Synopsis:          Low: sssd security, bug fix and enhancement update
Issue Date:        2013-02-21
CVE Numbers:       CVE-2013-0219
                    CVE-2013-0220
--

A race condition was found in the way SSSD copied and removed user home
directories. A local attacker who is able to write into the home 
directory of a
different user who is being removed could use this flaw to perform symbolic
link attacks, possibly allowing them to modify and delete arbitrary 
files with
the privileges of the root user. (CVE-2013-0219)

Multiple out-of-bounds memory read flaws were found in the way the 
autofs and
SSH service responders parsed certain SSSD packets. An attacker could 
spend a
specially-crafted packet that, when processed by the autofs or SSH service
responders, would cause SSSD to crash. This issue only caused a temporary
denial of service, as SSSD was automatically restarted by the monitor 
process
after the crash. (CVE-2013-0220)
--

SL6
   x86_64
     libipa_hbac-1.9.2-82.el6.i686.rpm
     libipa_hbac-1.9.2-82.el6.x86_64.rpm
     libipa_hbac-python-1.9.2-82.el6.x86_64.rpm
     libsss_autofs-1.9.2-82.el6.x86_64.rpm
     libsss_idmap-1.9.2-82.el6.x86_64.rpm
     libsss_sudo-1.9.2-82.el6.x86_64.rpm
     sssd-1.9.2-82.el6.x86_64.rpm
     sssd-client-1.9.2-82.el6.i686.rpm
     sssd-client-1.9.2-82.el6.x86_64.rpm
     sssd-debuginfo-1.9.2-82.el6.i686.rpm
     sssd-debuginfo-1.9.2-82.el6.x86_64.rpm
     libipa_hbac-devel-1.9.2-82.el6.i686.rpm
     libipa_hbac-devel-1.9.2-82.el6.x86_64.rpm
     libsss_idmap-1.9.2-82.el6.i686.rpm
     libsss_idmap-devel-1.9.2-82.el6.i686.rpm
     libsss_idmap-devel-1.9.2-82.el6.x86_64.rpm
     libsss_sudo-devel-1.9.2-82.el6.i686.rpm
     libsss_sudo-devel-1.9.2-82.el6.x86_64.rpm
     sssd-tools-1.9.2-82.el6.x86_64.rpm
   i386
     libipa_hbac-1.9.2-82.el6.i686.rpm
     libipa_hbac-python-1.9.2-82.el6.i686.rpm
     libsss_autofs-1.9.2-82.el6.i686.rpm
     libsss_idmap-1.9.2-82.el6.i686.rpm
     libsss_sudo-1.9.2-82.el6.i686.rpm
     sssd-1.9.2-82.el6.i686.rpm
     sssd-client-1.9.2-82.el6.i686.rpm
     sssd-debuginfo-1.9.2-82.el6.i686.rpm
     libipa_hbac-devel-1.9.2-82.el6.i686.rpm
     libsss_idmap-devel-1.9.2-82.el6.i686.rpm
     libsss_sudo-devel-1.9.2-82.el6.i686.rpm
     sssd-tools-1.9.2-82.el6.i686.rpm

- Scientific Linux Development Team