-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Low: sssd security, bug fix, and enhancement update
Advisory ID:       RHSA-2018:3158-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2018:3158
Issue date:        2018-10-30
CVE Names:         CVE-2018-10852 
=====================================================================

1. Summary:

An update for sssd is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact
of Low. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Client (v. 7) - noarch, x86_64
Red Hat Enterprise Linux Client Optional (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode (v. 7) - noarch, x86_64
Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64
Red Hat Enterprise Linux Server (v. 7) - noarch, ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64
Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) - aarch64, noarch, ppc64le, s390x
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) - aarch64, ppc64le, s390x

3. Description:

The System Security Services Daemon (SSSD) service provides a set of
daemons to manage access to remote directories and authentication
mechanisms. It also provides the Name Service Switch (NSS) and the
Pluggable Authentication Modules (PAM) interfaces toward the system, and a
pluggable back-end system to connect to multiple different account sources.

The following packages have been upgraded to a later upstream version: sssd
(1.16.2). (BZ#1558498)

Security Fix(es):

* sssd: information leak from the sssd-sudo responder (CVE-2018-10852)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

This issue was discovered by Jakub Hrozek (Red Hat).

Additional Changes:

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.6 Release Notes linked from the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

1385665 - Incorrect error code returned from krb5_child (updated)
1416528 - sssd in cross realm trust configuration should be able to use AD KDCs from a client site defined in sssd.conf or a snippet
1459348 - extend sss-certmap man page regarding priority processing
1509691 - Document how to change the regular expression for SSSD so that group names with an @-sign can be parsed
1514061 - ID override GID from Default Trust View is not properly resolved in case domain resolution order is set
1516266 - Give a more detailed debug and system-log message if krb5_init_context() failed
1522928 - sssd doesn't allow user with expired password to login when PasswordgraceLimit set
1534749 - Requesting an AD user's private group and then the user itself returns an emty homedir
1537272 - SSH public key authentication keeps working after keys are removed from ID view
1537279 - Certificate is not removed from cache when it's removed from the override
1538555 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000]
1546754 - The man page of sss_ssh_authorizedkeys can be enhanced to better explain how the keys are retrieved and how X.509 certificates can be used
1558498 - Rebase sssd to the latests upstream release of the 1.16 branch
1562025 - externalUser sudo attribute must be fully-qualified
1565774 - After updating to RHEL 7.5 failing to clear the sssd cache
1566782 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash
1571526 - SSSD with ID provider 'ad' should give a warning in case the ldap schema is manually changed to something different than 'ad'.
1577335 - /usr/libexec/sssd/sssd_autofs SIGABRT crash daily
1578291 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION
1583251 - home dir disappear in sssd cache on the IPA master for AD users
1583725 - SSSD AD uses LDAP filter to detect POSIX attributes stored in AD GC also for regular AD DC queries
1588810 - CVE-2018-10852 sssd: information leak from the sssd-sudo responder
1600822 - SSSD bails out saving desktop profiles in case an invalid profile is found
1602781 - Offline logins and/or id_provider=local logins fail after upgrade to 7.6
1607313 - When sssd is running as non-root user, the sudo pipe is created as sssd:sssd but then the private pipe ownership fails
1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key

6. Package List:

Red Hat Enterprise Linux Client (v. 7):

