What Are You Looking For?

Sign Up

   SUSE Security Update: Security update for sssd
______________________________________________________________________________

Announcement ID:    SUSE-SU-2022:1258-1
Rating:             important
References:         #1183735 #1189492 #1196564 SLE-17773 
Cross-References:   CVE-2021-3621
CVSS scores:
                    CVE-2021-3621 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
                    CVE-2021-3621 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected Products:
                    SUSE Linux Enterprise Server 12-SP4-LTSS
                    SUSE Linux Enterprise Server for SAP 12-SP4
                    SUSE OpenStack Cloud 9
                    SUSE OpenStack Cloud Crowbar 9
______________________________________________________________________________

   An update that solves one vulnerability, contains one
   feature and has two fixes is now available.

Description:

   This update for sssd fixes the following issues:

   - CVE-2021-3621: Fixed shell command injection in sssctl via the
     logs-fetch and cache-expire subcommands (bsc#1189492).
   - Add LDAPS support for the AD provider (bsc#1183735)(jsc#SLE-17773).

   Non-security fixes:

   - Fixed a crash caused by calling dbus_watch_handle with a corrupted
     memory value (bsc#1196564).


Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE OpenStack Cloud Crowbar 9:

      zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-1258=1

   - SUSE OpenStack Cloud 9:

      zypper in -t patch SUSE-OpenStack-Cloud-9-2022-1258=1

   - SUSE Linux Enterprise Server for SAP 12-SP4:

      zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-1258=1

   - SUSE Linux Enterprise Server 12-SP4-LTSS:

      zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-1258=1



Package List:

   - SUSE OpenStack Cloud Crowbar 9 (x86_64):

      libipa_hbac0-1.16.1-4.40.1
      libipa_hbac0-debuginfo-1.16.1-4.40.1
      libsss_certmap0-1.16.1-4.40.1
      libsss_certmap0-debuginfo-1.16.1-4.40.1
      libsss_idmap0-1.16.1-4.40.1
      libsss_idmap0-debuginfo-1.16.1-4.40.1
      libsss_nss_idmap0-1.16.1-4.40.1
      libsss_nss_idmap0-debuginfo-1.16.1-4.40.1
      libsss_simpleifp0-1.16.1-4.40.1
      libsss_simpleifp0-debuginfo-1.16.1-4.40.1
      python-sssd-config-1.16.1-4.40.1
      python-sssd-config-debuginfo-1.16.1-4.40.1
      sssd-1.16.1-4.40.1
      sssd-32bit-1.16.1-4.40.1
      sssd-ad-1.16.1-4.40.1
      sssd-ad-debuginfo-1.16.1-4.40.1
      sssd-dbus-1.16.1-4.40.1
      sssd-dbus-debuginfo-1.16.1-4.40.1
      sssd-debuginfo-1.16.1-4.40.1
      sssd-debuginfo-32bit-1.16.1-4.40.1
      sssd-debugsource-1.16.1-4.40.1
      sssd-ipa-1.16.1-4.40.1
      sssd-ipa-debuginfo-1.16.1-4.40.1
      sssd-krb5-1.16.1-4.40.1
      sssd-krb5-common-1.16.1-4.40.1
      sssd-krb5-common-debuginfo-1.16.1-4.40.1
      sssd-krb5-debuginfo-1.16.1-4.40.1
      sssd-ldap-1.16.1-4.40.1
      sssd-ldap-debuginfo-1.16.1-4.40.1
      sssd-proxy-1.16.1-4.40.1
      sssd-proxy-debuginfo-1.16.1-4.40.1
      sssd-tools-1.16.1-4.40.1
      sssd-tools-debuginfo-1.16.1-4.40.1

