ELSA-2013-1319

ELSA-2013-1319 - sssd security and bug fix update

Type:	SECURITY
Impact:	LOW
Release Date:	2013-10-06

Description

[1.5.1-70]
- Fix IPA provider performance issue when storing large host groups
- Resolves: rhbz#979047 - sssd_be goes to 99% CPU and causes significant
login delays when client is under load

[1.5.1-69]
- Fix startup with a broken configuration
- Resolves: rhbz#974036 - sssd core process keeps running after backends quit

[1.5.1-68]
- Add a forgotten break in a switch statement
- Related: rhbz#886165 - sssd will stop functioning correctly if sssd_be
hangs for a while

[1.5.1-67]
- Fix initialization of the paging control
- Related: rhbz#886165 - sssd segfaults (sssd_be & sssd_pam) and corrupts
cache repeatedly

[1.5.1-66]
- Resolves: rhbz#961680 - sssd components seem to mishandle sighup

[1.5.1-65]
- Resolves: rhbz#959838 - CVE-2013-0219 sssd: TOCTOU race conditions by
copying and removing directory trees

[1.5.1-64]
- Free the LDAP control when following referrals
- Resolves: rhbz#820908 - SSSD stops working due to memory problems

[1.5.1-63]
- Restart services with a timeout in case they are restarted too often
- Resolves: rhbz#950156 - sssd dead but pid file exists after heavy load
presented

[1.5.1-62]
- Use the LDAP paging control more sparingly
- Related: rhbz#886165 - sssd segfaults (sssd_be & sssd_pam) and corrupts
cache repeatedly

[1.5.1-61]
- Resolves: rhbz#886165 - sssd segfaults (sssd_be & sssd_pam) and corrupts
cache repeatedly

[1.5.1-60]
- Resolves: rhbz#886165 - sssd will stop functioning correctly if sssd_be
hangs for a while

[1.5.1-59]
- Process pending requests on PAM reconnect
- Resolves: rhbz#882414 - sssd will stop perform LDAP requests for user
lookup (nss), authorization, and authentication

[1.5.1-58]
- Initialize hbac_ctx to NULL
- Resolves: rhbz#850722

[1.5.1-57]
- Process all groups from a single nesting level
- Resolves: rhbz#846664
- Backport the option to disable srchost processing
- Resolves: rhbz#841677

[1.5.1-56]
- Require libgssapiv2.so to pull in cyrus-sasl-gssapi
- Resolves: rhbz#786443

[1.5.1-55]
- Rebuild against newer libtdb
- Related: rhbz#838130 - SSSD needs to be rebuilt against newer libtdb

[1.5.1-54]
- Resolves: rhbz#797272 - sssd-1.5.1-37.el5 needs a dependency to dbus >= 1.1
- Resolves: rhbz#797300 - Logging in with ssh pub key should consult
authentication authority policies
- Resolves: rhbz#833169 - Add support for terminating idle connections in
sssd_nss
- Resolves: rhbz#783081 - sssd_be crashes during auth when there exists UTF
source host group in an hbacrule
- Resolves: rhbz#786443 - sssd on ppc64 doesn't pull cyrus-sasl-gssapi.ppc as
a dependancy
- Resolves: rhbz#827469 - Unable to lookup user, group, netgroup aliases with
case_sensitive=false

[1.5.1-53]
- Resolves: rhbz#826237 - sssd_be segfaulting with IPA backend

[1.5.1-52]
- Resolves: rhbz#817073 - sssd fails to use the last AD server if other AD
servers are not reachable
- Resolves: rhbz#828190 - Infinite loop checking Kerberos credentials

[1.5.1-51]
- Resolves: rhbz#815154 - Raise limits for max num of files sssd_nss/sssd_pam
can use

[1.5.1-50]
- Add the ability to disable the LDAP simple paging control
- Resolves: rhbz#782221 - Intermittent LDAP paging errors

