-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Low: sssd security, bug fix, and enhancement update Advisory ID: RHSA-2018:3158-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2018:3158 Issue date: 2018-10-30 CVE Names: CVE-2018-10852 ===================================================================== 1. Summary: An update for sssd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - noarch, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) - aarch64, noarch, ppc64le, s390x Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) - aarch64, ppc64le, s390x 3. Description: The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. The following packages have been upgraded to a later upstream version: sssd (1.16.2). (BZ#1558498) Security Fix(es): * sssd: information leak from the sssd-sudo responder (CVE-2018-10852) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. This issue was discovered by Jakub Hrozek (Red Hat). Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1385665 - Incorrect error code returned from krb5_child (updated) 1416528 - sssd in cross realm trust configuration should be able to use AD KDCs from a client site defined in sssd.conf or a snippet 1459348 - extend sss-certmap man page regarding priority processing 1509691 - Document how to change the regular expression for SSSD so that group names with an @-sign can be parsed 1514061 - ID override GID from Default Trust View is not properly resolved in case domain resolution order is set 1516266 - Give a more detailed debug and system-log message if krb5_init_context() failed 1522928 - sssd doesn't allow user with expired password to login when PasswordgraceLimit set 1534749 - Requesting an AD user's private group and then the user itself returns an emty homedir 1537272 - SSH public key authentication keeps working after keys are removed from ID view 1537279 - Certificate is not removed from cache when it's removed from the override 1538555 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] 1546754 - The man page of sss_ssh_authorizedkeys can be enhanced to better explain how the keys are retrieved and how X.509 certificates can be used 1558498 - Rebase sssd to the latests upstream release of the 1.16 branch 1562025 - externalUser sudo attribute must be fully-qualified 1565774 - After updating to RHEL 7.5 failing to clear the sssd cache 1566782 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash 1571526 - SSSD with ID provider 'ad' should give a warning in case the ldap schema is manually changed to something different than 'ad'. 