   - SUSE OpenStack Cloud 9 (x86_64):

      libipa_hbac0-1.16.1-4.40.1
      libipa_hbac0-debuginfo-1.16.1-4.40.1
      libsss_certmap0-1.16.1-4.40.1
      libsss_certmap0-debuginfo-1.16.1-4.40.1
      libsss_idmap0-1.16.1-4.40.1
      libsss_idmap0-debuginfo-1.16.1-4.40.1
      libsss_nss_idmap0-1.16.1-4.40.1
      libsss_nss_idmap0-debuginfo-1.16.1-4.40.1
      libsss_simpleifp0-1.16.1-4.40.1
      libsss_simpleifp0-debuginfo-1.16.1-4.40.1
      python-sssd-config-1.16.1-4.40.1
      python-sssd-config-debuginfo-1.16.1-4.40.1
      sssd-1.16.1-4.40.1
      sssd-32bit-1.16.1-4.40.1
      sssd-ad-1.16.1-4.40.1
      sssd-ad-debuginfo-1.16.1-4.40.1
      sssd-dbus-1.16.1-4.40.1
      sssd-dbus-debuginfo-1.16.1-4.40.1
      sssd-debuginfo-1.16.1-4.40.1
      sssd-debuginfo-32bit-1.16.1-4.40.1
      sssd-debugsource-1.16.1-4.40.1
      sssd-ipa-1.16.1-4.40.1
      sssd-ipa-debuginfo-1.16.1-4.40.1
      sssd-krb5-1.16.1-4.40.1
      sssd-krb5-common-1.16.1-4.40.1
      sssd-krb5-common-debuginfo-1.16.1-4.40.1
      sssd-krb5-debuginfo-1.16.1-4.40.1
      sssd-ldap-1.16.1-4.40.1
      sssd-ldap-debuginfo-1.16.1-4.40.1
      sssd-proxy-1.16.1-4.40.1
      sssd-proxy-debuginfo-1.16.1-4.40.1
      sssd-tools-1.16.1-4.40.1
      sssd-tools-debuginfo-1.16.1-4.40.1

   - SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64):

      libipa_hbac0-1.16.1-4.40.1
      libipa_hbac0-debuginfo-1.16.1-4.40.1
      libsss_certmap0-1.16.1-4.40.1
      libsss_certmap0-debuginfo-1.16.1-4.40.1
      libsss_idmap0-1.16.1-4.40.1
      libsss_idmap0-debuginfo-1.16.1-4.40.1
      libsss_nss_idmap0-1.16.1-4.40.1
      libsss_nss_idmap0-debuginfo-1.16.1-4.40.1
      libsss_simpleifp0-1.16.1-4.40.1
      libsss_simpleifp0-debuginfo-1.16.1-4.40.1
      python-sssd-config-1.16.1-4.40.1
      python-sssd-config-debuginfo-1.16.1-4.40.1
      sssd-1.16.1-4.40.1
      sssd-ad-1.16.1-4.40.1
      sssd-ad-debuginfo-1.16.1-4.40.1
      sssd-dbus-1.16.1-4.40.1
      sssd-dbus-debuginfo-1.16.1-4.40.1
      sssd-debuginfo-1.16.1-4.40.1
      sssd-debugsource-1.16.1-4.40.1
      sssd-ipa-1.16.1-4.40.1
      sssd-ipa-debuginfo-1.16.1-4.40.1
      sssd-krb5-1.16.1-4.40.1
      sssd-krb5-common-1.16.1-4.40.1
      sssd-krb5-common-debuginfo-1.16.1-4.40.1
      sssd-krb5-debuginfo-1.16.1-4.40.1
      sssd-ldap-1.16.1-4.40.1
      sssd-ldap-debuginfo-1.16.1-4.40.1
      sssd-proxy-1.16.1-4.40.1
      sssd-proxy-debuginfo-1.16.1-4.40.1
      sssd-tools-1.16.1-4.40.1
      sssd-tools-debuginfo-1.16.1-4.40.1

