SUSE-SU-2019:0805-1

    Dashboard / Vulnerabilities / SUSE-SU-2019:0805-1

    SUSE-SU-2019:0805-1

    Published: 29 Mar 2019Last Modified: 4 Feb 2026
    Upstream:
    CVE-2019-3811
    Aliases:
    CVE-2019-3811

    Summary: Recommended update for adcli, sssd

    Details: This update for adcli and sssd provides the following improvement: Security vulnerability fixed: - CVE-2019-3811: Fix fallback_homedir returning '/' for empty home directories (bsc#1121759) Other fixes: - Add an option to disable checking for trusted domains in the subdomains provider (bsc#1125617) - Clear pid file in corner cases (bsc#1127670) - Fix child unable to write to log file after SIGHUP (bsc#1127670) - Include adcli in SUSE Linux Enterprise 12 SP3 for sssd-ad. (fate#326619, bsc#1109849) The adcli enables sssd to do password renewal when using Active Directory.

    References: https://www.suse.com/support/update/announcement/2019/suse-su-20190805-1/, https://bugzilla.suse.com/1109849, https://bugzilla.suse.com/1110121, https://bugzilla.suse.com/1121759, https://bugzilla.suse.com/1125617, https://bugzilla.suse.com/1127670, https://www.suse.com/security/cve/CVE-2019-3811

    Affected packages

    Package

    Name: adcli

    Purl: pkg:rpm/suse/adcli&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -0.8.2-1.3.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2019:0805-1 | CVE-DB