Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | authconfig | 0:6.2.8-30.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::client | authconfig-debuginfo | 0:6.2.8-30.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::client | authconfig-gtk | 0:6.2.8-30.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | authconfig | 0:6.2.8-30.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | authconfig-debuginfo | 0:6.2.8-30.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | authconfig-gtk | 0:6.2.8-30.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | authconfig | 0:6.2.8-30.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | authconfig-debuginfo | 0:6.2.8-30.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | authconfig-gtk | 0:6.2.8-30.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | authconfig | 0:6.2.8-30.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | authconfig-debuginfo | 0:6.2.8-30.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | authconfig-gtk | 0:6.2.8-30.el7 |
Vulnerabilities 1
-
Unscored —
Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote serve…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1329598
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1378943
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1441374
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1441604
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443949
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1449625
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1450425
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2285.json
-
report
https://access.redhat.com/security/cve/CVE-2017-7488
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-7488
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-7488