Related CVEs

CVE-2013-0219

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	sssd-1.5.1-70.el5.src.rpm	0d39c7f644cb0650f1b3863235225f83050b78bbf8915fe0ae960ed8834e6438	ELBA-2014-1237	ol5_i386_latest
	sssd-1.5.1-70.el5.src.rpm	0d39c7f644cb0650f1b3863235225f83050b78bbf8915fe0ae960ed8834e6438	ELBA-2014-1237	ol5_u10_i386_base
	libipa_hbac-1.5.1-70.el5.i386.rpm	48cf0fcafb50f5abd45cd107274de6e26d4068b791af2ef5d74ae65b7496237a	ELBA-2014-1237	ol5_i386_latest
	libipa_hbac-1.5.1-70.el5.i386.rpm	48cf0fcafb50f5abd45cd107274de6e26d4068b791af2ef5d74ae65b7496237a	ELBA-2014-1237	ol5_u10_i386_base
	libipa_hbac-devel-1.5.1-70.el5.i386.rpm	e5b9d1360a835d48fbfda8dedef64316718023f4115e6d31fa9c6b58c913c2a5	ELBA-2014-1237	ol5_i386_latest
	libipa_hbac-devel-1.5.1-70.el5.i386.rpm	e5b9d1360a835d48fbfda8dedef64316718023f4115e6d31fa9c6b58c913c2a5	ELBA-2014-1237	ol5_u10_i386_base
	libipa_hbac-python-1.5.1-70.el5.i386.rpm	6837164ccd0859aaa47b33fe13f860a2ff8278e6e22f0d8b7546f755e64b209f	ELBA-2014-1237	ol5_i386_latest
	libipa_hbac-python-1.5.1-70.el5.i386.rpm	6837164ccd0859aaa47b33fe13f860a2ff8278e6e22f0d8b7546f755e64b209f	ELBA-2014-1237	ol5_u10_i386_base
	sssd-1.5.1-70.el5.i386.rpm	cc49236fb7c6a331970791963abc51962998ef060e97de8b5614d62e081a1fa0	ELBA-2014-1237	ol5_i386_latest
	sssd-1.5.1-70.el5.i386.rpm	cc49236fb7c6a331970791963abc51962998ef060e97de8b5614d62e081a1fa0	ELBA-2014-1237	ol5_u10_i386_base
	sssd-client-1.5.1-70.el5.i386.rpm	20621f4edc0173803f00d1b1696b4e26535014db9792c3ac0db09cf6040e4db7	ELBA-2014-1237	ol5_i386_latest
	sssd-client-1.5.1-70.el5.i386.rpm	20621f4edc0173803f00d1b1696b4e26535014db9792c3ac0db09cf6040e4db7	ELBA-2014-1237	ol5_u10_i386_base
	sssd-tools-1.5.1-70.el5.i386.rpm	524db73bf59ffe8bc30b68e96d1a8bdb961468c2beb46ada37b071499411ac4e	ELBA-2014-1237	ol5_i386_latest
	sssd-tools-1.5.1-70.el5.i386.rpm	524db73bf59ffe8bc30b68e96d1a8bdb961468c2beb46ada37b071499411ac4e	ELBA-2014-1237	ol5_u10_i386_base
Oracle Linux 5 (ia64)	sssd-1.5.1-70.el5.src.rpm	0d39c7f644cb0650f1b3863235225f83050b78bbf8915fe0ae960ed8834e6438	ELBA-2014-1237	ol5_ia64_latest
	sssd-1.5.1-70.el5.src.rpm	0d39c7f644cb0650f1b3863235225f83050b78bbf8915fe0ae960ed8834e6438	ELBA-2014-1237	ol5_u10_ia64_base
	libipa_hbac-1.5.1-70.el5.ia64.rpm	757463cd731311a7bccc9780d9ff83c5c8daba25f0940864a417d2f1c7039ac1	ELBA-2014-1237	ol5_ia64_latest
