A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-proxyUpgrade sssd-toolsUpgrade libsss_simpleifpUpgrade libsss_nss_idmapUpgrade libsss_autofsUpgrade sssd-krb5Upgrade libsss_idmapUpgrade sssdUpgrade libipa_hbacUpgrade sssd-clientUpgrade sssd-debuginfoUpgrade sssd-libwbclientUpgrade python-sssUpgrade libsss_certmapUpgrade sssd-winbind-idmapUpgrade libsss_certmap-develUpgrade libipa_hbac-develUpgrade python-libipa_hbacUpgrade libsss_simpleifp-develUpgrade sssd-libwbclient-develUpgrade sssd-polkit-rulesUpgrade python-sssdconfigUpgrade sssd-common-pacUpgrade python-libsss_nss_idmapUpgrade libsss_nss_idmap-develUpgrade sssd-kcmUpgrade sssd-ipaUpgrade sssd-krb5-commonUpgrade sssd-dbusUpgrade sssd-commonUpgrade libsss_sudoUpgrade libsss_idmap-develUpgrade sssd-adUpgrade python-sss-murmurUpgrade sssd-ldap | Apr 27, 2020 | Jan 15, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Jan 15, 2019 |
| Centos_linux | — | Upgrade libsss_idmap-develUpgrade libsss_idmapUpgrade sssd-ldapUpgrade sssd-dbusUpgrade sssd-toolsUpgrade sssd-ipaUpgrade libsss_simpleifpUpgrade sssd-clientUpgrade libsss_autofsUpgrade sssd-libwbclient-develUpgrade sssd-proxyUpgrade sssd-commonUpgrade python-libipa_hbacUpgrade sssd-winbind-idmapUpgrade libsss_sudoUpgrade python-sss-murmurUpgrade sssd-libwbclientUpgrade libipa_hbac-develUpgrade sssd-kcmUpgrade sssd-krb5Upgrade sssd-polkit-rulesUpgrade sssd-adUpgrade libsss_certmapUpgrade sssd-krb5-commonUpgrade sssd-common-pacUpgrade libsss_nss_idmap-develUpgrade libsss_simpleifp-develUpgrade libsss_certmap-develUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade python-sssUpgrade python-sssdconfigUpgrade sssd-debuginfoUpgrade sssd | Aug 28, 2019 | Jan 15, 2019 |
| Debian | — | Upgrade sssd | Feb 14, 2019 | Feb 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-sssUpgrade sssd-proxyUpgrade sssd-adUpgrade libsss_simpleifpUpgrade sssd-krb5Upgrade libsss_certmapUpgrade python-sssdconfigUpgrade libsss_autofsUpgrade sssd-ldapUpgrade python-libsss_nss_idmapUpgrade python-sss-murmurUpgrade sssdUpgrade sssd-krb5-commonUpgrade sssd-dbusUpgrade sssd-libwbclientUpgrade sssd-common-pacUpgrade sssd-commonUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade sssd-ipaUpgrade sssd-toolsUpgrade sssd-clientUpgrade python-libipa_hbacUpgrade libsss_idmapUpgrade libipa_hbac | Jul 23, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libipa_hbacUpgrade libsss_autofsUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade libsss_idmapUpgrade python-libipa_hbacUpgrade sssd-dbusUpgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade sssd-krb5Upgrade sssd-proxyUpgrade python-sssdconfigUpgrade python-libsss_nss_idmapUpgrade libsss_certmapUpgrade sssd-krb5-commonUpgrade sssd-ipaUpgrade libsss_simpleifpUpgrade sssd-adUpgrade sssdUpgrade python-sssUpgrade libsss_sudoUpgrade sssd-commonUpgrade python-sss-murmurUpgrade sssd-ldap | Sep 25, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-sssdconfigUpgrade sssd-ipaUpgrade sssdUpgrade libsss_nss_idmapUpgrade sssd-proxyUpgrade sssd-adUpgrade libsss_certmapUpgrade sssd-krb5Upgrade python-sssUpgrade libsss_simpleifpUpgrade sssd-ldapUpgrade python-libipa_hbacUpgrade libsss_sudoUpgrade sssd-commonUpgrade python-libsss_nss_idmapUpgrade libsss_idmapUpgrade python-sss-murmurUpgrade sssd-clientUpgrade