Summary
This update for sssd fixes the following issues:
- Fix a dependency loop by moving internal libraries to sssd-common package. (bsc#1182058)
- Moved sssctl command from sssd to sssd-tools package. (bsc#1184289)
- Create timestamp attribute in cache objects if missing. (bsc#1182637)
- Fix watchdog not terminating tasks. (bsc#1187120)
- Improve logs to record the reason why internal watchdog terminates.
- Fixed security issue with sssd: shell command injection in sssctl. (CVE-2021-3621, bsc#1189492)
- Fixes a segfault with newer libcares2 versions when the library fails to parse a dns name. (bsc#1190021)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 15 SP2 Linux Enterprise Module for Basesystem 15 SP2 | sssd | 1.16.1-17.14.1 |
Vulnerabilities 1
-
Unscored —
A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cac…