[SECURITY] Fedora 34 Update: sssd-2.5.2-2.fc34
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-140967fe27
2021-08-18 01:09:52.133508
--------------------------------------------------------------------------------
Name : sssd
Product : Fedora 34
Version : 2.5.2
Release : 2.fc34
URL : https://github.com/SSSD/sssd/
Summary : System Security Services Daemon
Description :
Provides a set of daemons to manage access to remote directories and
authentication mechanisms. It provides an NSS and PAM interface toward
the system and a pluggable back end system to connect to multiple different
account sources. It is also the basis to provide client auditing and policy
services for projects like FreeIPA.
The sssd subpackage is a meta-package that contains the daemon as well as all
the existing back ends.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-3621
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 16 2021 Pavel B��ezina <pbrezina(a)redhat.com> - 2.5.2-2
- Fix CVE-2021-3621
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1975142 - CVE-2021-3621 sssd: shell command injection in sssctl
https://bugzilla.redhat.com/show_bug.cgi?id=1975142
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-140967fe27' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------