1577335 - /usr/libexec/sssd/sssd_autofs SIGABRT crash daily 1578291 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION 1583251 - home dir disappear in sssd cache on the IPA master for AD users 1583725 - SSSD AD uses LDAP filter to detect POSIX attributes stored in AD GC also for regular AD DC queries 1588810 - CVE-2018-10852 sssd: information leak from the sssd-sudo responder 1600822 - SSSD bails out saving desktop profiles in case an invalid profile is found 1602781 - Offline logins and/or id_provider=local logins fail after upgrade to 7.6 1607313 - When sssd is running as non-root user, the sudo pipe is created as sssd:sssd but then the private pipe ownership fails 1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: sssd-1.16.2-13.el7.src.rpm noarch: python-sssdconfig-1.16.2-13.el7.noarch.rpm x86_64: libipa_hbac-1.16.2-13.el7.i686.rpm libipa_hbac-1.16.2-13.el7.x86_64.rpm libsss_autofs-1.16.2-13.el7.x86_64.rpm libsss_certmap-1.16.2-13.el7.i686.rpm libsss_certmap-1.16.2-13.el7.x86_64.rpm libsss_idmap-1.16.2-13.el7.i686.rpm libsss_idmap-1.16.2-13.el7.x86_64.rpm libsss_nss_idmap-1.16.2-13.el7.i686.rpm libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm libsss_simpleifp-1.16.2-13.el7.i686.rpm libsss_simpleifp-1.16.2-13.el7.x86_64.rpm libsss_sudo-1.16.2-13.el7.x86_64.rpm python-libipa_hbac-1.16.2-13.el7.x86_64.rpm python-sss-1.16.2-13.el7.x86_64.rpm python-sss-murmur-1.16.2-13.el7.x86_64.rpm sssd-1.16.2-13.el7.x86_64.rpm sssd-ad-1.16.2-13.el7.x86_64.rpm sssd-client-1.16.2-13.el7.i686.rpm sssd-client-1.16.2-13.el7.x86_64.rpm sssd-common-1.16.2-13.el7.x86_64.rpm sssd-common-pac-1.16.2-13.el7.x86_64.rpm sssd-dbus-1.16.2-13.el7.x86_64.rpm sssd-debuginfo-1.16.2-13.el7.i686.rpm sssd-debuginfo-1.16.2-13.el7.x86_64.rpm sssd-ipa-1.16.2-13.el7.x86_64.rpm sssd-kcm-1.16.2-13.el7.x86_64.rpm sssd-krb5-1.16.2-13.el7.x86_64.rpm sssd-krb5-common-1.16.2-13.el7.x86_64.rpm sssd-ldap-1.16.2-13.el7.x86_64.rpm sssd-libwbclient-1.16.2-13.el7.x86_64.rpm sssd-polkit-rules-1.16.2-13.el7.x86_64.rpm sssd-proxy-1.16.2-13.el7.x86_64.rpm sssd-tools-1.16.2-13.el7.x86_64.rpm sssd-winbind-idmap-1.16.2-13.el7.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: libipa_hbac-devel-1.16.2-13.el7.i686.rpm libipa_hbac-devel-1.16.2-13.el7.x86_64.rpm libsss_certmap-devel-1.16.2-13.el7.i686.rpm libsss_certmap-devel-1.16.2-13.el7.x86_64.rpm libsss_idmap-devel-1.16.2-13.el7.i686.rpm libsss_idmap-devel-1.16.2-13.el7.x86_64.rpm libsss_nss_idmap-devel-1.16.2-13.el7.i686.rpm libsss_nss_idmap-devel-1.16.2-13.el7.x86_64.rpm libsss_simpleifp-devel-1.16.2-13.el7.i686.rpm libsss_simpleifp-devel-1.16.2-13.el7.x86_64.rpm python-libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm sssd-debuginfo-1.16.2-13.el7.i686.rpm sssd-debuginfo-1.16.2-13.el7.x86_64.rpm sssd-libwbclient-devel-1.16.2-13.el7.i686.rpm sssd-libwbclient-devel-1.16.2-13.