   - SUSE Linux Enterprise Server for SAP 12-SP4 (x86_64):

      sssd-32bit-1.16.1-4.40.1
      sssd-debuginfo-32bit-1.16.1-4.40.1

   - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64):

      libipa_hbac0-1.16.1-4.40.1
      libipa_hbac0-debuginfo-1.16.1-4.40.1
      libsss_certmap0-1.16.1-4.40.1
      libsss_certmap0-debuginfo-1.16.1-4.40.1
      libsss_idmap0-1.16.1-4.40.1
      libsss_idmap0-debuginfo-1.16.1-4.40.1
      libsss_nss_idmap0-1.16.1-4.40.1
      libsss_nss_idmap0-debuginfo-1.16.1-4.40.1
      libsss_simpleifp0-1.16.1-4.40.1
      libsss_simpleifp0-debuginfo-1.16.1-4.40.1
      python-sssd-config-1.16.1-4.40.1
      python-sssd-config-debuginfo-1.16.1-4.40.1
      sssd-1.16.1-4.40.1
      sssd-ad-1.16.1-4.40.1
      sssd-ad-debuginfo-1.16.1-4.40.1
      sssd-dbus-1.16.1-4.40.1
      sssd-dbus-debuginfo-1.16.1-4.40.1
      sssd-debuginfo-1.16.1-4.40.1
      sssd-debugsource-1.16.1-4.40.1
      sssd-ipa-1.16.1-4.40.1
      sssd-ipa-debuginfo-1.16.1-4.40.1
      sssd-krb5-1.16.1-4.40.1
      sssd-krb5-common-1.16.1-4.40.1
      sssd-krb5-common-debuginfo-1.16.1-4.40.1
      sssd-krb5-debuginfo-1.16.1-4.40.1
      sssd-ldap-1.16.1-4.40.1
      sssd-ldap-debuginfo-1.16.1-4.40.1
      sssd-proxy-1.16.1-4.40.1
      sssd-proxy-debuginfo-1.16.1-4.40.1
      sssd-tools-1.16.1-4.40.1
      sssd-tools-debuginfo-1.16.1-4.40.1

   - SUSE Linux Enterprise Server 12-SP4-LTSS (s390x x86_64):

      sssd-32bit-1.16.1-4.40.1
      sssd-debuginfo-32bit-1.16.1-4.40.1

   - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64):

      libsss_nss_idmap-devel-1.16.1-4.40.1

   - SUSE Linux Enterprise Server 12-SP4-LTSS (s390x):

      libsss_idmap-devel-1.16.1-4.40.1


References:

   https://www.suse.com/security/cve/CVE-2021-3621.html
   https://bugzilla.suse.com/1183735
   https://bugzilla.suse.com/1189492
   https://bugzilla.suse.com/1196564

SUSE: 2022:1258-1 important: sssd

April 19, 2022
An update that solves one vulnerability, contains one feature and has two fixes is now available

