Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-10852: The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD utilizes too broad of a set of permissions. Any user who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. 1588810: CVE-2018-10852 sssd: information leak from the sssd-sudo responder
Fixed packages 35
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libipa_hbac | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | libipa_hbac-devel | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | libsss_autofs | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | libsss_certmap | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | libsss_certmap-devel | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | libsss_idmap | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | libsss_idmap-devel | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | libsss_nss_idmap | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | libsss_nss_idmap-devel | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | libsss_simpleifp | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | libsss_simpleifp-devel | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | libsss_sudo | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | python-libipa_hbac | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | python-libsss_nss_idmap | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | python-sss | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | python-sss-murmur | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | python-sssdconfig | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-ad | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-client | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-common | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-common-pac | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-dbus | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-debuginfo | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-ipa | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-kcm | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-krb5 | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-krb5-common | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-ldap | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-libwbclient | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-libwbclient-devel | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-polkit-rules | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-proxy | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-tools | 0:1.16.2-13.amzn2.0.1 |
| Amazon Linux · 2 | sssd-winbind-idmap | 0:1.16.2-13.amzn2.0.1 |
Vulnerabilities 1
-
Low 3.8
The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, whi…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-10852.html