	libipa_hbac-1.5.1-70.el5.ia64.rpm	757463cd731311a7bccc9780d9ff83c5c8daba25f0940864a417d2f1c7039ac1	ELBA-2014-1237	ol5_u10_ia64_base
	libipa_hbac-devel-1.5.1-70.el5.ia64.rpm	ecd420adcacf2e07574aa72121f2ce20aa867efa623bb371d668fdb0275827d5	ELBA-2014-1237	ol5_ia64_latest
	libipa_hbac-devel-1.5.1-70.el5.ia64.rpm	ecd420adcacf2e07574aa72121f2ce20aa867efa623bb371d668fdb0275827d5	ELBA-2014-1237	ol5_u10_ia64_base
	libipa_hbac-python-1.5.1-70.el5.ia64.rpm	d6b83f876fd9d443905399784a670c63e56e33915f308328b266c7e6f23c4ed8	ELBA-2014-1237	ol5_ia64_latest
	libipa_hbac-python-1.5.1-70.el5.ia64.rpm	d6b83f876fd9d443905399784a670c63e56e33915f308328b266c7e6f23c4ed8	ELBA-2014-1237	ol5_u10_ia64_base
	sssd-1.5.1-70.el5.ia64.rpm	9c1245e867262f5a3ae55941d5ee08e33ce7b0a3d1dbecb249b937b1c1f16059	ELBA-2014-1237	ol5_ia64_latest
	sssd-1.5.1-70.el5.ia64.rpm	9c1245e867262f5a3ae55941d5ee08e33ce7b0a3d1dbecb249b937b1c1f16059	ELBA-2014-1237	ol5_u10_ia64_base
	sssd-client-1.5.1-70.el5.i386.rpm	20621f4edc0173803f00d1b1696b4e26535014db9792c3ac0db09cf6040e4db7	ELBA-2014-1237	ol5_ia64_latest
	sssd-client-1.5.1-70.el5.i386.rpm	20621f4edc0173803f00d1b1696b4e26535014db9792c3ac0db09cf6040e4db7	ELBA-2014-1237	ol5_u10_ia64_base
	sssd-client-1.5.1-70.el5.ia64.rpm	eedd4f60b406089ea77ddc970f6d6d2a6db32a0e247c02cee0404e212830e408	ELBA-2014-1237	ol5_ia64_latest
	sssd-client-1.5.1-70.el5.ia64.rpm	eedd4f60b406089ea77ddc970f6d6d2a6db32a0e247c02cee0404e212830e408	ELBA-2014-1237	ol5_u10_ia64_base
	sssd-tools-1.5.1-70.el5.ia64.rpm	684a49bba66d1e9aae0dfb7f27d8d2dc03b1e4e6772803e02c114967ed522a30	ELBA-2014-1237	ol5_ia64_latest
	sssd-tools-1.5.1-70.el5.ia64.rpm	684a49bba66d1e9aae0dfb7f27d8d2dc03b1e4e6772803e02c114967ed522a30	ELBA-2014-1237	ol5_u10_ia64_base
Oracle Linux 5 (x86_64)	sssd-1.5.1-70.el5.src.rpm	0d39c7f644cb0650f1b3863235225f83050b78bbf8915fe0ae960ed8834e6438	ELBA-2014-1237	ol5_u10_x86_64_base
	sssd-1.5.1-70.el5.src.rpm	0d39c7f644cb0650f1b3863235225f83050b78bbf8915fe0ae960ed8834e6438	ELBA-2014-1237	ol5_x86_64_latest
	libipa_hbac-1.5.1-70.el5.i386.rpm	48cf0fcafb50f5abd45cd107274de6e26d4068b791af2ef5d74ae65b7496237a	ELBA-2014-1237	ol5_u10_x86_64_base
	libipa_hbac-1.5.1-70.el5.i386.rpm	48cf0fcafb50f5abd45cd107274de6e26d4068b791af2ef5d74ae65b7496237a	ELBA-2014-1237	ol5_x86_64_latest