libsss_autofsUpgrade sssd-common-pacUpgrade sssd-libwbclientUpgrade sssd-toolsUpgrade sssd-dbusUpgrade sssd-krb5-commonUpgrade libipa_hbac | Jun 27, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-ipaUpgrade sssd-dbusUpgrade sssd-winbind-idmapUpgrade python3-sssdconfigUpgrade sssd-clientUpgrade sssd-nfs-idmapUpgrade python3-libsss_nss_idmapUpgrade python3-libipa_hbacUpgrade sssd-proxyUpgrade python3-sss-murmurUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade sssd-libwbclientUpgrade libipa_hbacUpgrade libsss_sudoUpgrade sssd-krb5Upgrade sssd-toolsUpgrade libsss_simpleifpUpgrade sssd-adUpgrade libsss_certmapUpgrade libsss_autofsUpgrade sssdUpgrade sssd-kcmUpgrade sssd-ldapUpgrade sssd-commonUpgrade libsss_idmapUpgrade sssd-krb5-commonUpgrade python3-sss | Jun 27, 2019 | Jan 15, 2019 |
| Oracle_linux | — | Upgrade libsss_simpleifpUpgrade libsss_autofsUpgrade libsss_simpleifp-develUpgrade sssd-common-pacUpgrade sssd-toolsUpgrade libsss_certmap-develUpgrade sssd-libwbclient-develUpgrade python-sss-murmurUpgrade libsss_certmapUpgrade sssd-krb5Upgrade sssd-ldapUpgrade sssdUpgrade libsss_nss_idmap-develUpgrade libsss_idmapUpgrade sssd-clientUpgrade sssd-ipaUpgrade sssd-commonUpgrade python-sssUpgrade libipa_hbac-develUpgrade libipa_hbacUpgrade sssd-winbind-idmapUpgrade sssd-dbusUpgrade sssd-krb5-commonUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade sssd-proxyUpgrade python-sssdconfigUpgrade libsss_idmap-develUpgrade sssd-adUpgrade sssd-polkit-rulesUpgrade sssd-kcmUpgrade sssd-libwbclientUpgrade python-libsss_nss_idmapUpgrade python-libipa_hbac | Jul 21, 2020 | Dec 4, 2018 |
| Redhat_linux | — | Upgrade sssd-proxyUpgrade sssd-ipaUpgrade libsss_simpleifp-develUpgrade python-libipa_hbacUpgrade python-sssdconfigUpgrade sssd-commonUpgrade sssd-dbusUpgrade sssd-winbind-idmapUpgrade libsss_nss_idmapUpgrade libsss_sudoUpgrade sssd-polkit-rulesUpgrade libsss_idmapUpgrade libsss_nss_idmap-develUpgrade sssd-krb5-commonUpgrade python-libsss_nss_idmapUpgrade sssd-debuginfoUpgrade sssd-toolsUpgrade libipa_hbacUpgrade sssd-adUpgrade sssd-libwbclientUpgrade libsss_idmap-develUpgrade libipa_hbac-develUpgrade sssd-common-pacUpgrade sssd-kcmUpgrade libsss_simpleifpUpgrade sssd-clientUpgrade libsss_autofsUpgrade libsss_certmapUpgrade libsss_certmap-develUpgrade sssd-ldapUpgrade python-sssUpgrade sssdUpgrade sssd-libwbclient-develNo solution existsUpgrade python-sss-murmurUpgrade sssd-krb5 | Aug 7, 2019 | Jan 15, 2019 |
| Suse | — | Upgrade libipa_hbac0Upgrade sssd-krb5-commonUpgrade python3-sss_nss_idmapUpgrade sssd-winbind-idmapUpgrade sssd-toolsUpgrade sssd-32bitUpgrade libsss_idmap-develUpgrade adcliUpgrade sssd-ipaUpgrade python-sssd-configUpgrade libsss_idmap0Upgrade python3-ipa_hbacUpgrade sssd-ldapUpgrade sssd-wbclientUpgrade libsss_sudoUpgrade sssdUpgrade sssd-proxyUpgrade sssd-adUpgrade libsss_nss_idmap0Upgrade libnfsidmap-sssUpgrade python3-sssd-configUpgrade libsss_simpleifp0Upgrade sssd-wbclient-develUpgrade adcli-docUpgrade sssd-dbusUpgrade libsss_simpleifp-develUpgrade libsss_certmap-develUpgrade libsss_nss_idmap-develUpgrade libsss_certmap0Upgrade sssd-commonUpgrade sssd-krb5Upgrade python3-sss-murmurUpgrade libipa_hbac-devel | Mar 7, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jan 15, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub