shield Security update for sssd

SUSE-SLE-Module-Basesystem-15-SP4-2022-2763

This update for sssd fixes the following issues: - CVE-2021-3621: Fixed shell command injection in sssctl via the logs-fetch and cache-expire subcommand (bsc#1189492). - Add 'ldap_ignore_unreadable_references' parameter to skip unreadable objects referenced by 'member' attributte (bsc#1190775) - Fix 32-bit libraries package. Libraries were moved from sssd to sssd-common but baselibs.conf was not updated accordingly (bsc#1182058, bsc#1196166) - Remove caches only when performing a package downgrade. The sssd daemon takes care of upgrading the database format when necessary (bsc#1195552)

• Release Date
  Aug 10 2022
• References
  Bugzilla: 1189492, 1195552, 1196166, 1182058, 1190775
  CVEs: CVE-2021-3621
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.4 s390x

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.5.2-150400.4.5.14 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.5.2-150400.4.5.14 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  2.5.2-150400.4.5.14 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  2.5.2-150400.4.5.14 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.5.2-150400.4.5.14 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.5.2-150400.4.5.14 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.5.2-150400.4.5.14 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.5.2-150400.4.5.14 lock rpm

  libsss_simpleifp-devel
  Development files for the SSSD D-Bus responder helper library

  2.5.2-150400.4.5.14 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  2.5.2-150400.4.5.14 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd
  System Security Services Daemon

  2.5.2-150400.4.5.14 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-common
  Common files for the SSSD

  2.5.2-150400.4.5.14 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.5.2-150400.4.5.14 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.5.2-150400.4.5.14 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.5.2-150400.4.5.14 lock rpm

Basesystem Module 15.4 aarch64

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.5.2-150400.4.5.14 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.5.2-150400.4.5.14 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  2.5.2-150400.4.5.14 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  2.5.2-150400.4.5.14 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.5.2-150400.4.5.14 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.5.2-150400.4.5.14 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.5.2-150400.4.5.14 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.5.2-150400.4.5.14 lock rpm

  libsss_simpleifp-devel
  Development files for the SSSD D-Bus responder helper library

  2.5.2-150400.4.5.14 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  2.5.2-150400.4.5.14 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd
  System Security Services Daemon

  2.5.2-150400.4.5.14 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-common
  Common files for the SSSD

  2.5.2-150400.4.5.14 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.5.2-150400.4.5.14 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.5.2-150400.4.5.14 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.5.2-150400.4.5.14 lock rpm

Basesystem Module 15.4 x86_64

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.5.2-150400.4.5.14 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.5.2-150400.4.5.14 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  2.5.2-150400.4.5.14 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  2.5.2-150400.4.5.14 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.5.2-150400.4.5.14 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.5.2-150400.4.5.14 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.5.2-150400.4.5.14 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.5.2-150400.4.5.14 lock rpm

  libsss_simpleifp-devel
  Development files for the SSSD D-Bus responder helper library

  2.5.2-150400.4.5.14 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  2.5.2-150400.4.5.14 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd
  System Security Services Daemon

  2.5.2-150400.4.5.14 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-common
  Common files for the SSSD

  2.5.2-150400.4.5.14 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.5.2-150400.4.5.14 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.5.2-150400.4.5.14 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.5.2-150400.4.5.14 lock rpm

Basesystem Module 15.4 ppc64le

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.5.2-150400.4.5.14 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.5.2-150400.4.5.14 lock rpm

  libsss_certmap-devel
  Development files for the FreeIPA certmap library

  2.5.2-150400.4.5.14 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  2.5.2-150400.4.5.14 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.5.2-150400.4.5.14 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.5.2-150400.4.5.14 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.5.2-150400.4.5.14 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.5.2-150400.4.5.14 lock rpm

  libsss_simpleifp-devel
  Development files for the SSSD D-Bus responder helper library

  2.5.2-150400.4.5.14 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  2.5.2-150400.4.5.14 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd
  System Security Services Daemon

  2.5.2-150400.4.5.14 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-common
  Common files for the SSSD

  2.5.2-150400.4.5.14 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.5.2-150400.4.5.14 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.5.2-150400.4.5.14 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.5.2-150400.4.5.14 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.5.2-150400.4.5.14 lock rpm