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: sssd-1.16.2-13.el7.src.rpm noarch: python-sssdconfig-1.16.2-13.el7.noarch.rpm x86_64: libipa_hbac-1.16.2-13.el7.i686.rpm libipa_hbac-1.16.2-13.el7.x86_64.rpm libsss_autofs-1.16.2-13.el7.x86_64.rpm libsss_certmap-1.16.2-13.el7.i686.rpm libsss_certmap-1.16.2-13.el7.x86_64.rpm libsss_idmap-1.16.2-13.el7.i686.rpm libsss_idmap-1.16.2-13.el7.x86_64.rpm libsss_nss_idmap-1.16.2-13.el7.i686.rpm libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm libsss_simpleifp-1.16.2-13.el7.i686.rpm libsss_simpleifp-1.16.2-13.el7.x86_64.rpm libsss_sudo-1.16.2-13.el7.x86_64.rpm python-libipa_hbac-1.16.2-13.el7.x86_64.rpm python-sss-1.16.2-13.el7.x86_64.rpm python-sss-murmur-1.16.2-13.el7.x86_64.rpm sssd-1.16.2-13.el7.x86_64.rpm sssd-ad-1.16.2-13.el7.x86_64.rpm sssd-client-1.16.2-13.el7.i686.rpm sssd-client-1.16.2-13.el7.x86_64.rpm sssd-common-1.16.2-13.el7.x86_64.rpm sssd-common-pac-1.16.2-13.el7.x86_64.rpm sssd-dbus-1.16.2-13.el7.x86_64.rpm sssd-debuginfo-1.16.2-13.el7.i686.rpm sssd-debuginfo-1.16.2-13.el7.x86_64.rpm sssd-ipa-1.16.2-13.el7.x86_64.rpm sssd-kcm-1.16.2-13.el7.x86_64.rpm sssd-krb5-1.16.2-13.el7.x86_64.rpm sssd-krb5-common-1.16.2-13.el7.x86_64.rpm sssd-ldap-1.16.2-13.el7.x86_64.rpm sssd-libwbclient-1.16.2-13.el7.x86_64.rpm sssd-polkit-rules-1.16.2-13.el7.x86_64.rpm sssd-proxy-1.16.2-13.el7.x86_64.rpm sssd-tools-1.16.2-13.el7.x86_64.rpm sssd-winbind-idmap-1.16.2-13.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: libipa_hbac-devel-1.16.2-13.el7.i686.rpm libipa_hbac-devel-1.16.2-13.el7.x86_64.rpm libsss_certmap-devel-1.16.2-13.el7.i686.rpm libsss_certmap-devel-1.16.2-13.el7.x86_64.rpm libsss_idmap-devel-1.16.2-13.el7.i686.rpm libsss_idmap-devel-1.16.2-13.el7.x86_64.rpm libsss_nss_idmap-devel-1.16.2-13.el7.i686.rpm libsss_nss_idmap-devel-1.16.2-13.el7.x86_64.rpm libsss_simpleifp-devel-1.16.2-13.el7.i686.rpm libsss_simpleifp-devel-1.16.2-13.el7.x86_64.rpm python-libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm sssd-debuginfo-1.16.2-13.el7.i686.rpm sssd-debuginfo-1.16.2-13.el7.x86_64.rpm sssd-libwbclient-devel-1.16.2-13.el7.i686.rpm sssd-libwbclient-devel-1.16.2-13.el7.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: sssd-1.16.2-13.el7.src.rpm noarch: python-sssdconfig-1.16.2-13.el7.noarch.rpm ppc64: libipa_hbac-1.16.2-13.el7.ppc.rpm libipa_hbac-1.16.2-13.el7.ppc64.rpm libsss_autofs-1.16.2-13.el7.ppc64.rpm libsss_certmap-1.16.2-13.el7.ppc.rpm libsss_certmap-1.16.2-13.el7.ppc64.rpm libsss_idmap-1.16.2-13.el7.ppc.rpm libsss_idmap-1.16.2-13.el7.ppc64.rpm libsss_nss_idmap-1.16.2-13.el7.ppc.rpm libsss_nss_idmap-1.16.2-13.el7.ppc64.rpm libsss_simpleifp-1.16.2-13.el7.ppc.rpm libsss_simpleifp-1.16.2-13.el7.ppc64.rpm libsss_sudo-1.16.2-13.el7.ppc64.rpm python-libipa_hbac-1.16.2-13.el7.ppc64.rpm python-sss-1.16.2-13.el7.ppc64.rpm python-sss-murmur-1.16.2-13.el7.ppc64.rpm sssd-1.16.2-13.el7.ppc64.rpm sssd-ad-1.16.2-13.el7.ppc64.rpm sssd-client-1.16.2-13.el7.ppc.rpm sssd-client-1.16.2-13.el7.ppc64.rpm sssd-common-1.16.2-13.el7.ppc64.rpm sssd-common-pac-1.16.2-13.el7.ppc64.rpm sssd-dbus-1.16.2-13.el7.ppc64.rpm sssd-debuginfo-1.16.2-13.el7.ppc.rpm sssd-debuginfo-1.16.2-13.el7.ppc64.rpm sssd-ipa-1.16.2-13.el7.ppc64.rpm sssd-kcm-1.16.2-13.el7.ppc64.rpm sssd-krb5-1.16.2-13.el7.ppc64.rpm