TI-2021-02567 CVE-2021-3621 · GHSA-g527-g4q2-57xc
Command injection in sssd
Priority MEDIUM 43
A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands.
RHSA-2021:3336
sssd security and bug fix update
Released 2021-08-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libipa_hbac-1.16.5-10.el7_9.10, libsss_autofs-1.16.5-10.el7_9.10, libsss_certmap-1.16.5-10.el7_9.10 +24
- Red Hat Enterprise Linux Client Optional (v. 7) libipa_hbac-devel-1.16.5-10.el7_9.10, libsss_certmap-devel-1.16.5-10.el7_9.10, libsss_idmap-devel-1.16.5-10.el7_9.10 +4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libipa_hbac-devel-1.16.5-10.el7_9.10, libsss_certmap-devel-1.16.5-10.el7_9.10, libsss_idmap-devel-1.16.5-10.el7_9.10 +4
- Red Hat Enterprise Linux Server (v. 7) libipa_hbac-1.16.5-10.el7_9.10, libipa_hbac-1.16.5-10.el7_9.10.ppc, libsss_autofs-1.16.5-10.el7_9.10 +31
- Red Hat Enterprise Linux Server Optional (v. 7) libipa_hbac-devel-1.16.5-10.el7_9.10, libipa_hbac-devel-1.16.5-10.el7_9.10.ppc, libsss_certmap-devel-1.16.5-10.el7_9.10 +10
- Red Hat Enterprise Linux Workstation (v. 7) libipa_hbac-1.16.5-10.el7_9.10, libsss_autofs-1.16.5-10.el7_9.10, libsss_certmap-1.16.5-10.el7_9.10 +25
- Red Hat Enterprise Linux Workstation Optional (v. 7) libipa_hbac-devel-1.16.5-10.el7_9.10, libsss_certmap-devel-1.16.5-10.el7_9.10, libsss_idmap-devel-1.16.5-10.el7_9.10 +3