Summary

This update for sssd fixes the following issues: - CVE-2021-3621: Fixed shell command injection in sssctl via the logs-fetch and cache-expire subcommands (bsc#1189492). - Add LDAPS support for the AD provider (bsc#1183735)(jsc#SLE-17773). Non-security fixes: - Fixed a crash caused by calling dbus_watch_handle with a corrupted memory value (bsc#1196564). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-1258=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2022-1258=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-1258=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-1258=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): libipa_hbac0-1.16.1-4.40.1 libipa_hbac0-debuginfo-1.16.1-4.40.1 libsss_certmap0-1.16.1-4.40.1 libsss_certmap0-debuginfo-1.16.1-4.40.1 libsss_idmap0-1.16.1-4.40.1 libsss_idmap0-debuginfo-1.16.1-4.40.1 libsss_nss_idmap0-1.16.1-4.40.1 libsss_nss_idmap0-debuginfo-1.16.1-4.40.1 libsss_simpleifp0-1.16.1-4.40.1 libsss_simpleifp0-debuginfo-1.16.1-4.40.1 python-sssd-config-1.16.1-4.40.1 python-sssd-config-debuginfo-1.16.1-4.40.1 sssd-1.16.1-4.40.1 sssd-32bit-1.16.1-4.40.1 sssd-ad-1.16.1-4.40.1 sssd-ad-debuginfo-1.16.1-4.40.1 sssd-dbus-1.16.1-4.40.1 sssd-dbus-debuginfo-1.16.1-4.40.1 sssd-debuginfo-1.16.1-4.40.1 sssd-debuginfo-32bit-1.16.1-4.40.1 sssd-debugsource-1.16.1-4.40.1 sssd-ipa-1.16.1-4.40.1 sssd-ipa-debuginfo-1.16.1-4.40.1 sssd-krb5-1.16.1-4.40.1 sssd-krb5-common-1.16.1-4.40.1 sssd-krb5-common-debuginfo-1.16.1-4.40.1 sssd-krb5-debuginfo-1.16.1-4.40.1 sssd-ldap-1.16.1-4.40.1 sssd-ldap-debuginfo-1.16.1-4.40.1 sssd-proxy-1.16.1-4.40.1 sssd-proxy-debuginfo-1.16.1-4.40.1 sssd-tools-1.16.1-4.40.1 sssd-tools-debuginfo-1.16.1-4.40.1 - SUSE OpenStack Cloud 9 (x86_64): libipa_hbac0-1.16.1-4.40.1 libipa_hbac0-debuginfo-1.16.1-4.40.1 libsss_certmap0-1.16.1-4.40.1 libsss_certmap0-debuginfo-1.16.1-4.40.1 libsss_idmap0-1.16.1-4.40.1 libsss_idmap0-debuginfo-1.16.1-4.40.1 libsss_nss_idmap0-1.16.1-4.40.1 libsss_nss_idmap0-debuginfo-1.16.1-4.40.1 libsss_simpleifp0-1.16.1-4.40.1 libsss_simpleifp0-debuginfo-1.16.1-4.40.1 python-sssd-config-1.16.1-4.40.1 python-sssd-config-debuginfo-1.16.1-4.40.1 sssd-1.16.1-4.40.1 sssd-32bit-1.16.1-4.40.1 sssd-ad-1.16.1-4.40.1 sssd-ad-debuginfo-1.16.1-4.40.1 sssd-dbus-1.16.1-4.40.1 sssd-dbus-debuginfo-1.16.1-4.40.1 sssd-debuginfo-1.16.1-4.40.1 sssd-debuginfo-32bit-1.16.1-4.40.1 sssd-debugsource-1.16.1-4.40.1 sssd-ipa-1.16.1-4.40.1 sssd-ipa-debuginfo-1.16.1-4.40.1 sssd-krb5-1.16.1-4.40.1 sssd-krb5-common-1.16.1-4.40.1 sssd-krb5-common-debuginfo-1.16.1-4.40.1 sssd-krb5-debuginfo-1.16.1-4.40.1 sssd-ldap-1.16.1-4.40.1 sssd-ldap-debuginfo-1.16.1-4.40.1 sssd-proxy-1.16.1-4.40.1 sssd-proxy-debuginfo-1.16.1-4.40.1 sssd-tools-1.16.1-4.40.1 sssd-tools-debuginfo-1.16.1-4.40.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64): libipa_hbac0-1.16.1-4.40.1 libipa_hbac0-debuginfo-1.16.1-4.40.1 libsss_certmap0-1.16.1-4.40.1 libsss_certmap0-debuginfo-1.16.1-4.40.1 libsss_idmap0-1.16.1-4.40.1 libsss_idmap0-debuginfo-1.16.1-4.40.1 libsss_nss_idmap0-1.16.1-4.40.1 libsss_nss_idmap0-debuginfo-1.16.1-4.40.1 libsss_simpleifp0-1.16.1-4.40.1 libsss_simpleifp0-debuginfo-1.16.1-4.40.1 python-sssd-config-1.16.1-4.40.1 python-sssd-config-debuginfo-1.16.1-4.40.1 sssd-1.16.1-4.40.1 sssd-ad-1.16.1-4.40.1 sssd-ad-debuginfo-1.16.1-4.40.1 sssd-dbus-1.16.1-4.40.1 sssd-dbus-debuginfo-1.16.1-4.40.1 sssd-debuginfo-1.16.1-4.40.1 sssd-debugsource-1.16.1-4.40.1 sssd-ipa-1.16.1-4.40.1 sssd-ipa-debuginfo-1.16.1-4.40.1 sssd-krb5-1.16.1-4.40.1 sssd-krb5-common-1.16.1-4.40.1 sssd-krb5-common-debuginfo-1.16.1-4.40.1 sssd-krb5-debuginfo-1.16.1-4.40.1 sssd-ldap-1.16.1-4.40.1 sssd-ldap-debuginfo-1.16.1-4.40.1 sssd-proxy-1.16.1-4.40.1 sssd-proxy-debuginfo-1.16.1-4.40.1 sssd-tools-1.16.1-4.40.1 sssd-tools-debuginfo-1.16.1-4.40.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (x86_64): sssd-32bit-1.16.1-4.40.1 sssd-debuginfo-32bit-1.16.1-4.40.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): libipa_hbac0-1.16.1-4.40.1 libipa_hbac0-debuginfo-1.16.1-4.40.1 libsss_certmap0-1.16.1-4.40.1 libsss_certmap0-debuginfo-1.16.1-4.40.1 libsss_idmap0-1.16.1-4.40.1 libsss_idmap0-debuginfo-1.16.1-4.40.1 libsss_nss_idmap0-1.16.1-4.40.1 libsss_nss_idmap0-debuginfo-1.16.1-4.40.1 libsss_simpleifp0-1.16.1-4.40.1 libsss_simpleifp0-debuginfo-1.16.1-4.40.1 python-sssd-config-1.16.1-4.40.1 python-sssd-config-debuginfo-1.16.1-4.40.1 sssd-1.16.1-4.40.1 sssd-ad-1.16.1-4.40.1 sssd-ad-debuginfo-1.16.1-4.40.1 sssd-dbus-1.16.1-4.40.1 sssd-dbus-debuginfo-1.16.1-4.40.1 sssd-debuginfo-1.16.1-4.40.1 sssd-debugsource-1.16.1-4.40.1 sssd-ipa-1.16.1-4.40.1 sssd-ipa-debuginfo-1.16.1-4.40.1 sssd-krb5-1.16.1-4.40.1 sssd-krb5-common-1.16.1-4.40.1 sssd-krb5-common-debuginfo-1.16.1-4.40.1 sssd-krb5-debuginfo-1.16.1-4.40.1 sssd-ldap-1.16.1-4.40.1 sssd-ldap-debuginfo-1.16.1-4.40.1 sssd-proxy-1.16.1-4.40.1 sssd-proxy-debuginfo-1.16.1-4.40.1 sssd-tools-1.16.1-4.40.1 sssd-tools-debuginfo-1.16.1-4.40.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (s390x x86_64): sssd-32bit-1.16.1-4.40.1 sssd-debuginfo-32bit-1.16.1-4.40.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64): libsss_nss_idmap-devel-1.16.1-4.40.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (s390x): libsss_idmap-devel-1.16.1-4.40.1