	libipa_hbac-1.5.1-70.el5.x86_64.rpm	cb33af0d013645c9a92360e4f5fe86e8da9a3c412ac414876c0dc2b02f6b7c47	ELBA-2014-1237	ol5_u10_x86_64_base
	libipa_hbac-1.5.1-70.el5.x86_64.rpm	cb33af0d013645c9a92360e4f5fe86e8da9a3c412ac414876c0dc2b02f6b7c47	ELBA-2014-1237	ol5_x86_64_latest
	libipa_hbac-devel-1.5.1-70.el5.i386.rpm	e5b9d1360a835d48fbfda8dedef64316718023f4115e6d31fa9c6b58c913c2a5	ELBA-2014-1237	ol5_u10_x86_64_base
	libipa_hbac-devel-1.5.1-70.el5.i386.rpm	e5b9d1360a835d48fbfda8dedef64316718023f4115e6d31fa9c6b58c913c2a5	ELBA-2014-1237	ol5_x86_64_latest
	libipa_hbac-devel-1.5.1-70.el5.x86_64.rpm	d783773ecd3a3297e7887c2db78afce1203cc2f3fb0c0752cc70891598e9260e	ELBA-2014-1237	ol5_u10_x86_64_base
	libipa_hbac-devel-1.5.1-70.el5.x86_64.rpm	d783773ecd3a3297e7887c2db78afce1203cc2f3fb0c0752cc70891598e9260e	ELBA-2014-1237	ol5_x86_64_latest
	libipa_hbac-python-1.5.1-70.el5.x86_64.rpm	95aeba72fd7ff8657e249fecd25ce4a480ae0a73c8d24da2369f4744be7f6859	ELBA-2014-1237	ol5_u10_x86_64_base
	libipa_hbac-python-1.5.1-70.el5.x86_64.rpm	95aeba72fd7ff8657e249fecd25ce4a480ae0a73c8d24da2369f4744be7f6859	ELBA-2014-1237	ol5_x86_64_latest
	sssd-1.5.1-70.el5.x86_64.rpm	a0aaab0fb8d58b0d7ece1788859e29830021fc5990bf28453ae72465ffc3f835	ELBA-2014-1237	ol5_u10_x86_64_base
	sssd-1.5.1-70.el5.x86_64.rpm	a0aaab0fb8d58b0d7ece1788859e29830021fc5990bf28453ae72465ffc3f835	ELBA-2014-1237	ol5_x86_64_latest
	sssd-client-1.5.1-70.el5.i386.rpm	20621f4edc0173803f00d1b1696b4e26535014db9792c3ac0db09cf6040e4db7	ELBA-2014-1237	ol5_u10_x86_64_base
	sssd-client-1.5.1-70.el5.i386.rpm	20621f4edc0173803f00d1b1696b4e26535014db9792c3ac0db09cf6040e4db7	ELBA-2014-1237	ol5_x86_64_latest
	sssd-client-1.5.1-70.el5.x86_64.rpm	0d170ff82dd877a1a3495c90903c514cff89bc779ca759916de8afae07579232	ELBA-2014-1237	ol5_u10_x86_64_base
	sssd-client-1.5.1-70.el5.x86_64.rpm	0d170ff82dd877a1a3495c90903c514cff89bc779ca759916de8afae07579232	ELBA-2014-1237	ol5_x86_64_latest
	sssd-tools-1.5.1-70.el5.x86_64.rpm	f6cf57f011135e92c8678612664647f0a03d973b6c00fd030ca072019a016c5a	ELBA-2014-1237	ol5_u10_x86_64_base
	sssd-tools-1.5.1-70.el5.x86_64.rpm	f6cf57f011135e92c8678612664647f0a03d973b6c00fd030ca072019a016c5a	ELBA-2014-1237	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team