Red Hat Security AdvisoryRHSA-2018:3158
sssd security, bug fix, and enhancement update
Released 2018-10-30 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libipa_hbac-1.16.2-13.el7, libsss_autofs-1.16.2-13.el7, libsss_certmap-1.16.2-13.el7 +24
- Red Hat Enterprise Linux Client Optional (v. 7) libipa_hbac-devel-1.16.2-13.el7, libsss_certmap-devel-1.16.2-13.el7, libsss_idmap-devel-1.16.2-13.el7 +4
- Red Hat Enterprise Linux ComputeNode (v. 7) libipa_hbac-1.16.2-13.el7, libsss_autofs-1.16.2-13.el7, libsss_certmap-1.16.2-13.el7 +24
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libipa_hbac-devel-1.16.2-13.el7, libsss_certmap-devel-1.16.2-13.el7, libsss_idmap-devel-1.16.2-13.el7 +4
- Red Hat Enterprise Linux Server (v. 7) libipa_hbac-1.16.2-13.el7, libipa_hbac-1.16.2-13.el7.ppc, libsss_autofs-1.16.2-13.el7 +31
- Red Hat Enterprise Linux Server Optional (v. 7) libipa_hbac-devel-1.16.2-13.el7, libipa_hbac-devel-1.16.2-13.el7.ppc, libsss_certmap-devel-1.16.2-13.el7 +10
- Red Hat Enterprise Linux Workstation (v. 7) libipa_hbac-1.16.2-13.el7, libsss_autofs-1.16.2-13.el7, libsss_certmap-1.16.2-13.el7 +25
- Red Hat Enterprise Linux Workstation Optional (v. 7) libipa_hbac-devel-1.16.2-13.el7, libsss_certmap-devel-1.16.2-13.el7, libsss_idmap-devel-1.16.2-13.el7 +3
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libipa_hbac-1.16.2-13.el7, libsss_autofs-1.16.2-13.el7, libsss_certmap-1.16.2-13.el7 +25
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libipa_hbac-devel-1.16.2-13.el7, libsss_certmap-devel-1.16.2-13.el7, libsss_idmap-devel-1.16.2-13.el7 +4
Fixes 1 record
Priority LOW 36
The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can re…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01458 · Published 2018-06-26 · Partial fix CWE-200
