8.64.1

sssd-dbus-1.16.1-8.64.1

sssd-ipa-1.16.1-8.64.1

sssd-krb5-1.16.1-8.64.1

sssd-krb5-common-1.16.1-8.64.1

sssd-ldap-1.16.1-8.64.1

sssd-proxy-1.16.1-8.64.1

sssd-tools-1.16.1-8.64.1

sssd-wbclient-1.16.1-8.64.1

sssd-wbclient-devel-1.16.1-8.64.1

SUSE Linux Enterprise Server for SAP Applications 15

libipa_hbac-devel-1.16.1-8.64.1

libipa_hbac0-1.16.1-8.64.1

libsss_certmap-devel-1.16.1-8.64.1

libsss_certmap0-1.16.1-8.64.1

libsss_idmap-devel-1.16.1-8.64.1

libsss_idmap0-1.16.1-8.64.1

libsss_nss_idmap-devel-1.16.1-8.64.1

libsss_nss_idmap0-1.16.1-8.64.1

libsss_simpleifp-devel-1.16.1-8.64.1

libsss_simpleifp0-1.16.1-8.64.1

python3-sssd-config-1.16.1-8.64.1

sssd-1.16.1-8.64.1

sssd-32bit-1.16.1-8.64.1

sssd-ad-1.16.1-8.64.1

sssd-dbus-1.16.1-8.64.1

sssd-ipa-1.16.1-8.64.1

sssd-krb5-1.16.1-8.64.1

sssd-krb5-common-1.16.1-8.64.1

sssd-ldap-1.16.1-8.64.1

sssd-proxy-1.16.1-8.64.1

sssd-tools-1.16.1-8.64.1

sssd-wbclient-1.16.1-8.64.1

sssd-wbclient-devel-1.16.1-8.64.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

libipa_hbac-devel-1.16.1-8.64.1

libipa_hbac0-1.16.1-8.64.1

libsss_certmap-devel-1.16.1-8.64.1

libsss_certmap0-1.16.1-8.64.1

libsss_idmap-devel-1.16.1-8.64.1

libsss_idmap0-1.16.1-8.64.1

libsss_nss_idmap-devel-1.16.1-8.64.1

libsss_nss_idmap0-1.16.1-8.64.1

libsss_simpleifp-devel-1.16.1-8.64.1

libsss_simpleifp0-1.16.1-8.64.1

python3-sssd-config-1.16.1-8.64.1

sssd-1.16.1-8.64.1

sssd-32bit-1.16.1-8.64.1

sssd-ad-1.16.1-8.64.1

sssd-dbus-1.16.1-8.64.1

sssd-ipa-1.16.1-8.64.1

sssd-krb5-1.16.1-8.64.1

sssd-krb5-common-1.16.1-8.64.1

sssd-ldap-1.16.1-8.64.1

sssd-proxy-1.16.1-8.64.1

sssd-tools-1.16.1-8.64.1

sssd-wbclient-1.16.1-8.64.1

sssd-wbclient-devel-1.16.1-8.64.1

sssd-winbind-idmap-1.16.1-8.64.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20220826-1/
Link for SUSE-SU-2022:0826-1
https://lists.suse.com/pipermail/sle-security-updates/2022-March/010431.html
E-Mail link for SUSE-SU-2022:0826-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1182637
SUSE Bug 1182637
https://bugzilla.suse.com/1189492
SUSE Bug 1189492
https://bugzilla.suse.com/1190775
SUSE Bug 1190775
https://www.suse.com/security/cve/CVE-2021-3621/
SUSE CVE CVE-2021-3621 page

Описание

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Затронутые продукты

SUSE Enterprise Storage 6:libipa_hbac-devel-1.16.1-8.64.1

SUSE Enterprise Storage 6:libipa_hbac0-1.16.1-8.64.1

SUSE Enterprise Storage 6:libsss_certmap-devel-1.16.1-8.64.1

SUSE Enterprise Storage 6:libsss_certmap0-1.16.1-8.64.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-3621.html
CVE-2021-3621
https://bugzilla.suse.com/1189492
SUSE Bug 1189492

SUSE-SU-2022:0826-1

Описание

Список пакетов

SUSE Enterprise Storage 6

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

SUSE Linux Enterprise High Performance Computing 15-ESPOS

SUSE Linux Enterprise High Performance Computing 15-LTSS

SUSE Linux Enterprise Server 15 SP1-BCL

SUSE Linux Enterprise Server 15 SP1-LTSS

SUSE Linux Enterprise Server 15-LTSS

SUSE Linux Enterprise Server for SAP Applications 15

SUSE Linux Enterprise Server for SAP Applications 15 SP1

Ссылки

Уязвимость: CVE-2021-3621

Описание

Затронутые продукты

Ссылки