Red Hat Security AdvisoryRHSA-2013:0508
sssd security, bug fix and enhancement update
Released 2013-02-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libipa_hbac-1.9.2-82.el6, libipa_hbac-python-1.9.2-82.el6, libsss_autofs-1.9.2-82.el6 +4
- Red Hat Enterprise Linux Desktop Optional (v. 6) libipa_hbac-devel-1.9.2-82.el6, libsss_idmap-1.9.2-82.el6, libsss_idmap-devel-1.9.2-82.el6 +3
- Red Hat Enterprise Linux HPC Node (v. 6) libipa_hbac-1.9.2-82.el6, libipa_hbac-python-1.9.2-82.el6, libsss_autofs-1.9.2-82.el6 +4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libipa_hbac-devel-1.9.2-82.el6, libsss_idmap-1.9.2-82.el6, libsss_idmap-devel-1.9.2-82.el6 +4
- Red Hat Enterprise Linux Server (v. 6) libipa_hbac-1.9.2-82.el6, libipa_hbac-1.9.2-82.el6.ppc, libipa_hbac-python-1.9.2-82.el6 +6
- Red Hat Enterprise Linux Server Optional (v. 6) libipa_hbac-devel-1.9.2-82.el6, libipa_hbac-devel-1.9.2-82.el6.ppc, libsss_idmap-1.9.2-82.el6 +7
- Red Hat Enterprise Linux Workstation (v. 6) libipa_hbac-1.9.2-82.el6, libipa_hbac-python-1.9.2-82.el6, libsss_autofs-1.9.2-82.el6 +4
- Red Hat Enterprise Linux Workstation Optional (v. 6) libipa_hbac-devel-1.9.2-82.el6, libsss_idmap-devel-1.9.2-82.el6, libsss_sudo-devel-1.9.2-82.el6 +2
Fixes 2 records
Priority LOW 29
The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Servic…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03324 · Published 2013-02-24 · Fixed CWE-119
Priority LOW 18
System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on ano…
CVSS 2.0LOW 3.7· Local · No auth · Interaction — · EPSS 0.00366 · Published 2013-02-24 · Fixed CWE-264