Skip to content
OpenAdvisories
Medium ELSA-2017-3379 1 CVE

Moderate: sssd security and bug fix update (Oracle Linux 7)

Published Dec 4, 2017 · Updated Dec 4, 2017

Ecosystem: Oracle Linux

Summary

[1.15.2-50.8]
- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
list and a request that is using the list can
cause a segfault is sssd_nss [rhel-7.4.z]

[1.15.2-50.7]
- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
libldb >= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
searching in local cache database [rhel-7.4.z]

Fixed packages 34

ReleasePackageFixed in
Oracle Linux · 7 libipa_hbac 0:1.15.2-50.el7_4.8
Oracle Linux · 7 libipa_hbac-devel 0:1.15.2-50.el7_4.8
Oracle Linux · 7 libsss_autofs 0:1.15.2-50.el7_4.8
Oracle Linux · 7 libsss_certmap 0:1.15.2-50.el7_4.8
Oracle Linux · 7 libsss_certmap-devel 0:1.15.2-50.el7_4.8
Oracle Linux · 7 libsss_idmap 0:1.15.2-50.el7_4.8
Oracle Linux · 7 libsss_idmap-devel 0:1.15.2-50.el7_4.8
Oracle Linux · 7 libsss_nss_idmap 0:1.15.2-50.el7_4.8
Oracle Linux · 7 libsss_nss_idmap-devel 0:1.15.2-50.el7_4.8
Oracle Linux · 7 libsss_simpleifp 0:1.15.2-50.el7_4.8
Oracle Linux · 7 libsss_simpleifp-devel 0:1.15.2-50.el7_4.8
Oracle Linux · 7 libsss_sudo 0:1.15.2-50.el7_4.8
Oracle Linux · 7 python-libipa_hbac 0:1.15.2-50.el7_4.8
Oracle Linux · 7 python-libsss_nss_idmap 0:1.15.2-50.el7_4.8
Oracle Linux · 7 python-sss 0:1.15.2-50.el7_4.8
Oracle Linux · 7 python-sss-murmur 0:1.15.2-50.el7_4.8
Oracle Linux · 7 python-sssdconfig 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-ad 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-client 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-common 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-common-pac 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-dbus 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-ipa 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-kcm 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-krb5 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-krb5-common 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-ldap 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-libwbclient 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-libwbclient-devel 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-polkit-rules 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-proxy 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-tools 0:1.15.2-50.el7_4.8
Oracle Linux · 7 sssd-winbind-idmap 0:1.15.2-50.el7_4.8

Vulnerabilities 1