sssd-krb5-common-1.16.2-13.el7.ppc64.rpm sssd-ldap-1.16.2-13.el7.ppc64.rpm sssd-libwbclient-1.16.2-13.el7.ppc64.rpm sssd-polkit-rules-1.16.2-13.el7.ppc64.rpm sssd-proxy-1.16.2-13.el7.ppc64.rpm sssd-tools-1.16.2-13.el7.ppc64.rpm sssd-winbind-idmap-1.16.2-13.el7.ppc64.rpm ppc64le: libipa_hbac-1.16.2-13.el7.ppc64le.rpm libsss_autofs-1.16.2-13.el7.ppc64le.rpm libsss_certmap-1.16.2-13.el7.ppc64le.rpm libsss_idmap-1.16.2-13.el7.ppc64le.rpm libsss_nss_idmap-1.16.2-13.el7.ppc64le.rpm libsss_simpleifp-1.16.2-13.el7.ppc64le.rpm libsss_sudo-1.16.2-13.el7.ppc64le.rpm python-libipa_hbac-1.16.2-13.el7.ppc64le.rpm python-sss-1.16.2-13.el7.ppc64le.rpm python-sss-murmur-1.16.2-13.el7.ppc64le.rpm sssd-1.16.2-13.el7.ppc64le.rpm sssd-ad-1.16.2-13.el7.ppc64le.rpm sssd-client-1.16.2-13.el7.ppc64le.rpm sssd-common-1.16.2-13.el7.ppc64le.rpm sssd-common-pac-1.16.2-13.el7.ppc64le.rpm sssd-dbus-1.16.2-13.el7.ppc64le.rpm sssd-debuginfo-1.16.2-13.el7.ppc64le.rpm sssd-ipa-1.16.2-13.el7.ppc64le.rpm sssd-kcm-1.16.2-13.el7.ppc64le.rpm sssd-krb5-1.16.2-13.el7.ppc64le.rpm sssd-krb5-common-1.16.2-13.el7.ppc64le.rpm sssd-ldap-1.16.2-13.el7.ppc64le.rpm sssd-libwbclient-1.16.2-13.el7.ppc64le.rpm sssd-polkit-rules-1.16.2-13.el7.ppc64le.rpm sssd-proxy-1.16.2-13.el7.ppc64le.rpm sssd-tools-1.16.2-13.el7.ppc64le.rpm sssd-winbind-idmap-1.16.2-13.el7.ppc64le.rpm s390x: libipa_hbac-1.16.2-13.el7.s390.rpm libipa_hbac-1.16.2-13.el7.s390x.rpm libsss_autofs-1.16.2-13.el7.s390x.rpm libsss_certmap-1.16.2-13.el7.s390.rpm libsss_certmap-1.16.2-13.el7.s390x.rpm libsss_idmap-1.16.2-13.el7.s390.rpm libsss_idmap-1.16.2-13.el7.s390x.rpm libsss_nss_idmap-1.16.2-13.el7.s390.rpm libsss_nss_idmap-1.16.2-13.el7.s390x.rpm libsss_simpleifp-1.16.2-13.el7.s390.rpm libsss_simpleifp-1.16.2-13.el7.s390x.rpm libsss_sudo-1.16.2-13.el7.s390x.rpm python-libipa_hbac-1.16.2-13.el7.s390x.rpm python-sss-1.16.2-13.el7.s390x.rpm python-sss-murmur-1.16.2-13.el7.s390x.rpm sssd-1.16.2-13.el7.s390x.rpm sssd-ad-1.16.2-13.el7.s390x.rpm sssd-client-1.16.2-13.el7.s390.rpm sssd-client-1.16.2-13.el7.s390x.rpm sssd-common-1.16.2-13.el7.s390x.rpm sssd-common-pac-1.16.2-13.el7.s390x.rpm sssd-dbus-1.16.2-13.el7.s390x.rpm sssd-debuginfo-1.16.2-13.el7.s390.rpm sssd-debuginfo-1.16.2-13.el7.s390x.rpm sssd-ipa-1.16.2-13.el7.s390x.rpm sssd-kcm-1.16.2-13.el7.s390x.rpm sssd-krb5-1.16.2-13.el7.s390x.rpm sssd-krb5-common-1.16.2-13.el7.s390x.rpm sssd-ldap-1.16.2-13.el7.s390x.rpm sssd-libwbclient-1.16.2-13.el7.s390x.rpm sssd-polkit-rules-1.16.2-13.el7.s390x.rpm sssd-proxy-1.16.2-13.el7.s390x.rpm sssd-tools-1.16.2-13.el7.s390x.rpm sssd-winbind-idmap-1.16.2-13.el7.s390x.rpm x86_64: libipa_hbac-1.16.2-13.el7.i686.rpm libipa_hbac-1.16.2-13.el7.x86_64.rpm libsss_autofs-1.16.2-13.el7.x86_64.rpm libsss_certmap-1.16.2-13.el7.i686.rpm libsss_certmap-1.16.2-13.el7.x86_64.rpm libsss_idmap-1.16.2-13.el7.i686.rpm libsss_idmap-1.16.2-13.el7.x86_64.rpm libsss_nss_idmap-1.16.2-13.el7.i686.rpm libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm libsss_simpleifp-1.16.2-13.el7.i686.rpm libsss_simpleifp-1.16.2-13.el7.x86_64.rpm libsss_sudo-1.16.2-13.el7.x86_64.rpm python-libipa_hbac-1.16.2-13.el7.x86_64.rpm python-libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm python-sss-1.16.2-13.el7.x86_64.rpm python-sss-murmur-1.16.2-13.el7.x86_64.rpm sssd-1.16.2-13.el7.x86_64.rpm sssd-ad-1.16.2-13.el7.x86_64.rpm sssd-client-1.16.2-13.el7.i686.rpm sssd-client-1.16.2-13.el7.x86_64.rpm sssd-common-1.16.2-13.el7.x86_64.rpm sssd-common-pac-1.16.2-13.el7.x86_64.rpm sssd-dbus-1.16.2-13.el7.x86_64.rpm sssd-debuginfo-1.16.2-13.el7.i686.rpm sssd-debuginfo-1.16.2-13.el7.x86_64.rpm sssd-ipa-1.16.2-13.el7.x86_64.rpm sssd-kcm-1.16.2-13.el7.x86_64.rpm sssd-krb5-1.16.2-13.el7.x86_64.rpm sssd-krb5-common-1.16.2-13.el7.x86_64.rpm sssd-ldap-1.16.2-13.el7.x86_64.rpm sssd-libwbclient-1.16.2-13.el7.x86_64.rpm sssd-polkit-rules-1.16.2-13.el7.x86_64.rpm sssd-proxy-1.16.2-13.el7.x86_64.rpm sssd-tools-1.16.2-13.el7.x86_64.rpm sssd-winbind-idmap-1.16.2-13.el7.x86_64.rpm Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7): Source: sssd-1.16.2-13.el7.src.rpm aarch64: libipa_hbac-1.16.2-13.el7.aarch64.rpm libsss_autofs-1.16.2-13.el7.aarch64.rpm libsss_certmap-1.16.2-13.el7.aarch64.rpm libsss_idmap-1.16.2-13.el7.aarch64.rpm libsss_nss_idmap-1.16.2-13.el7.aarch64.rpm libsss_simpleifp-1.16.2-13.el7.aarch64.rpm libsss_sudo-1.16.2-13.el7.aarch64.rpm python-libipa_hbac-1.16.2-13.el7.aarch64.rpm python-libsss_nss_idmap-1.16.2-13.el7.aarch64.rpm python-sss-1.16.2-13.el7.aarch64.rpm python-sss-murmur-1.16.2-13.el7.aarch64.rpm sssd-1.16.2-13.el7.aarch64.rpm sssd-ad-1.16.2-13.el7.aarch64.rpm sssd-client-1.16.2-13.el7.aarch64.rpm sssd-common-1.16.2-13.el7.aarch64.rpm sssd-common-pac-1.16.2-13.el7.aarch64.rpm sssd-dbus-1.16.2-13.el7.aarch64.rpm sssd-debuginfo-1.16.2-13.el7.aarch64.rpm sssd-ipa-1.16.2-13.el7.aarch64.rpm sssd-kcm-1.16.2-13.el7.aarch64.rpm sssd-krb5-1.16.2-13.el7.aarch64.rpm sssd-krb5-common-1.16.2-13.el7.aarch64.rpm sssd-ldap-1.16.2-13.el7.aarch64.rpm sssd-libwbclient-1.16.2-13.el7.aarch64.rpm sssd-polkit-rules-1.16.2-13.el7.aarch64.rpm sssd-proxy-1.16.2-13.el7.aarch64.rpm sssd-tools-1.16.2-13.el7.aarch64.rpm sssd-winbind-idmap-1.16.2-13.el7.aarch64.rpm noarch: python-sssdconfig-1.16.2-13.el7.noarch.rpm ppc64le: libipa_hbac-1.16.2-13.el7.ppc64le.rpm libsss_autofs-1.16.2-13.el7.ppc64le.rpm libsss_certmap-1.16.2-13.el7.ppc64le.rpm libsss_idmap-1.16.2-13.el7.ppc64le.rpm libsss_nss_idmap-1.16.2-13.el7.ppc64le.rpm libsss_simpleifp-1.16.2-13.el7.ppc64le.rpm libsss_sudo-1.16.2-13.el7.ppc64le.rpm python-libipa_hbac-1.16.2-13.el7.ppc64le.rpm python-sss-1.16.2-13.el7.ppc64le.rpm python-sss-murmur-1.16.2-13.el7.ppc64le.rpm sssd-1.16.2-13.el7.ppc64le.rpm sssd-ad-1.16.2-13.el7.ppc64le.rpm sssd-client-1.16.2-13.el7.ppc64le.rpm sssd-common-1.16.2-13.el7.ppc64le.rpm