Source:
sssd-1.16.2-13.el7.src.rpm

noarch:
python-sssdconfig-1.16.2-13.el7.noarch.rpm

x86_64:
libipa_hbac-1.16.2-13.el7.i686.rpm
libipa_hbac-1.16.2-13.el7.x86_64.rpm
libsss_autofs-1.16.2-13.el7.x86_64.rpm
libsss_certmap-1.16.2-13.el7.i686.rpm
libsss_certmap-1.16.2-13.el7.x86_64.rpm
libsss_idmap-1.16.2-13.el7.i686.rpm
libsss_idmap-1.16.2-13.el7.x86_64.rpm
libsss_nss_idmap-1.16.2-13.el7.i686.rpm
libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm
libsss_simpleifp-1.16.2-13.el7.i686.rpm
libsss_simpleifp-1.16.2-13.el7.x86_64.rpm
libsss_sudo-1.16.2-13.el7.x86_64.rpm
python-libipa_hbac-1.16.2-13.el7.x86_64.rpm
python-sss-1.16.2-13.el7.x86_64.rpm
python-sss-murmur-1.16.2-13.el7.x86_64.rpm
sssd-1.16.2-13.el7.x86_64.rpm
sssd-ad-1.16.2-13.el7.x86_64.rpm
sssd-client-1.16.2-13.el7.i686.rpm
sssd-client-1.16.2-13.el7.x86_64.rpm
sssd-common-1.16.2-13.el7.x86_64.rpm
sssd-common-pac-1.16.2-13.el7.x86_64.rpm
sssd-dbus-1.16.2-13.el7.x86_64.rpm
sssd-debuginfo-1.16.2-13.el7.i686.rpm
sssd-debuginfo-1.16.2-13.el7.x86_64.rpm
sssd-ipa-1.16.2-13.el7.x86_64.rpm
sssd-kcm-1.16.2-13.el7.x86_64.rpm
sssd-krb5-1.16.2-13.el7.x86_64.rpm
sssd-krb5-common-1.16.2-13.el7.x86_64.rpm
sssd-ldap-1.16.2-13.el7.x86_64.rpm
sssd-libwbclient-1.16.2-13.el7.x86_64.rpm
sssd-polkit-rules-1.16.2-13.el7.x86_64.rpm
sssd-proxy-1.16.2-13.el7.x86_64.rpm
sssd-tools-1.16.2-13.el7.x86_64.rpm
sssd-winbind-idmap-1.16.2-13.el7.x86_64.rpm

Red Hat Enterprise Linux Client Optional (v. 7):

x86_64:
libipa_hbac-devel-1.16.2-13.el7.i686.rpm
libipa_hbac-devel-1.16.2-13.el7.x86_64.rpm
libsss_certmap-devel-1.16.2-13.el7.i686.rpm
libsss_certmap-devel-1.16.2-13.el7.x86_64.rpm
libsss_idmap-devel-1.16.2-13.el7.i686.rpm
libsss_idmap-devel-1.16.2-13.el7.x86_64.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.i686.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.x86_64.rpm
libsss_simpleifp-devel-1.16.2-13.el7.i686.rpm
libsss_simpleifp-devel-1.16.2-13.el7.x86_64.rpm
python-libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm
sssd-debuginfo-1.16.2-13.el7.i686.rpm
sssd-debuginfo-1.16.2-13.el7.x86_64.rpm
sssd-libwbclient-devel-1.16.2-13.el7.i686.rpm
sssd-libwbclient-devel-1.16.2-13.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode (v. 7):

Source:
sssd-1.16.2-13.el7.src.rpm

noarch:
python-sssdconfig-1.16.2-13.el7.noarch.rpm

x86_64:
libipa_hbac-1.16.2-13.el7.i686.rpm
libipa_hbac-1.16.2-13.el7.x86_64.rpm
libsss_autofs-1.16.2-13.el7.x86_64.rpm
libsss_certmap-1.16.2-13.el7.i686.rpm
libsss_certmap-1.16.2-13.el7.x86_64.rpm
libsss_idmap-1.16.2-13.el7.i686.rpm
libsss_idmap-1.16.2-13.el7.x86_64.rpm
libsss_nss_idmap-1.16.2-13.el7.i686.rpm
libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm
libsss_simpleifp-1.16.2-13.el7.i686.rpm
libsss_simpleifp-1.16.2-13.el7.x86_64.rpm
libsss_sudo-1.16.2-13.el7.x86_64.rpm
python-libipa_hbac-1.16.2-13.el7.x86_64.rpm
python-sss-1.16.2-13.el7.x86_64.rpm
python-sss-murmur-1.16.2-13.el7.x86_64.rpm
sssd-1.16.2-13.el7.x86_64.rpm
sssd-ad-1.16.2-13.el7.x86_64.rpm
sssd-client-1.16.2-13.el7.i686.rpm
sssd-client-1.16.2-13.el7.x86_64.rpm
sssd-common-1.16.2-13.el7.x86_64.rpm
sssd-common-pac-1.16.2-13.el7.x86_64.rpm
sssd-dbus-1.16.2-13.el7.x86_64.rpm
sssd-debuginfo-1.16.2-13.el7.i686.rpm
sssd-debuginfo-1.16.2-13.el7.x86_64.rpm
sssd-ipa-1.16.2-13.el7.x86_64.rpm
sssd-kcm-1.16.2-13.el7.x86_64.rpm
sssd-krb5-1.16.2-13.el7.x86_64.rpm
sssd-krb5-common-1.16.2-13.el7.x86_64.rpm
sssd-ldap-1.16.2-13.el7.x86_64.rpm
sssd-libwbclient-1.16.2-13.el7.x86_64.rpm
sssd-polkit-rules-1.16.2-13.el7.x86_64.rpm
sssd-proxy-1.16.2-13.el7.x86_64.rpm
sssd-tools-1.16.2-13.el7.x86_64.rpm
sssd-winbind-idmap-1.16.2-13.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode Optional (v. 7):

x86_64:
libipa_hbac-devel-1.16.2-13.el7.i686.rpm
libipa_hbac-devel-1.16.2-13.el7.x86_64.rpm
libsss_certmap-devel-1.16.2-13.el7.i686.rpm
libsss_certmap-devel-1.16.2-13.el7.x86_64.rpm
libsss_idmap-devel-1.16.2-13.el7.i686.rpm
libsss_idmap-devel-1.16.2-13.el7.x86_64.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.i686.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.x86_64.rpm
libsss_simpleifp-devel-1.16.2-13.el7.i686.rpm
libsss_simpleifp-devel-1.16.2-13.el7.x86_64.rpm
python-libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm
sssd-debuginfo-1.16.2-13.el7.i686.rpm
sssd-debuginfo-1.16.2-13.el7.x86_64.rpm
sssd-libwbclient-devel-1.16.2-13.el7.i686.rpm
sssd-libwbclient-devel-1.16.2-13.el7.x86_64.rpm

Red Hat Enterprise Linux Server (v. 7):

Source:
sssd-1.16.2-13.el7.src.rpm

noarch:
python-sssdconfig-1.16.2-13.el7.noarch.rpm

ppc64:
libipa_hbac-1.16.2-13.el7.ppc.rpm
libipa_hbac-1.16.2-13.el7.ppc64.rpm
libsss_autofs-1.16.2-13.el7.ppc64.rpm
libsss_certmap-1.16.2-13.el7.ppc.rpm
libsss_certmap-1.16.2-13.el7.ppc64.rpm
libsss_idmap-1.16.2-13.el7.ppc.rpm
libsss_idmap-1.16.2-13.el7.ppc64.rpm
libsss_nss_idmap-1.16.2-13.el7.ppc.rpm
libsss_nss_idmap-1.16.2-13.el7.ppc64.rpm
libsss_simpleifp-1.16.2-13.el7.ppc.rpm
libsss_simpleifp-1.16.2-13.el7.ppc64.rpm
libsss_sudo-1.16.2-13.el7.ppc64.rpm
python-libipa_hbac-1.16.2-13.el7.ppc64.rpm
python-sss-1.16.2-13.el7.ppc64.rpm
python-sss-murmur-1.16.2-13.el7.ppc64.rpm
sssd-1.16.2-13.el7.ppc64.rpm
sssd-ad-1.16.2-13.el7.ppc64.rpm
sssd-client-1.16.2-13.el7.ppc.rpm
sssd-client-1.16.2-13.el7.ppc64.rpm
sssd-common-1.16.2-13.el7.ppc64.rpm
sssd-common-pac-1.16.2-13.el7.ppc64.rpm
sssd-dbus-1.16.2-13.el7.ppc64.rpm
sssd-debuginfo-1.16.2-13.el7.ppc.rpm
sssd-debuginfo-1.16.2-13.el7.ppc64.rpm
sssd-ipa-1.16.2-13.el7.ppc64.rpm
sssd-kcm-1.16.2-13.el7.ppc64.rpm
sssd-krb5-1.16.2-13.el7.ppc64.rpm
sssd-krb5-common-1.16.2-13.el7.ppc64.rpm
sssd-ldap-1.16.2-13.el7.ppc64.rpm
sssd-libwbclient-1.16.2-13.el7.ppc64.rpm
sssd-polkit-rules-1.16.2-13.el7.ppc64.rpm
sssd-proxy-1.16.2-13.el7.ppc64.rpm
sssd-tools-1.16.2-13.el7.ppc64.rpm
sssd-winbind-idmap-1.16.2-13.el7.ppc64.rpm

ppc64le:
libipa_hbac-1.16.2-13.el7.ppc64le.rpm
libsss_autofs-1.16.2-13.el7.ppc64le.rpm
libsss_certmap-1.16.2-13.el7.ppc64le.rpm
libsss_idmap-1.16.2-13.el7.ppc64le.rpm
libsss_nss_idmap-1.16.2-13.el7.ppc64le.rpm
libsss_simpleifp-1.16.2-13.el7.ppc64le.rpm
libsss_sudo-1.16.2-13.el7.ppc64le.rpm
python-libipa_hbac-1.16.2-13.el7.ppc64le.rpm
python-sss-1.16.2-13.el7.ppc64le.rpm
python-sss-murmur-1.16.2-13.el7.ppc64le.rpm
sssd-1.16.2-13.el7.ppc64le.rpm
sssd-ad-1.16.2-13.el7.ppc64le.rpm
sssd-client-1.16.2-13.el7.ppc64le.rpm
sssd-common-1.16.2-13.el7.ppc64le.rpm
sssd-common-pac-1.16.2-13.el7.ppc64le.rpm
sssd-dbus-1.16.2-13.el7.ppc64le.rpm
sssd-debuginfo-1.16.2-13.el7.ppc64le.rpm
sssd-ipa-1.16.2-13.el7.ppc64le.rpm
sssd-kcm-1.16.2-13.el7.ppc64le.rpm
sssd-krb5-1.16.2-13.el7.ppc64le.rpm
sssd-krb5-common-1.16.2-13.el7.ppc64le.rpm
sssd-ldap-1.16.2-13.el7.ppc64le.rpm
sssd-libwbclient-1.16.2-13.el7.ppc64le.rpm
sssd-polkit-rules-1.16.2-13.el7.ppc64le.rpm
sssd-proxy-1.16.2-13.el7.ppc64le.rpm
sssd-tools-1.16.2-13.el7.ppc64le.rpm
sssd-winbind-idmap-1.16.2-13.el7.ppc64le.rpm

s390x:
libipa_hbac-1.16.2-13.el7.s390.rpm
libipa_hbac-1.16.2-13.el7.s390x.rpm
libsss_autofs-1.16.2-13.el7.s390x.rpm
libsss_certmap-1.16.2-13.el7.s390.rpm
libsss_certmap-1.16.2-13.el7.s390x.rpm
libsss_idmap-1.16.2-13.el7.s390.rpm
libsss_idmap-1.16.2-13.el7.s390x.rpm
libsss_nss_idmap-1.16.2-13.el7.s390.rpm
libsss_nss_idmap-1.16.2-13.el7.s390x.rpm
libsss_simpleifp-1.16.2-13.el7.s390.rpm
libsss_simpleifp-1.16.2-13.el7.s390x.rpm
libsss_sudo-1.16.2-13.el7.s390x.rpm
python-libipa_hbac-1.16.2-13.el7.s390x.rpm
python-sss-1.16.2-13.el7.s390x.rpm
python-sss-murmur-1.16.2-13.el7.s390x.rpm
sssd-1.16.2-13.el7.s390x.rpm
sssd-ad-1.16.2-13.el7.s390x.rpm
sssd-client-1.16.2-13.el7.s390.rpm
sssd-client-1.16.2-13.el7.s390x.rpm
sssd-common-1.16.2-13.el7.s390x.rpm
sssd-common-pac-1.16.2-13.el7.s390x.rpm
sssd-dbus-1.16.2-13.el7.s390x.rpm
sssd-debuginfo-1.16.2-13.el7.s390.rpm
sssd-debuginfo-1.16.2-13.el7.s390x.rpm
sssd-ipa-1.16.2-13.el7.s390x.rpm
sssd-kcm-1.16.2-13.el7.s390x.rpm
sssd-krb5-1.16.2-13.el7.s390x.rpm
sssd-krb5-common-1.16.2-13.el7.s390x.rpm
sssd-ldap-1.16.2-13.el7.s390x.rpm
sssd-libwbclient-1.16.2-13.el7.s390x.rpm
sssd-polkit-rules-1.16.2-13.el7.s390x.rpm
sssd-proxy-1.16.2-13.el7.s390x.rpm
sssd-tools-1.16.2-13.el7.s390x.rpm
sssd-winbind-idmap-1.16.2-13.el7.s390x.rpm

x86_64:
libipa_hbac-1.16.2-13.el7.i686.rpm
libipa_hbac-1.16.2-13.el7.x86_64.rpm
libsss_autofs-1.16.2-13.el7.x86_64.rpm
libsss_certmap-1.16.2-13.el7.i686.rpm
libsss_certmap-1.16.2-13.el7.x86_64.rpm
libsss_idmap-1.16.2-13.el7.i686.rpm
libsss_idmap-1.16.2-13.el7.x86_64.rpm
libsss_nss_idmap-1.16.2-13.el7.i686.rpm
libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm
libsss_simpleifp-1.16.2-13.el7.i686.rpm
libsss_simpleifp-1.16.2-13.el7.x86_64.rpm
libsss_sudo-1.16.2-13.el7.x86_64.rpm
python-libipa_hbac-1.16.2-13.el7.x86_64.rpm
python-libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm
python-sss-1.16.2-13.el7.x86_64.rpm
python-sss-murmur-1.16.2-13.el7.x86_64.rpm
sssd-1.16.2-13.el7.x86_64.rpm
sssd-ad-1.16.2-13.el7.x86_64.rpm
sssd-client-1.16.2-13.el7.i686.rpm
sssd-client-1.16.2-13.el7.x86_64.rpm
sssd-common-1.16.2-13.el7.x86_64.rpm
sssd-common-pac-1.16.2-13.el7.x86_64.rpm
sssd-dbus-1.16.2-13.el7.x86_64.rpm
sssd-debuginfo-1.16.2-13.el7.i686.rpm
sssd-debuginfo-1.16.2-13.el7.x86_64.rpm
sssd-ipa-1.16.2-13.el7.x86_64.rpm
sssd-kcm-1.16.2-13.el7.x86_64.rpm
sssd-krb5-1.16.2-13.el7.x86_64.rpm
sssd-krb5-common-1.16.2-13.el7.x86_64.rpm
sssd-ldap-1.16.2-13.el7.x86_64.rpm
sssd-libwbclient-1.16.2-13.el7.x86_64.rpm
sssd-polkit-rules-1.16.2-13.el7.x86_64.rpm
sssd-proxy-1.16.2-13.el7.x86_64.rpm
sssd-tools-1.16.2-13.el7.x86_64.rpm
sssd-winbind-idmap-1.16.2-13.el7.x86_64.rpm

Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7):

Source:
sssd-1.16.2-13.el7.src.rpm

aarch64:
libipa_hbac-1.16.2-13.el7.aarch64.rpm
libsss_autofs-1.16.2-13.el7.aarch64.rpm
libsss_certmap-1.16.2-13.el7.aarch64.rpm
libsss_idmap-1.16.2-13.el7.aarch64.rpm
libsss_nss_idmap-1.16.2-13.el7.aarch64.rpm
libsss_simpleifp-1.16.2-13.el7.aarch64.rpm
libsss_sudo-1.16.2-13.el7.aarch64.rpm
python-libipa_hbac-1.16.2-13.el7.aarch64.rpm
python-libsss_nss_idmap-1.16.2-13.el7.aarch64.rpm
python-sss-1.16.2-13.el7.aarch64.rpm
python-sss-murmur-1.16.2-13.el7.aarch64.rpm
sssd-1.16.2-13.el7.aarch64.rpm
sssd-ad-1.16.2-13.el7.aarch64.rpm
sssd-client-1.16.2-13.el7.aarch64.rpm
sssd-common-1.16.2-13.el7.aarch64.rpm
sssd-common-pac-1.16.2-13.el7.aarch64.rpm
sssd-dbus-1.16.2-13.el7.aarch64.rpm
sssd-debuginfo-1.16.2-13.el7.aarch64.rpm
sssd-ipa-1.16.2-13.el7.aarch64.rpm
sssd-kcm-1.16.2-13.el7.aarch64.rpm
sssd-krb5-1.16.2-13.el7.aarch64.rpm
sssd-krb5-common-1.16.2-13.el7.aarch64.rpm
sssd-ldap-1.16.2-13.el7.aarch64.rpm
sssd-libwbclient-1.16.2-13.el7.aarch64.rpm
sssd-polkit-rules-1.16.2-13.el7.aarch64.rpm
sssd-proxy-1.16.2-13.el7.aarch64.rpm
sssd-tools-1.16.2-13.el7.aarch64.rpm
sssd-winbind-idmap-1.16.2-13.el7.aarch64.rpm

noarch:
python-sssdconfig-1.16.2-13.el7.noarch.rpm

ppc64le:
libipa_hbac-1.16.2-13.el7.ppc64le.rpm
libsss_autofs-1.16.2-13.el7.ppc64le.rpm
libsss_certmap-1.16.2-13.el7.ppc64le.rpm
libsss_idmap-1.16.2-13.el7.ppc64le.rpm
libsss_nss_idmap-1.16.2-13.el7.ppc64le.rpm
libsss_simpleifp-1.16.2-13.el7.ppc64le.rpm
libsss_sudo-1.16.2-13.el7.ppc64le.rpm
python-libipa_hbac-1.16.2-13.el7.ppc64le.rpm
python-sss-1.16.2-13.el7.ppc64le.rpm
python-sss-murmur-1.16.2-13.el7.ppc64le.rpm
sssd-1.16.2-13.el7.ppc64le.rpm
sssd-ad-1.16.2-13.el7.ppc64le.rpm
sssd-client-1.16.2-13.el7.ppc64le.rpm
sssd-common-1.16.2-13.el7.ppc64le.rpm
sssd-common-pac-1.16.2-13.el7.ppc64le.rpm
sssd-dbus-1.16.2-13.el7.ppc64le.rpm
sssd-debuginfo-1.16.2-13.el7.ppc64le.rpm
sssd-ipa-1.16.2-13.el7.ppc64le.rpm
sssd-kcm-1.16.2-13.el7.ppc64le.rpm
sssd-krb5-1.16.2-13.el7.ppc64le.rpm
sssd-krb5-common-1.16.2-13.el7.ppc64le.rpm
sssd-ldap-1.16.2-13.el7.ppc64le.rpm
sssd-libwbclient-1.16.2-13.el7.ppc64le.rpm
sssd-polkit-rules-1.16.2-13.el7.ppc64le.rpm
sssd-proxy-1.16.2-13.el7.ppc64le.rpm
sssd-tools-1.16.2-13.el7.ppc64le.rpm
sssd-winbind-idmap-1.16.2-13.el7.ppc64le.rpm

s390x:
libipa_hbac-1.16.2-13.el7.s390.rpm
libipa_hbac-1.16.2-13.el7.s390x.rpm
libsss_autofs-1.16.2-13.el7.s390x.rpm
libsss_certmap-1.16.2-13.el7.s390.rpm
libsss_certmap-1.16.2-13.el7.s390x.rpm
libsss_idmap-1.16.2-13.el7.s390.rpm
libsss_idmap-1.16.2-13.el7.s390x.rpm
libsss_nss_idmap-1.16.2-13.el7.s390.rpm
libsss_nss_idmap-1.16.2-13.el7.s390x.rpm
libsss_simpleifp-1.16.2-13.el7.s390.rpm
libsss_simpleifp-1.16.2-13.el7.s390x.rpm
libsss_sudo-1.16.2-13.el7.s390x.rpm
python-libipa_hbac-1.16.2-13.el7.s390x.rpm
python-sss-1.16.2-13.el7.s390x.rpm
python-sss-murmur-1.16.2-13.el7.s390x.rpm
sssd-1.16.2-13.el7.s390x.rpm
sssd-ad-1.16.2-13.el7.s390x.rpm
sssd-client-1.16.2-13.el7.s390.rpm
sssd-client-1.16.2-13.el7.s390x.rpm
sssd-common-1.16.2-13.el7.s390x.rpm
sssd-common-pac-1.16.2-13.el7.s390x.rpm
sssd-dbus-1.16.2-13.el7.s390x.rpm
sssd-debuginfo-1.16.2-13.el7.s390.rpm
sssd-debuginfo-1.16.2-13.el7.s390x.rpm
sssd-ipa-1.16.2-13.el7.s390x.rpm
sssd-kcm-1.16.2-13.el7.s390x.rpm
sssd-krb5-1.16.2-13.el7.s390x.rpm
sssd-krb5-common-1.16.2-13.el7.s390x.rpm
sssd-ldap-1.16.2-13.el7.s390x.rpm
sssd-libwbclient-1.16.2-13.el7.s390x.rpm
sssd-polkit-rules-1.16.2-13.el7.s390x.rpm
sssd-proxy-1.16.2-13.el7.s390x.rpm
sssd-tools-1.16.2-13.el7.s390x.rpm
sssd-winbind-idmap-1.16.2-13.el7.s390x.rpm

Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7):

aarch64:
libipa_hbac-devel-1.16.2-13.el7.aarch64.rpm
libsss_certmap-devel-1.16.2-13.el7.aarch64.rpm
libsss_idmap-devel-1.16.2-13.el7.aarch64.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.aarch64.rpm
libsss_simpleifp-devel-1.16.2-13.el7.aarch64.rpm
sssd-debuginfo-1.16.2-13.el7.aarch64.rpm
sssd-libwbclient-devel-1.16.2-13.el7.aarch64.rpm

ppc64le:
libipa_hbac-devel-1.16.2-13.el7.ppc64le.rpm
libsss_certmap-devel-1.16.2-13.el7.ppc64le.rpm
libsss_idmap-devel-1.16.2-13.el7.ppc64le.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.ppc64le.rpm
libsss_simpleifp-devel-1.16.2-13.el7.ppc64le.rpm
python-libsss_nss_idmap-1.16.2-13.el7.ppc64le.rpm
sssd-debuginfo-1.16.2-13.el7.ppc64le.rpm
sssd-libwbclient-devel-1.16.2-13.el7.ppc64le.rpm

s390x:
libipa_hbac-devel-1.16.2-13.el7.s390.rpm
libipa_hbac-devel-1.16.2-13.el7.s390x.rpm
libsss_certmap-devel-1.16.2-13.el7.s390.rpm
libsss_certmap-devel-1.16.2-13.el7.s390x.rpm
libsss_idmap-devel-1.16.2-13.el7.s390.rpm
libsss_idmap-devel-1.16.2-13.el7.s390x.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.s390.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.s390x.rpm
libsss_simpleifp-devel-1.16.2-13.el7.s390.rpm
libsss_simpleifp-devel-1.16.2-13.el7.s390x.rpm
python-libsss_nss_idmap-1.16.2-13.el7.s390x.rpm
sssd-debuginfo-1.16.2-13.el7.s390.rpm
sssd-debuginfo-1.16.2-13.el7.s390x.rpm
sssd-libwbclient-devel-1.16.2-13.el7.s390.rpm
sssd-libwbclient-devel-1.16.2-13.el7.s390x.rpm

Red Hat Enterprise Linux Server Optional (v. 7):

ppc64:
libipa_hbac-devel-1.16.2-13.el7.ppc.rpm
libipa_hbac-devel-1.16.2-13.el7.ppc64.rpm
libsss_certmap-devel-1.16.2-13.el7.ppc.rpm
libsss_certmap-devel-1.16.2-13.el7.ppc64.rpm
libsss_idmap-devel-1.16.2-13.el7.ppc.rpm
libsss_idmap-devel-1.16.2-13.el7.ppc64.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.ppc.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.ppc64.rpm
libsss_simpleifp-devel-1.16.2-13.el7.ppc.rpm
libsss_simpleifp-devel-1.16.2-13.el7.ppc64.rpm
python-libsss_nss_idmap-1.16.2-13.el7.ppc64.rpm
sssd-debuginfo-1.16.2-13.el7.ppc.rpm
sssd-debuginfo-1.16.2-13.el7.ppc64.rpm
sssd-libwbclient-devel-1.16.2-13.el7.ppc.rpm
sssd-libwbclient-devel-1.16.2-13.el7.ppc64.rpm

ppc64le:
libipa_hbac-devel-1.16.2-13.el7.ppc64le.rpm
libsss_certmap-devel-1.16.2-13.el7.ppc64le.rpm
libsss_idmap-devel-1.16.2-13.el7.ppc64le.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.ppc64le.rpm
libsss_simpleifp-devel-1.16.2-13.el7.ppc64le.rpm
python-libsss_nss_idmap-1.16.2-13.el7.ppc64le.rpm
sssd-debuginfo-1.16.2-13.el7.ppc64le.rpm
sssd-libwbclient-devel-1.16.2-13.el7.ppc64le.rpm

s390x:
libipa_hbac-devel-1.16.2-13.el7.s390.rpm
libipa_hbac-devel-1.16.2-13.el7.s390x.rpm
libsss_certmap-devel-1.16.2-13.el7.s390.rpm
libsss_certmap-devel-1.16.2-13.el7.s390x.rpm
libsss_idmap-devel-1.16.2-13.el7.s390.rpm
libsss_idmap-devel-1.16.2-13.el7.s390x.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.s390.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.s390x.rpm
libsss_simpleifp-devel-1.16.2-13.el7.s390.rpm
libsss_simpleifp-devel-1.16.2-13.el7.s390x.rpm
python-libsss_nss_idmap-1.16.2-13.el7.s390x.rpm
sssd-debuginfo-1.16.2-13.el7.s390.rpm
sssd-debuginfo-1.16.2-13.el7.s390x.rpm
sssd-libwbclient-devel-1.16.2-13.el7.s390.rpm
sssd-libwbclient-devel-1.16.2-13.el7.s390x.rpm

x86_64:
libipa_hbac-devel-1.16.2-13.el7.i686.rpm
libipa_hbac-devel-1.16.2-13.el7.x86_64.rpm
libsss_certmap-devel-1.16.2-13.el7.i686.rpm
libsss_certmap-devel-1.16.2-13.el7.x86_64.rpm
libsss_idmap-devel-1.16.2-13.el7.i686.rpm
libsss_idmap-devel-1.16.2-13.el7.x86_64.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.i686.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.x86_64.rpm
libsss_simpleifp-devel-1.16.2-13.el7.i686.rpm
libsss_simpleifp-devel-1.16.2-13.el7.x86_64.rpm
sssd-debuginfo-1.16.2-13.el7.i686.rpm
sssd-debuginfo-1.16.2-13.el7.x86_64.rpm
sssd-libwbclient-devel-1.16.2-13.el7.i686.rpm
sssd-libwbclient-devel-1.16.2-13.el7.x86_64.rpm

Red Hat Enterprise Linux Workstation (v. 7):

Source:
sssd-1.16.2-13.el7.src.rpm

noarch:
python-sssdconfig-1.16.2-13.el7.noarch.rpm

x86_64:
libipa_hbac-1.16.2-13.el7.i686.rpm
libipa_hbac-1.16.2-13.el7.x86_64.rpm
libsss_autofs-1.16.2-13.el7.x86_64.rpm
libsss_certmap-1.16.2-13.el7.i686.rpm
libsss_certmap-1.16.2-13.el7.x86_64.rpm
libsss_idmap-1.16.2-13.el7.i686.rpm
libsss_idmap-1.16.2-13.el7.x86_64.rpm
libsss_nss_idmap-1.16.2-13.el7.i686.rpm
libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm
libsss_simpleifp-1.16.2-13.el7.i686.rpm
libsss_simpleifp-1.16.2-13.el7.x86_64.rpm
libsss_sudo-1.16.2-13.el7.x86_64.rpm
python-libipa_hbac-1.16.2-13.el7.x86_64.rpm
python-libsss_nss_idmap-1.16.2-13.el7.x86_64.rpm
python-sss-1.16.2-13.el7.x86_64.rpm
python-sss-murmur-1.16.2-13.el7.x86_64.rpm
sssd-1.16.2-13.el7.x86_64.rpm
sssd-ad-1.16.2-13.el7.x86_64.rpm
sssd-client-1.16.2-13.el7.i686.rpm
sssd-client-1.16.2-13.el7.x86_64.rpm
sssd-common-1.16.2-13.el7.x86_64.rpm
sssd-common-pac-1.16.2-13.el7.x86_64.rpm
sssd-dbus-1.16.2-13.el7.x86_64.rpm
sssd-debuginfo-1.16.2-13.el7.i686.rpm
sssd-debuginfo-1.16.2-13.el7.x86_64.rpm
sssd-ipa-1.16.2-13.el7.x86_64.rpm
sssd-kcm-1.16.2-13.el7.x86_64.rpm
sssd-krb5-1.16.2-13.el7.x86_64.rpm
sssd-krb5-common-1.16.2-13.el7.x86_64.rpm
sssd-ldap-1.16.2-13.el7.x86_64.rpm
sssd-libwbclient-1.16.2-13.el7.x86_64.rpm
sssd-polkit-rules-1.16.2-13.el7.x86_64.rpm
sssd-proxy-1.16.2-13.el7.x86_64.rpm
sssd-tools-1.16.2-13.el7.x86_64.rpm
sssd-winbind-idmap-1.16.2-13.el7.x86_64.rpm

Red Hat Enterprise Linux Workstation Optional (v. 7):

x86_64:
libipa_hbac-devel-1.16.2-13.el7.i686.rpm
libipa_hbac-devel-1.16.2-13.el7.x86_64.rpm
libsss_certmap-devel-1.16.2-13.el7.i686.rpm
libsss_certmap-devel-1.16.2-13.el7.x86_64.rpm
libsss_idmap-devel-1.16.2-13.el7.i686.rpm
libsss_idmap-devel-1.16.2-13.el7.x86_64.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.i686.rpm
libsss_nss_idmap-devel-1.16.2-13.el7.x86_64.rpm
libsss_simpleifp-devel-1.16.2-13.el7.i686.rpm
libsss_simpleifp-devel-1.16.2-13.el7.x86_64.rpm
sssd-debuginfo-1.16.2-13.el7.i686.rpm
sssd-debuginfo-1.16.2-13.el7.x86_64.rpm
sssd-libwbclient-devel-1.16.2-13.el7.i686.rpm
sssd-libwbclient-devel-1.16.2-13.el7.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2018-10852
https://access.redhat.com/security/updates/classification/#low
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2018 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=Hg2/
-----END PGP SIGNATURE-----

--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce