Security update for sssd SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:0081-1 Final 1 1 2019-01-11T16:06:47Z current 2019-01-11T16:06:47Z 2019-01-11T16:06:47Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for sssd This update for sssd provides the following fixes: This security issue was fixed: - CVE-2018-10852: Set stricter permissions on /var/lib/sss/pipes/sudo to prevent the disclosure of sudo rules for arbitrary users (bsc#1098377) These non-security issues were fixed: - Fix a segmentation fault in sss_cache command. (bsc#1072728) - Fix a failure in autofs initialisation sequence upon system boot. (bsc#1010700) - Fix race condition on boot between SSSD and autofs. (bsc#1010700) - Fix a bug where file descriptors were not closed (bsc#1080156) - Fix an issue where sssd logs were not rotated properly (bsc#1080156) - Remove whitespaces from netgroup entries (bsc#1087320) - Remove misleading log messages (bsc#1101877) - exit() the forked process if exec()-ing a child process fails (bsc#1110299) - Do not schedule the machine renewal task if adcli is not executable (bsc#1110299) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-81,SUSE-OpenStack-Cloud-7-2019-81,SUSE-SLE-DESKTOP-12-SP3-2019-81,SUSE-SLE-SAP-12-SP2-2019-81,SUSE-SLE-SDK-12-SP3-2019-81,SUSE-SLE-SERVER-12-SP2-2019-81,SUSE-SLE-SERVER-12-SP3-2019-81,SUSE-Storage-4-2019-81 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20190081-1/ Link for SUSE-SU-2019:0081-1 https://lists.suse.com/pipermail/sle-security-updates/2019-January/005031.html E-Mail link for SUSE-SU-2019:0081-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1010700 SUSE Bug 1010700 https://bugzilla.suse.com/1072728 SUSE Bug 1072728 https://bugzilla.suse.com/1080156 SUSE Bug 1080156 https://bugzilla.suse.com/1087320 SUSE Bug 1087320 https://bugzilla.suse.com/1098377 SUSE Bug 1098377 https://bugzilla.suse.com/1101877 SUSE Bug 1101877 https://bugzilla.suse.com/1110299 SUSE Bug 1110299 https://www.suse.com/security/cve/CVE-2018-10852/ SUSE CVE CVE-2018-10852 page SUSE Enterprise Storage 4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE OpenStack Cloud 7 libipa_hbac-devel-1.13.4-34.23.1 libipa_hbac0-1.13.4-34.23.1 libsss_idmap-devel-1.13.4-34.23.1 libsss_idmap0-1.13.4-34.23.1 libsss_nss_idmap-devel-1.13.4-34.23.1 libsss_nss_idmap0-1.13.4-34.23.1 libsss_sudo-1.13.4-34.23.1 python-ipa_hbac-1.13.4-34.23.1 python-sss_nss_idmap-1.13.4-34.23.1 python-sssd-config-1.13.4-34.23.1 sssd-1.13.4-34.23.1 sssd-32bit-1.13.4-34.23.1 sssd-64bit-1.13.4-34.23.1 sssd-ad-1.13.4-34.23.1 sssd-ipa-1.13.4-34.23.1 sssd-krb5-1.13.4-34.23.1 sssd-krb5-common-1.13.4-34.23.1 sssd-ldap-1.13.4-34.23.1 sssd-proxy-1.13.4-34.23.1 sssd-tools-1.13.4-34.23.1 libipa_hbac0-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 libsss_idmap0-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 libsss_sudo-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 python-sssd-config-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 sssd-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 sssd-32bit-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 sssd-ad-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 sssd-ipa-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 sssd-krb5-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 sssd-krb5-common-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 sssd-ldap-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 sssd-proxy-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 sssd-tools-1.13.4-34.23.1 as a component of SUSE Enterprise Storage 4 libipa_hbac0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libsss_idmap0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libsss_nss_idmap0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libsss_sudo-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 python-sssd-config-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-32bit-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-ad-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-ipa-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-krb5-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-krb5-common-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-ldap-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-proxy-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-tools-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libipa_hbac0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libsss_idmap0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libsss_sudo-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS python-sssd-config-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-32bit-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-ad-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-ipa-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-krb5-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-krb5-common-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-ldap-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-proxy-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-tools-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libipa_hbac0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 libsss_idmap0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 libsss_nss_idmap0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 libsss_sudo-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 python-sssd-config-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 sssd-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 sssd-32bit-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 sssd-ad-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 sssd-ipa-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 sssd-krb5-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 sssd-krb5-common-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 sssd-ldap-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 sssd-proxy-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 sssd-tools-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server 12 SP3 libipa_hbac0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libsss_idmap0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libsss_sudo-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 python-sssd-config-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 sssd-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 sssd-32bit-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 sssd-ad-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 sssd-ipa-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 sssd-krb5-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 sssd-krb5-common-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 sssd-ldap-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 sssd-proxy-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 sssd-tools-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libipa_hbac0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libsss_idmap0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libsss_nss_idmap0-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libsss_sudo-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 python-sssd-config-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-32bit-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-ad-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-ipa-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-krb5-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-krb5-common-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-ldap-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-proxy-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-tools-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libipa_hbac-devel-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libsss_idmap-devel-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libsss_nss_idmap-devel-1.13.4-34.23.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libipa_hbac0-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 libsss_idmap0-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 libsss_sudo-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 python-sssd-config-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 sssd-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 sssd-32bit-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 sssd-ad-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 sssd-ipa-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 sssd-krb5-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 sssd-krb5-common-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 sssd-ldap-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 sssd-proxy-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 sssd-tools-1.13.4-34.23.1 as a component of SUSE OpenStack Cloud 7 The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3. CVE-2018-10852 SUSE Enterprise Storage 4:libipa_hbac0-1.13.4-34.23.1 SUSE Enterprise Storage 4:libsss_idmap0-1.13.4-34.23.1 SUSE Enterprise Storage 4:libsss_sudo-1.13.4-34.23.1 SUSE Enterprise Storage 4:python-sssd-config-1.13.4-34.23.1 SUSE Enterprise Storage 4:sssd-1.13.4-34.23.1 SUSE Enterprise Storage 4:sssd-32bit-1.13.4-34.23.1 SUSE Enterprise Storage 4:sssd-ad-1.13.4-34.23.1 SUSE Enterprise Storage 4:sssd-ipa-1.13.4-34.23.1 SUSE Enterprise Storage 4:sssd-krb5-1.13.4-34.23.1 SUSE Enterprise Storage 4:sssd-krb5-common-1.13.4-34.23.1 SUSE Enterprise Storage 4:sssd-ldap-1.13.4-34.23.1 SUSE Enterprise Storage 4:sssd-proxy-1.13.4-34.23.1 SUSE Enterprise Storage 4:sssd-tools-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:libipa_hbac0-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:libsss_idmap0-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:libsss_nss_idmap0-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:libsss_sudo-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:python-sssd-config-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:sssd-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:sssd-32bit-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:sssd-ad-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:sssd-ipa-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:sssd-krb5-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:sssd-krb5-common-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:sssd-ldap-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:sssd-proxy-1.13.4-34.23.1 SUSE Linux Enterprise Desktop 12 SP3:sssd-tools-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libipa_hbac0-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libsss_idmap0-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libsss_sudo-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:python-sssd-config-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-32bit-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-ad-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-ipa-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-krb5-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-krb5-common-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-ldap-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-proxy-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-tools-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:libipa_hbac0-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:libsss_idmap0-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:libsss_nss_idmap0-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:libsss_sudo-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:python-sssd-config-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:sssd-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:sssd-32bit-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:sssd-ad-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:sssd-ipa-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:sssd-krb5-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:sssd-krb5-common-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:sssd-ldap-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:sssd-proxy-1.13.4-34.23.1 SUSE Linux Enterprise Server 12 SP3:sssd-tools-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libipa_hbac0-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libsss_idmap0-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libsss_sudo-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:python-sssd-config-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:sssd-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:sssd-32bit-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:sssd-ad-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:sssd-ipa-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:sssd-krb5-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:sssd-krb5-common-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:sssd-ldap-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:sssd-proxy-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:sssd-tools-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libipa_hbac0-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsss_idmap0-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsss_nss_idmap0-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsss_sudo-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-sssd-config-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-32bit-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-ad-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-ipa-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-krb5-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-krb5-common-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-ldap-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-proxy-1.13.4-34.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-tools-1.13.4-34.23.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libipa_hbac-devel-1.13.4-34.23.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libsss_idmap-devel-1.13.4-34.23.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libsss_nss_idmap-devel-1.13.4-34.23.1 SUSE OpenStack Cloud 7:libipa_hbac0-1.13.4-34.23.1 SUSE OpenStack Cloud 7:libsss_idmap0-1.13.4-34.23.1 SUSE OpenStack Cloud 7:libsss_sudo-1.13.4-34.23.1 SUSE OpenStack Cloud 7:python-sssd-config-1.13.4-34.23.1 SUSE OpenStack Cloud 7:sssd-1.13.4-34.23.1 SUSE OpenStack Cloud 7:sssd-32bit-1.13.4-34.23.1 SUSE OpenStack Cloud 7:sssd-ad-1.13.4-34.23.1 SUSE OpenStack Cloud 7:sssd-ipa-1.13.4-34.23.1 SUSE OpenStack Cloud 7:sssd-krb5-1.13.4-34.23.1 SUSE OpenStack Cloud 7:sssd-krb5-common-1.13.4-34.23.1 SUSE OpenStack Cloud 7:sssd-ldap-1.13.4-34.23.1 SUSE OpenStack Cloud 7:sssd-proxy-1.13.4-34.23.1 SUSE OpenStack Cloud 7:sssd-tools-1.13.4-34.23.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190081-1/ https://www.suse.com/security/cve/CVE-2018-10852.html CVE-2018-10852 https://bugzilla.suse.com/1098377 SUSE Bug 1098377