References

#1183735 #1189492 #1196564 SLE-17773

Cross- CVE-2021-3621

CVSS scores:

CVE-2021-3621 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2021-3621 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected Products:

SUSE Linux Enterprise Server 12-SP4-LTSS

SUSE Linux Enterprise Server for SAP 12-SP4

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 9

https://www.suse.com/security/cve/CVE-2021-3621.html

https://bugzilla.suse.com/1183735

https://bugzilla.suse.com/1189492

https://bugzilla.suse.com/1196564

Severity
Announcement ID: SUSE-SU-2022:1258-1
Rating: important

Related News

From Heartbleed to Now: Evolving Threats in OpenSSL and How to Guard Against Them

Nov 17, 2023

Nitrux 3.2.0 Linux Distro Released with Enhanced Security and New Features

Nov 28, 2023

Kinsing Hackers Exploit Apache ActiveMQ Vulnerability to Deploy Linux Rootkits

Nov 25, 2023

LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In

Nov 25, 2023

News

Advisories

HOWTOs

Features

Unlocking the Future of Authentication: Passkeys vs. Passwords
Empowering MSPs with Straightforward Linux Device Management
A Complete Guide to Torrenting Safely in 2024
Cloud Security Basics for Small Businesses
Scanning and Defending Networks with Nmap

About Us

Powered By

Footer Logo