RHSA-2019:2177

Description

Red Hat Security Advisory: sssd security, bug fix, and enhancement update

CVSS Metrics

• v3.0•MEDIUM•Score: 5.4CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected Systems

• redhat•libipa_hbac

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•libipa_hbac-devel

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•libsss_autofs

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•libsss_certmap

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•libsss_certmap-devel

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•libsss_idmap

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•libsss_idmap-devel

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•libsss_nss_idmap

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•libsss_nss_idmap-devel

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•libsss_simpleifp

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•libsss_simpleifp-devel

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•libsss_sudo

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•python-libipa_hbac

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•python-libsss_nss_idmap

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•python-sss

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•python-sss-murmur

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•python-sssdconfig

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-ad

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-client

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-common

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-common-pac

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-dbus

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-debuginfo

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-ipa

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-kcm

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-krb5

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-krb5-common

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-ldap

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-libwbclient

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-libwbclient-devel

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-polkit-rules

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-proxy

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-tools

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

• redhat•sssd-winbind-idmap

  < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7 | < 0:1.16.4-21.el7

References (33)

• https://access.redhat.com/errata/RHSA-2019:2177
• https://access.redhat.com/security/updates/classification/#moderate
• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
• https://bugzilla.redhat.com/show_bug.cgi?id=720688
• https://bugzilla.redhat.com/show_bug.cgi?id=1350012
• https://bugzilla.redhat.com/show_bug.cgi?id=1402056
• https://bugzilla.redhat.com/show_bug.cgi?id=1406678
• https://bugzilla.redhat.com/show_bug.cgi?id=1614296
• https://bugzilla.redhat.com/show_bug.cgi?id=1619706
• https://bugzilla.redhat.com/show_bug.cgi?id=1631656
• https://bugzilla.redhat.com/show_bug.cgi?id=1640820
• https://bugzilla.redhat.com/show_bug.cgi?id=1645461
• https://bugzilla.redhat.com/show_bug.cgi?id=1653759
• https://bugzilla.redhat.com/show_bug.cgi?id=1656618
• https://bugzilla.redhat.com/show_bug.cgi?id=1658994
• https://bugzilla.redhat.com/show_bug.cgi?id=1671138
• https://bugzilla.redhat.com/show_bug.cgi?id=1672527
• https://bugzilla.redhat.com/show_bug.cgi?id=1677355
• https://bugzilla.redhat.com/show_bug.cgi?id=1677665
• https://bugzilla.redhat.com/show_bug.cgi?id=1679173
• https://bugzilla.redhat.com/show_bug.cgi?id=1684979
• https://bugzilla.redhat.com/show_bug.cgi?id=1685472
• https://bugzilla.redhat.com/show_bug.cgi?id=1685581
• https://bugzilla.redhat.com/show_bug.cgi?id=1707759
• https://bugzilla.redhat.com/show_bug.cgi?id=1710286
• https://bugzilla.redhat.com/show_bug.cgi?id=1711832
• https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2177.json
• https://access.redhat.com/security/cve/CVE-2018-16838
• https://www.cve.org/CVERecord?id=CVE-2018-16838
• https://nvd.nist.gov/vuln/detail/CVE-2018-16838
• https://access.redhat.com/security/cve/CVE-2019-3811
• https://www.cve.org/CVERecord?id=CVE-2019-3811
• https://nvd.nist.gov/vuln/detail/CVE-2019-3811