openSUSE Recommended Update: sssd: Collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0891-1 Rating: moderate References: #818510 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with sssd: - Added sssd-no-ldb-check.diff so that SSSD continues to start even after an LDB update. (bnc#818510) - Update to new upstream release 1.9.5 * Includes a fix for CVE-2013-0287: A simple access provider flaw prevents intended ACL use when SSSD is configured as an Active Directory client. * Fixed spurious password expiration warning that was printed on login with the Kerberos back end. * A new option ldap_rfc2307_fallback_to_local_users was added. If this option is set to true, SSSD is be able to resolve local group members of LDAP groups. * Fixed an indexing bug that prevented the contents of autofs maps from being returned to the automounter deamon in case the map contained a large number of entries. * Several fixes for safer handling of Kerberos credential caches for cases where the ccache is set to be stored in a DIR: type. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-446 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libipa_hbac-devel-1.9.5-1.13.2 libipa_hbac0-1.9.5-1.13.2 libipa_hbac0-debuginfo-1.9.5-1.13.2 libsss_idmap-devel-1.9.5-1.13.2 libsss_idmap0-1.9.5-1.13.2 libsss_idmap0-debuginfo-1.9.5-1.13.2 libsss_sudo-1.9.5-1.13.2 libsss_sudo-debuginfo-1.9.5-1.13.2 python-ipa_hbac-1.9.5-1.13.2 python-ipa_hbac-debuginfo-1.9.5-1.13.2 python-sssd-config-1.9.5-1.13.2 python-sssd-config-debuginfo-1.9.5-1.13.2 sssd-1.9.5-1.13.2 sssd-debuginfo-1.9.5-1.13.2 sssd-debugsource-1.9.5-1.13.2 sssd-ipa-provider-1.9.5-1.13.2 sssd-ipa-provider-debuginfo-1.9.5-1.13.2 sssd-tools-1.9.5-1.13.2 sssd-tools-debuginfo-1.9.5-1.13.2 - openSUSE 12.3 (x86_64): sssd-32bit-1.9.5-1.13.2 sssd-debuginfo-32bit-1.9.5-1.13.2 References: https://bugzilla.novell.com/818510