shield Security update for sssd

SUSE-SLE-Module-Basesystem-15-2019-1476

This update for sssd fixes the following issues: Security issue fixed: - CVE-2018-16838: Fixed an authentication bypass related to the Group Policy Objects implementation (bsc#1124194). Non-security issues fixed: - Allow defaults sudoRole without sudoUser attribute (bsc#1135247) - Missing GPOs directory could have led to login problems (bsc#1132879) - Fix a crash by adding a netgroup counter to struct nss_enum_index (bsc#1132657)

• Release Date
  Aug 22 2019
• References
  Bugzilla: 1124194, 1132879, 1135247, 1132657
  CVEs: CVE-2018-16838
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15 s390x

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  1.16.1-3.24.6 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  1.16.1-3.24.6 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  1.16.1-3.24.6 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  1.16.1-3.24.6 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  1.16.1-3.24.6 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  1.16.1-3.24.6 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  1.16.1-3.24.6 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  1.16.1-3.24.6 lock rpm

  libsss_simpleifp-devel
  Development files for the SSSD D-Bus responder helper library

  1.16.1-3.24.6 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  1.16.1-3.24.6 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  1.16.1-3.24.6 lock rpm

  sssd
  System Security Services Daemon

  1.16.1-3.24.6 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  1.16.1-3.24.6 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  1.16.1-3.24.6 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-tools
  Commandline tools for sssd

  1.16.1-3.24.6 lock rpm

  sssd-wbclient
  SSSD's implementation of the Winbind pipe protocol

  1.16.1-3.24.6 lock rpm

  sssd-wbclient-devel
  Development files for SSSD winbind

  1.16.1-3.24.6 lock rpm

Basesystem Module 15 aarch64

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  1.16.1-3.24.6 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  1.16.1-3.24.6 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  1.16.1-3.24.6 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  1.16.1-3.24.6 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  1.16.1-3.24.6 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  1.16.1-3.24.6 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  1.16.1-3.24.6 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  1.16.1-3.24.6 lock rpm

  libsss_simpleifp-devel
  Development files for the SSSD D-Bus responder helper library

  1.16.1-3.24.6 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  1.16.1-3.24.6 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  1.16.1-3.24.6 lock rpm

  sssd
  System Security Services Daemon

  1.16.1-3.24.6 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  1.16.1-3.24.6 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  1.16.1-3.24.6 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-tools
  Commandline tools for sssd

  1.16.1-3.24.6 lock rpm

  sssd-wbclient
  SSSD's implementation of the Winbind pipe protocol

  1.16.1-3.24.6 lock rpm

  sssd-wbclient-devel
  Development files for SSSD winbind

  1.16.1-3.24.6 lock rpm

Basesystem Module 15 ppc64le

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  1.16.1-3.24.6 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  1.16.1-3.24.6 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  1.16.1-3.24.6 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  1.16.1-3.24.6 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  1.16.1-3.24.6 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  1.16.1-3.24.6 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  1.16.1-3.24.6 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  1.16.1-3.24.6 lock rpm

  libsss_simpleifp-devel
  Development files for the SSSD D-Bus responder helper library

  1.16.1-3.24.6 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  1.16.1-3.24.6 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  1.16.1-3.24.6 lock rpm

  sssd
  System Security Services Daemon

  1.16.1-3.24.6 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  1.16.1-3.24.6 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  1.16.1-3.24.6 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-tools
  Commandline tools for sssd

  1.16.1-3.24.6 lock rpm

  sssd-wbclient
  SSSD's implementation of the Winbind pipe protocol

  1.16.1-3.24.6 lock rpm

  sssd-wbclient-devel
  Development files for SSSD winbind

  1.16.1-3.24.6 lock rpm

Basesystem Module 15 x86_64

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  1.16.1-3.24.6 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  1.16.1-3.24.6 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  1.16.1-3.24.6 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  1.16.1-3.24.6 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  1.16.1-3.24.6 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  1.16.1-3.24.6 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  1.16.1-3.24.6 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  1.16.1-3.24.6 lock rpm

  libsss_simpleifp-devel
  Development files for the SSSD D-Bus responder helper library

  1.16.1-3.24.6 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  1.16.1-3.24.6 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  1.16.1-3.24.6 lock rpm

  sssd
  System Security Services Daemon

  1.16.1-3.24.6 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  1.16.1-3.24.6 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  1.16.1-3.24.6 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  1.16.1-3.24.6 lock rpm

  sssd-tools
  Commandline tools for sssd

  1.16.1-3.24.6 lock rpm

  sssd-wbclient
  SSSD's implementation of the Winbind pipe protocol

  1.16.1-3.24.6 lock rpm

  sssd-wbclient-devel
  Development files for SSSD winbind

  1.16.1-3.24.6 lock rpm