shield Security update for sssd

SUSE-SLE-SERVER-12-SP4-2019-556

This update for sssd fixes the following issues: Security vulnerabilities addressed: - Fix fallback_homedir returning '/' for empty home directories (CVE-2019-3811) (bsc#1121759) - Create sockets with right permissions (bsc#1098377, CVE-2018-10852) Other bug fixes and changes: - Install logrotate configuration (bsc#1004220) - Strip whitespaces in netgroup triples (bsc#1087320) - Align systemd service file with upstream * Run interactive and change service type to notify (bsc#1120852) * Replace deprecated '-f' and use '--logger'

• Release Date
  Mar 6 2019
• References
  Bugzilla: 1004220, 1121759, 1087320, 1098377, 1120852
  CVEs: CVE-2018-10852, CVE-2019-3811
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  libipa_hbac0
  FreeIPA HBAC Evaluator library

  1.16.1-4.3.2 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  1.16.1-4.3.2 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  1.16.1-4.3.2 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  1.16.1-4.3.2 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  1.16.1-4.3.2 lock rpm

  python-sssd-config
  Python API for configuring sssd

  1.16.1-4.3.2 lock rpm

  sssd
  System Security Services Daemon

  1.16.1-4.3.2 lock rpm lock src

  sssd-32bit
  System Security Services Daemon

  1.16.1-4.3.2 lock rpm

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  1.16.1-4.3.2 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-tools
  Commandline tools for sssd

  1.16.1-4.3.2 lock rpm

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  libipa_hbac0
  FreeIPA HBAC Evaluator library

  1.16.1-4.3.2 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  1.16.1-4.3.2 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  1.16.1-4.3.2 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  1.16.1-4.3.2 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  1.16.1-4.3.2 lock rpm

  python-sssd-config
  Python API for configuring sssd

  1.16.1-4.3.2 lock rpm

  sssd
  System Security Services Daemon

  1.16.1-4.3.2 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  1.16.1-4.3.2 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-tools
  Commandline tools for sssd

  1.16.1-4.3.2 lock rpm

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  libipa_hbac0
  FreeIPA HBAC Evaluator library

  1.16.1-4.3.2 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  1.16.1-4.3.2 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  1.16.1-4.3.2 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  1.16.1-4.3.2 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  1.16.1-4.3.2 lock rpm

  python-sssd-config
  Python API for configuring sssd

  1.16.1-4.3.2 lock rpm

  sssd
  System Security Services Daemon

  1.16.1-4.3.2 lock rpm lock src

  sssd-32bit
  System Security Services Daemon

  1.16.1-4.3.2 lock rpm

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  1.16.1-4.3.2 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-tools
  Commandline tools for sssd

  1.16.1-4.3.2 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  libipa_hbac0
  FreeIPA HBAC Evaluator library

  1.16.1-4.3.2 lock rpm

  libsss_certmap0
  FreeIPA ID mapping library

  1.16.1-4.3.2 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  1.16.1-4.3.2 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  1.16.1-4.3.2 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  1.16.1-4.3.2 lock rpm

  python-sssd-config
  Python API for configuring sssd

  1.16.1-4.3.2 lock rpm

  sssd
  System Security Services Daemon

  1.16.1-4.3.2 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  1.16.1-4.3.2 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  1.16.1-4.3.2 lock rpm

  sssd-tools
  Commandline tools for sssd

  1.16.1-4.3.2 lock rpm