A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libsss_certmapUpgrade sssd-toolsUpgrade libsss_nss_idmapUpgrade sssd-winbind-idmapUpgrade sssd-libwbclientUpgrade sssd-proxyUpgrade libsss_autofsUpgrade sssdUpgrade python-sssUpgrade sssd-debuginfoUpgrade libipa_hbacUpgrade sssd-clientUpgrade libsss_simpleifpUpgrade libsss_idmapUpgrade sssd-krb5Upgrade python-sss-murmurUpgrade libsss_idmap-develUpgrade libsss_simpleifp-develUpgrade libsss_certmap-develUpgrade libsss_nss_idmap-develUpgrade python-libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-krb5-commonUpgrade libipa_hbac-develUpgrade sssd-commonUpgrade sssd-ipaUpgrade sssd-kcmUpgrade sssd-polkit-rulesUpgrade sssd-dbusUpgrade python-libipa_hbacUpgrade sssd-common-pacUpgrade libsss_sudoUpgrade sssd-ldapUpgrade sssd-adUpgrade sssd-libwbclient-devel | Apr 27, 2020 | Jan 15, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Jan 15, 2019 |
| Centos_linux | — | Upgrade sssd-ldapUpgrade sssd-winbind-idmapUpgrade sssd-proxyUpgrade sssd-dbusUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade libsss_simpleifpUpgrade sssd-clientUpgrade sssd-ipaUpgrade sssd-libwbclient-develUpgrade libsss_autofsUpgrade libsss_idmapUpgrade libsss_idmap-develUpgrade sssd-toolsUpgrade sssd-debuginfoUpgrade python-sss-murmurUpgrade sssd-common-pacUpgrade libipa_hbacUpgrade libsss_simpleifp-develUpgrade libsss_sudoUpgrade libsss_certmapUpgrade sssdUpgrade python-libsss_nss_idmapUpgrade python-sssUpgrade sssd-polkit-rulesUpgrade libsss_nss_idmap-develUpgrade libsss_nss_idmapUpgrade sssd-krb5Upgrade sssd-krb5-commonUpgrade sssd-kcmUpgrade libipa_hbac-develUpgrade sssd-libwbclientUpgrade libsss_certmap-develUpgrade sssd-adUpgrade python-sssdconfig | Aug 28, 2019 | Jan 15, 2019 |
| Debian | — | Upgrade sssd | Feb 14, 2019 | Feb 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sssd-clientUpgrade python-libipa_hbacUpgrade libipa_hbacUpgrade sssd-toolsUpgrade sssd-dbusUpgrade libsss_idmapUpgrade libsss_nss_idmapUpgrade libsss_sudoUpgrade sssd-libwbclientUpgrade sssd-commonUpgrade sssd-ipaUpgrade sssd-common-pacUpgrade sssd-krb5-commonUpgrade python-sssdconfigUpgrade sssdUpgrade python-sssUpgrade sssd-krb5Upgrade sssd-proxyUpgrade libsss_certmapUpgrade sssd-adUpgrade libsss_simpleifpUpgrade python-libsss_nss_idmapUpgrade libsss_autofsUpgrade sssd-ldapUpgrade python-sss-murmur | Jul 23, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-sssdconfigUpgrade python-sss-murmurUpgrade python-libsss_nss_idmapUpgrade sssd-ldapUpgrade libsss_certmapUpgrade sssd-commonUpgrade python-sssUpgrade libsss_sudoUpgrade sssdUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade libsss_simpleifpUpgrade sssd-ipaUpgrade sssd-common-pacUpgrade sssd-proxyUpgrade sssd-libwbclientUpgrade sssd-toolsUpgrade sssd-krb5Upgrade libsss_nss_idmapUpgrade sssd-clientUpgrade sssd-dbusUpgrade libipa_hbacUpgrade libsss_autofsUpgrade libsss_idmapUpgrade python-libipa_hbac | Sep 25, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sssd-clientUpgrade python-libsss_nss_idmapUpgrade libipa_hbacUpgrade libsss_sudoUpgrade sssd-commonUpgrade sssd-ldapUpgrade sssd-toolsUpgrade libsss_autofsUpgrade python-libipa_hbacUpgrade sssd-krb5-commonUpgrade sssd-dbusUpgrade python-sss-murmurUpgrade sssd-libwbclientUpgrade sssd-common-pacUpgrade libsss_idmapUpgrade sssd-proxyUpgrade python-sssUpgrade sssd-adUpgrade libsss_nss_idmapUpgrade sssdUpgrade sssd-ipaUpgrade python-sssdconfigUpgrade libsss_certmapUpgrade sssd-krb5Upgrade libsss_simpleifp | Jun 27, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsss_autofsUpgrade libsss_certmapUpgrade sssd-toolsUpgrade libsss_idmapUpgrade python3-sssUpgrade sssd-adUpgrade sssdUpgrade sssd-krb5-commonUpgrade sssd-commonUpgrade sssd-krb5Upgrade sssd-ldapUpgrade libsss_simpleifpUpgrade sssd-kcmUpgrade libsss_sudoUpgrade python3-libsss_nss_idmapUpgrade sssd-dbusUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-ipaUpgrade sssd-clientUpgrade python3-libipa_hbacUpgrade sssd-proxyUpgrade python3-sss-murmurUpgrade sssd-winbind-idmapUpgrade sssd-nfs-idmapUpgrade python3-sssdconfigUpgrade sssd-libwbclient | Jun 27, 2019 | Jan 15, 2019 |
| Oracle_linux | — | Upgrade sssd-ldapUpgrade sssdUpgrade libsss_idmapUpgrade sssd-libwbclient-develUpgrade libsss_simpleifpUpgrade python-sss-murmurUpgrade sssd-toolsUpgrade libsss_simpleifp-develUpgrade libsss_certmap-develUpgrade libsss_certmapUpgrade libsss_nss_idmap-develUpgrade sssd-common-pacUpgrade libsss_autofsUpgrade sssd-krb5Upgrade sssd-clientUpgrade libipa_hbacUpgrade sssd-ipaUpgrade sssd-dbusUpgrade libipa_hbac-develUpgrade sssd-libwbclientUpgrade libsss_idmap-develUpgrade sssd-winbind-idmapUpgrade sssd-krb5-commonUpgrade python-sssUpgrade sssd-kcmUpgrade sssd-polkit-rulesUpgrade sssd-commonUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-proxyUpgrade python-libipa_hbacUpgrade sssd-adUpgrade python-libsss_nss_idmap | Jul 21, 2020 | Dec 4, 2018 |
| Redhat_linux | — | Upgrade sssd-libwbclient-develUpgrade libsss_autofsUpgrade sssd-krb5Upgrade sssd-kcmNo solution existsUpgrade libipa_hbac-develUpgrade sssd-common-pacUpgrade libsss_certmapUpgrade python-sss-murmurUpgrade libsss_certmap-develUpgrade python-sssUpgrade sssd-clientUpgrade sssdUpgrade sssd-ldapUpgrade libsss_simpleifpUpgrade sssd-winbind-idmapUpgrade python-sssdconfigUpgrade sssd-debuginfoUpgrade sssd-dbusUpgrade sssd-commonUpgrade libsss_idmap-develUpgrade libsss_nss_idmap-develUpgrade libsss_nss_idmapUpgrade sssd-proxyUpgrade libipa_hbacUpgrade sssd-krb5-commonUpgrade sssd-toolsUpgrade sssd-polkit-rulesUpgrade libsss_idmapUpgrade sssd-libwbclientUpgrade python-libipa_hbacUpgrade sssd-ipaUpgrade sssd-adUpgrade libsss_simpleifp-develUpgrade libsss_sudoUpgrade python-libsss_nss_idmap | Aug 7, 2019 | Jan 15, 2019 |
| Suse | — | Upgrade libsss_simpleifp-develUpgrade sssd-dbusUpgrade libnfsidmap-sssUpgrade sssd-wbclient-develUpgrade python3-sssd-configUpgrade sssd-krb5Upgrade python3-sss-murmurUpgrade adcli-docUpgrade libsss_nss_idmap-develUpgrade libsss_simpleifp0Upgrade libsss_certmap0Upgrade sssd-commonUpgrade libipa_hbac-develUpgrade libsss_certmap-develUpgrade libsss_sudoUpgrade adcliUpgrade sssd-wbclientUpgrade libsss_idmap0Upgrade sssd-32bitUpgrade sssd-ipaUpgrade python3-ipa_hbacUpgrade python3-sss_nss_idmapUpgrade sssd-krb5-commonUpgrade sssd-ldapUpgrade libsss_idmap-develUpgrade sssd-winbind-idmapUpgrade sssd-toolsUpgrade sssd-proxyUpgrade sssdUpgrade sssd-adUpgrade libsss_nss_idmap0Upgrade python-sssd-configUpgrade libipa_hbac0 | Mar 7, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jan 15, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub