| |||||||||||||||||||
|
| |||||||||||||||||||
Fedora alert FEDORA-2010-13557 (sssd)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-13557 2010-08-26 00:26:48 -------------------------------------------------------------------------------- Name : sssd Product : Fedora 12 Version : 1.2.2 Release : 20.fc12 URL : http://fedorahosted.org/sssd/ Summary : System Security Services Daemon Description : Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA. -------------------------------------------------------------------------------- Update Information: * CVE-2010-2940 - SSSD allows null password entry to authenticate against LDAP -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 24 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.2-20 - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP * Tue Aug 3 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.2-19 - Resolves: rhbz#606887 - sssd stops on upgrade * Mon Aug 2 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.2-18 - New stable upstream version 1.2.2 - The LDAP provider no longer requires access to the LDAP RootDSE. If it is - unavailable, we will continue on with our best guess - The LDAP provider will now log issues with TLS and GSSAPI to the syslog - Significant performance improvement when performing initgroups on users who - are members of large groups in LDAP. - The sss_client will now reconnect properly to the SSSD if the daemon is - restarted. * Mon Jun 21 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-16 - New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide * Thu Jun 17 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-13 - Eliminate tight loop when reconnecting to LDAP - rhbz#604961 * Mon May 24 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP * Tue May 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11 - New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos * Fri May 7 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10 - Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover * Fri Apr 2 2010 Simo Sorce <ssorce@redhat.com> - 1.1.1-3 - Bump up release number to avoid library sub-packages version issues with previous releases. * Thu Apr 1 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1 - New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal * Mon Mar 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2 - Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb * Wed Mar 17 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19 - Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline * Wed Feb 24 2010 Stephen Gallagehr <sgallagh@redhat.com> - 1.0.5-2 - Rebuild against new libtevent * Fri Feb 19 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.5-1 - Fix licenses in sources and on RPMs * Mon Jan 25 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.4-1 - Fix regression on 64-bit platforms * Fri Jan 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1 - Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes * Thu Jan 14 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1 - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes * Mon Jan 11 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.1-1 - Fix CVE-2010-0014 * Mon Dec 21 2009 Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-2 - Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482 * Fri Dec 18 2009 Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-1 - New upstream stable release 1.0.0 * Fri Dec 11 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.99.1-1 - New upstream bugfix release 0.99.1 * Mon Nov 30 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.99.0-1 - New upstream release 0.99.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #625189 - CVE-2010-2940 sssd: allows null password entry to authenticate against LDAP https://bugzilla.redhat.com/show_bug.cgi?id=625189 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update sssd' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-... (Log in to post comments)
|
|
||||||||||||||||||