ELSA-2013-1319

ELSA-2013-1319 - sssd security and bug fix update

Type:	SECURITY
Severity:	LOW
Release Date:	2013-10-06

Description

[1.5.1-70]
- Fix IPA provider performance issue when storing large host groups
- Resolves: rhbz#979047 - sssd_be goes to 99% CPU and causes significant
login delays when client is under load

[1.5.1-69]
- Fix startup with a broken configuration
- Resolves: rhbz#974036 - sssd core process keeps running after backends quit

[1.5.1-68]
- Add a forgotten break in a switch statement
- Related: rhbz#886165 - sssd will stop functioning correctly if sssd_be
hangs for a while

[1.5.1-67]
- Fix initialization of the paging control
- Related: rhbz#886165 - sssd segfaults (sssd_be & sssd_pam) and corrupts
cache repeatedly

[1.5.1-66]
- Resolves: rhbz#961680 - sssd components seem to mishandle sighup

[1.5.1-65]
- Resolves: rhbz#959838 - CVE-2013-0219 sssd: TOCTOU race conditions by
copying and removing directory trees

[1.5.1-64]
- Free the LDAP control when following referrals
- Resolves: rhbz#820908 - SSSD stops working due to memory problems

[1.5.1-63]
- Restart services with a timeout in case they are restarted too often
- Resolves: rhbz#950156 - sssd dead but pid file exists after heavy load
presented

[1.5.1-62]
- Use the LDAP paging control more sparingly
- Related: rhbz#886165 - sssd segfaults (sssd_be & sssd_pam) and corrupts
cache repeatedly

[1.5.1-61]
- Resolves: rhbz#886165 - sssd segfaults (sssd_be & sssd_pam) and corrupts
cache repeatedly

[1.5.1-60]
- Resolves: rhbz#886165 - sssd will stop functioning correctly if sssd_be
hangs for a while

[1.5.1-59]
- Process pending requests on PAM reconnect
- Resolves: rhbz#882414 - sssd will stop perform LDAP requests for user
lookup (nss), authorization, and authentication

[1.5.1-58]
- Initialize hbac_ctx to NULL
- Resolves: rhbz#850722

[1.5.1-57]
- Process all groups from a single nesting level
- Resolves: rhbz#846664
- Backport the option to disable srchost processing
- Resolves: rhbz#841677

[1.5.1-56]
- Require libgssapiv2.so to pull in cyrus-sasl-gssapi
- Resolves: rhbz#786443

[1.5.1-55]
- Rebuild against newer libtdb
- Related: rhbz#838130 - SSSD needs to be rebuilt against newer libtdb

[1.5.1-54]
- Resolves: rhbz#797272 - sssd-1.5.1-37.el5 needs a dependency to dbus >= 1.1
- Resolves: rhbz#797300 - Logging in with ssh pub key should consult
authentication authority policies
- Resolves: rhbz#833169 - Add support for terminating idle connections in
sssd_nss
- Resolves: rhbz#783081 - sssd_be crashes during auth when there exists UTF
source host group in an hbacrule
- Resolves: rhbz#786443 - sssd on ppc64 doesn't pull cyrus-sasl-gssapi.ppc as
a dependancy
- Resolves: rhbz#827469 - Unable to lookup user, group, netgroup aliases with
case_sensitive=false

[1.5.1-53]
- Resolves: rhbz#826237 - sssd_be segfaulting with IPA backend

[1.5.1-52]
- Resolves: rhbz#817073 - sssd fails to use the last AD server if other AD
servers are not reachable
- Resolves: rhbz#828190 - Infinite loop checking Kerberos credentials

[1.5.1-51]
- Resolves: rhbz#815154 - Raise limits for max num of files sssd_nss/sssd_pam
can use

[1.5.1-50]
- Add the ability to disable the LDAP simple paging control
- Resolves: rhbz#782221 - Intermittent LDAP paging errors

Related CVEs

CVE-2013-0219

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	sssd-1.5.1-70.el5.src.rpm	eda946e0e3e7a6124c5b63c2b610eae2	ELBA-2014-1237
	libipa_hbac-1.5.1-70.el5.i386.rpm	1a01e2ef1c8e495f2e604acf2aa25b72	ELBA-2014-1237
	libipa_hbac-devel-1.5.1-70.el5.i386.rpm	3ac6fd4dc3e8ddd9cc633c1b5c95c4de	ELBA-2014-1237
	libipa_hbac-python-1.5.1-70.el5.i386.rpm	73a6e32afd74a4bb24843873ef2be7be	ELBA-2014-1237
	sssd-1.5.1-70.el5.i386.rpm	349b7147ddebe5cdb052d1c18c7b4be7	ELBA-2014-1237
	sssd-client-1.5.1-70.el5.i386.rpm	16c4456c6f1e17f2f9b7ee0a94b6e404	ELBA-2014-1237
	sssd-tools-1.5.1-70.el5.i386.rpm	5f2fa7b0b669f6754890e67acfd24293	ELBA-2014-1237
Oracle Linux 5 (ia64)	sssd-1.5.1-70.el5.src.rpm	eda946e0e3e7a6124c5b63c2b610eae2	ELBA-2014-1237
	libipa_hbac-1.5.1-70.el5.ia64.rpm	6e7540762ccf52e6db2e978c6316c944	ELBA-2014-1237
	libipa_hbac-devel-1.5.1-70.el5.ia64.rpm	1067a714f8fdce4ef874e7331fc24595	ELBA-2014-1237
	libipa_hbac-python-1.5.1-70.el5.ia64.rpm	6c5eed89dd86b90731edbaceb899b924	ELBA-2014-1237
	sssd-1.5.1-70.el5.ia64.rpm	5747fa008dd8073e140ca62a7b3e36de	ELBA-2014-1237
	sssd-client-1.5.1-70.el5.i386.rpm	16c4456c6f1e17f2f9b7ee0a94b6e404	ELBA-2014-1237
	sssd-client-1.5.1-70.el5.ia64.rpm	ff38e9854249e516ca7ba44173f334d7	ELBA-2014-1237
	sssd-tools-1.5.1-70.el5.ia64.rpm	1038f7daf648eed43bad53730ab1b5a6	ELBA-2014-1237
Oracle Linux 5 (x86_64)	sssd-1.5.1-70.el5.src.rpm	eda946e0e3e7a6124c5b63c2b610eae2	ELBA-2014-1237
	libipa_hbac-1.5.1-70.el5.i386.rpm	1a01e2ef1c8e495f2e604acf2aa25b72	ELBA-2014-1237
	libipa_hbac-1.5.1-70.el5.x86_64.rpm	2e0b176e70c5888bff597cf355ec3cc4	ELBA-2014-1237
	libipa_hbac-devel-1.5.1-70.el5.i386.rpm	3ac6fd4dc3e8ddd9cc633c1b5c95c4de	ELBA-2014-1237
	libipa_hbac-devel-1.5.1-70.el5.x86_64.rpm	b815c03efb2ab7e33d39463a01eb5598	ELBA-2014-1237
	libipa_hbac-python-1.5.1-70.el5.x86_64.rpm	c1719456fe9b7359c8089f4533e3750d	ELBA-2014-1237
	sssd-1.5.1-70.el5.x86_64.rpm	a3c5f4b41709cf5591df41db5c51d620	ELBA-2014-1237
	sssd-client-1.5.1-70.el5.i386.rpm	16c4456c6f1e17f2f9b7ee0a94b6e404	ELBA-2014-1237
	sssd-client-1.5.1-70.el5.x86_64.rpm	f22e4a92a4a55577f3e263dc2ad533b2	ELBA-2014-1237
	sssd-tools-1.5.1-70.el5.x86_64.rpm	d3ce869b85246d13dd3ebc64558f0b37	ELBA-2014-1237

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team