sssd-common-pac-1.16.2-13.el7.ppc64le.rpm sssd-dbus-1.16.2-13.el7.ppc64le.rpm sssd-debuginfo-1.16.2-13.el7.ppc64le.rpm sssd-ipa-1.16.2-13.el7.ppc64le.rpm sssd-kcm-1.16.2-13.el7.ppc64le.rpm sssd-krb5-1.16.2-13.el7.ppc64le.rpm sssd-krb5-common-1.16.2-13.el7.ppc64le.rpm sssd-ldap-1.16.2-13.el7.ppc64le.rpm sssd-libwbclient-1.16.2-13.el7.ppc64le.rpm sssd-polkit-rules-1.16.2-13.el7.ppc64le.rpm sssd-proxy-1.16.2-13.el7.ppc64le.rpm sssd-tools-1.16.2-13.el7.ppc64le.rpm sssd-winbind-idmap-1.16.2-13.el7.ppc64le.rpm s390x: libipa_hbac-1.16.2-13.el7.s390.rpm libipa_hbac-1.16.2-13.el7.s390x.rpm libsss_autofs-1.16.2-13.el7.s390x.rpm libsss_certmap-1.16.2-13.el7.s390.rpm libsss_certmap-1.16.2-13.el7.s390x.rpm libsss_idmap-1.16.2-13.el7.s390.rpm libsss_idmap-1.16.2-13.el7.s390x.rpm libsss_nss_idmap-1.16.2-13.el7.s390.rpm libsss_nss_idmap-1.16.2-13.el7.s390x.rpm libsss_simpleifp-1.16.2-13.el7.s390.rpm libsss_simpleifp-1.16.2-13.el7.s390x.rpm libsss_sudo-1.16.2-13.el7.s390x.rpm python-libipa_hbac-1.16.2-13.el7.s390x.rpm python-sss-1.16.2-13.el7.s390x.rpm python-sss-murmur-1.16.2-13.el7.s390x.rpm sssd-1.16.2-13.el7.s390x.rpm sssd-ad-1.16.2-13.el7.s390x.rpm sssd-client-1.16.2-13.el7.s390.rpm sssd-client-1.16.2-13.el7.s390x.rpm sssd-common-1.16.2-13.el7.s390x.rpm sssd-common-pac-1.16.2-13.el7.s390x.rpm sssd-dbus-1.16.2-13.el7.s390x.rpm sssd-debuginfo-1.16.2-13.el7.s390.rpm sssd-debuginfo-1.16.2-13.el7.s390x.rpm sssd-ipa-1.16.2-13.el7.s390x.rpm sssd-kcm-1.16.2-13.el7.s390x.rpm sssd-krb5-1.16.2-13.el7.s390x.rpm sssd-krb5-common-1.16.2-13.el7.s390x.rpm sssd-ldap-1.16.2-13.el7.s390x.rpm sssd-libwbclient-1.16.2-13.el7.s390x.rpm sssd-polkit-rules-1.16.2-13.el7.s390x.rpm sssd-proxy-1.16.2-13.el7.s390x.rpm sssd-tools-1.16.2-13.el7.s390x.rpm sssd-winbind-idmap-1.16.2-13.el7.s390x.rpm Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7): aarch64: libipa_hbac-devel-1.16.2-13.el7.aarch64.rpm libsss_certmap-devel-1.16.2-13.el7.aarch64.rpm libsss_idmap-devel-1.16.2-13.el7.aarch64.rpm libsss_nss_idmap-devel-1.16.2-13.el7.aarch64.rpm libsss_simpleifp-devel-1.16.2-13.el7.aarch64.rpm sssd-debuginfo-1.16.2-13.el7.aarch64.rpm sssd-libwbclient-devel-1.16.2-13.el7.aarch64.rpm ppc64le: libipa_hbac-devel-1.16.2-13.el7.ppc64le.rpm libsss_certmap-devel-1.16.2-13.el7.ppc64le.rpm libsss_idmap-devel-1.16.2-13.el7.ppc64le.rpm libsss_nss_idmap-devel-1.16.2-13.el7.ppc64le.rpm libsss_simpleifp-devel-1.16.2-13.el7.ppc64le.rpm python-libsss_nss_idmap-1.16.2-13.el7.ppc64le.rpm sssd-debuginfo-1.16.2-13.el7.ppc64le.rpm sssd-libwbclient-devel-1.16.2-13.el7.ppc64le.rpm s390x: libipa_hbac-devel-1.16.2-13.el7.s390.rpm libipa_hbac-devel-1.16.2-13.el7.s390x.rpm libsss_certmap-devel-1.16.2-13.el7.s390.rpm libsss_certmap-devel-1.16.2-13.el7.s390x.rpm libsss_idmap-devel-1.16.2-13.el7.s390.rpm libsss_idmap-devel-1.16.2-13.el7.s390x.rpm libsss_nss_idmap-devel-1.16.2-13.el7.s390.rpm libsss_nss_idmap-devel-1.16.2-13.el7.s390x.rpm libsss_simpleifp-devel-1.16.2-13.el7.s390.rpm libsss_simpleifp-devel-1.16.2-13.el7.s390x.rpm python-libsss_nss_idmap-1.16.2-13.el7.s390x.rpm sssd-debuginfo-1.16.2-13.el7.s390.rpm sssd-debuginfo-1.16.2-13.el7.s390x.rpm sssd-libwbclient-devel-1.16.2-13.el7.s390.rpm sssd-libwbclient-devel-1.16.2-13.el7.s390x.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64: libipa_hbac-devel-1.16.2-13.el7.ppc.rpm libipa_hbac-devel-1.16.2-13.el7.ppc64.rpm libsss_certmap-devel-1.16.2-13.el7.ppc.rpm libsss_certmap-devel-1.16.2-13.el7.ppc64.rpm libsss_idmap-devel-1.16.2-13.el7.ppc.rpm libsss_idmap-devel-1.16.2-13.el7.ppc64.rpm libsss_nss_idmap-devel-1.16.2-13.el7.ppc.rpm libsss_nss_idmap-devel-1.16.2-13.el7.ppc64.rpm libsss_simpleifp-devel-1.16.2-13.el7.ppc.rpm libsss_simpleifp-devel-1.16.2-13.el7.ppc64.rpm python-libsss_nss_idmap-1.16.2-13.el7.ppc64.rpm sssd-debuginfo-1.16.2-13.el7.ppc.rpm sssd-debuginfo-1.16.2-13.el7.ppc64.rpm sssd-libwbclient-devel-1.16.2-13.el7.ppc.rpm sssd-libwbclient-devel-1.16.2-13.el7.ppc64.rpm ppc64le: libipa_hbac-devel-1.16.2-13.el7.ppc64le.rpm libsss_certmap-devel-1.16.2-13.el7.ppc64le.rpm libsss_idmap-devel-1.16.2-13.el7.ppc64le.rpm libsss_nss_idmap-devel-1.16.2-13.el7.ppc64le.rpm libsss_simpleifp-devel-1.16.2-13.el7.ppc64le.rpm python-libsss_nss_idmap-1.16.2-13.el7.ppc64le.rpm sssd-debuginfo-1.16.2-13.el7.ppc64le.rpm sssd-libwbclient-devel-1.16.2-13.el7.ppc64le.rpm s390x: libipa_hbac-devel-1.16.2-13.el7.s390.rpm libipa_hbac-devel-1.16.2-13.el7.s390x.rpm libsss_certmap-devel-1.16.2-13.el7.s390.rpm libsss_certmap-devel-1.16.2-13.el7.s390x.rpm libsss_idmap-devel-1.16.2-13.el7.s390.rpm libsss_idmap-devel-1.16.2-13.el7.s390x.rpm libsss_nss_idmap-devel-1.16.2-13.el7.s390.rpm libsss_nss_idmap-devel-1.16.2-13.el7.s390x.rpm libsss_simpleifp-devel-1.16.2-13.el7.s390.rpm libsss_simpleifp-devel-1.16.2-13.el7.s390x.rpm python-libsss_nss_idmap-1.16.2-13.el7.s390x.rpm sssd-debuginfo-1.16.2-13.el7.s390.rpm sssd-debuginfo-1.16.2-13.el7.s390x.rpm sssd-libwbclient-devel-1.16.2-13.el7.s390.rpm sssd-libwbclient-devel-1.16.2-13.el7.s390x.rpm x86_64: libipa_hbac-devel-1.16.2-13.el7.i686.rpm libipa_hbac-devel-1.16.2-13.el7.x86_64.rpm libsss_certmap-devel-1.16.2-13.el7.i686.rpm libsss_certmap-devel-1.16.2-13.el7.x86_64.rpm libsss_idmap-devel-1.16.2-13.el7.i686.rpm libsss_idmap-devel-1.16.2-13.el7.x86_64.rpm libsss_nss_idmap-devel-1.16.2-13.el7.i686.rpm libsss_nss_idmap-devel-1.16.2-13.el7.x86_64.rpm libsss_simpleifp-devel-1.16.2-13.el7.i686.rpm libsss_simpleifp-devel-1.16.2-13.el7.x86_64.rpm sssd-debuginfo-1.16.2-13.el7.i686.rpm sssd-debuginfo-1.16.2-13.el7.x86_64.rpm sssd-libwbclient-devel-1.16.2-13.el7.i686.rpm sssd-libwbclient-devel-1.16.2-13.el7.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: sssd-1.16.2-13.el7.src.rpm noarch: python-sssdconfig-1.16.2-13.el7.noarch.rpm x86_64: libipa_hbac-1.16.2-13.el7.i686.rpm libipa_hbac-1.16.2-13.el7.x86_64.rpm libsss_autofs-1.16.2-13.el7.x86_64.rpm libsss_certmap-1.16.2-13.el7.i686.rpm libsss_certmap-1.16.2-13.el7.x86_64.rpm libsss_idmap-1.16.2-13.el7.i686.rpm libsss_idmap-1.16.2-13.el7.x86_64.rpm libsss_nss_idmap-1.16.2-13.el7.i686.rpm libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm libsss_simpleifp-1.16.2-13.el7.i686.rpm libsss_simpleifp-1.16.2-13.el7.x86_64.rpm libsss_sudo-1.16.2-13.el7.x86_64.rpm python-libipa_hbac-1.16.2-13.el7.x86_64.rpm python-libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm python-sss-1.16.2-13.el7.x86_64.rpm python-sss-murmur-1.16.2-13.el7.x86_64.rpm sssd-1.16.2-13.el7.x86_64.rpm sssd-ad-1.16.2-13.el7.x86_64.rpm sssd-client-1.16.2-13.el7.i686.rpm sssd-client-1.16.2-13.el7.x86_64.rpm sssd-common-1.16.2-13.el7.x86_64.rpm sssd-common-pac-1.16.2-13.el7.x86_64.rpm sssd-dbus-1.16.2-13.el7.x86_64.rpm sssd-debuginfo-1.16.2-13.el7.i686.rpm sssd-debuginfo-1.16.2-13.el7.x86_64.rpm sssd-ipa-1.16.2-13.el7.x86_64.rpm sssd-kcm-1.16.2-13.el7.x86_64.rpm sssd-krb5-1.16.2-13.el7.x86_64.rpm sssd-krb5-common-1.16.2-13.el7.x86_64.rpm sssd-ldap-1.16.2-13.el7.x86_64.rpm sssd-libwbclient-1.16.2-13.el7.x86_64.rpm sssd-polkit-rules-1.16.2-13.el7.x86_64.rpm sssd-proxy-1.16.2-13.el7.x86_64.rpm sssd-tools-1.16.2-13.el7.x86_64.rpm sssd-winbind-idmap-1.16.2-13.el7.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: libipa_hbac-devel-1.16.2-13.el7.i686.rpm libipa_hbac-devel-1.16.2-13.el7.x86_64.rpm libsss_certmap-devel-1.16.2-13.el7.i686.rpm libsss_certmap-devel-1.16.2-13.el7.x86_64.rpm libsss_idmap-devel-1.16.2-13.el7.i686.rpm libsss_idmap-devel-1.16.2-13.el7.x86_64.rpm libsss_nss_idmap-devel-1.16.2-13.el7.i686.rpm libsss_nss_idmap-devel-1.16.2-13.el7.x86_64.rpm libsss_simpleifp-devel-1.16.2-13.el7.i686.rpm libsss_simpleifp-devel-1.16.2-13.el7.x86_64.rpm sssd-debuginfo-1.16.2-13.el7.i686.rpm sssd-debuginfo-1.16.2-13.el7.x86_64.rpm sssd-libwbclient-devel-1.16.2-13.el7.i686.rpm sssd-libwbclient-devel-1.16.2-13.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-10852 https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2018 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBW9gQBtzjgjWX9erEAQhoAA//Vw3B6wv0aGX7sbWYPV4bx67Fl1BokDZq jBmYEhwGV3MKd+3nP7l+eA+uAPW689eHhksFT6RQPB0NJCOAp8/x1UKLbC47zQQp IEIvwkSbCohJYlhNE7fpJ5a5A7p1BXfgLv+HKOAnujY+QsaW5bAhqf3MCAe9U+E0 mykM+G/fmoS09v8PC+CQxUDH8x+eaixHGjqyGjvmgYlMDjRrr5ZzFz53gMy5dkLN vPJ3x4qPTgsjTqs2MgtOtU4qWXKIzCYHZCQwEBB4S6sJl1vmR51guMpZhHa+QYEU qw0JM0nlGT2jwT5O5IXMa2AdTIseuvJp8liWEtRuHPtxLIVu+THY3ft+zRIhl4Uw JHxL8FCyt4uatqT5kmqPpUHG09eC2UXG9IJmKZF1SZoufNGN3pi0b44o8COSEH1t Dp2eOpWfl1HoTd0V3c5M0djAtk4qT2R/z403FLj89XmkniBlU2PtlqJJLyK9rnwO LGv1WyDdWIfNfeVUu0Vuld5VlLqwNV5u0cqtaR8a2n+o/Y3rQv9HkEH7yAcCiGJv NRjA/N0nt6MtIsgl/ZiOKevDAvL58p9Ia1dcFIlAcaRU160AMsc71qyWacskn7bI CN6a5HsqpdDLrXmfQZSfONAiq5lvrfwvEMBWKU7GZdvJ/NKtqAgpUUADurS62RmO 0EJu80uo4cs= =Hg2/ -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce