SUSE-SU-2019:0552-1

    Dashboard / Vulnerabilities / SUSE-SU-2019:0552-1

    SUSE-SU-2019:0552-1

    Published: 6 Mar 2019Last Modified: 4 Feb 2026
    Upstream:
    CVE-2019-3811
    Aliases:
    CVE-2019-3811

    Summary: Security update for sssd

    Details: This update for sssd fixes the following issues: Security vulnerability fixed: - CVE-2019-3811: Fix fallback_homedir returning '/' for empty home directories (bsc#1121759) Other bug fixes and changes: - Skip sdap_save_grpmem() if ignore_group_members is set. (bsc#1082568) - Only search for primary group if it is not already cached (bsc#1082568) - Install /var/lib/sss/mc directory to correct sssd cache invalidation behaviour. Spec patch authored by Josef Cejka. (bsc#1039567) to fix a segfault in sudo provider (bsc#977224). - Fix a segfault in sss_cache (bsc#976038).

    References: https://www.suse.com/support/update/announcement/2019/suse-su-20190552-1/, https://bugzilla.suse.com/1039567, https://bugzilla.suse.com/1082568, https://bugzilla.suse.com/1121759, https://bugzilla.suse.com/976038, https://bugzilla.suse.com/977224, https://www.suse.com/security/cve/CVE-2019-3811

    Affected packages

    Package

    Name: sssd

    Purl: pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.11.5.1-10.16.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High