[sssd/f13/master] - CVE-2010-4341 - DoS in sssd PAM responder can prevent logins

Stephen Gallagher sgallagh at fedoraproject.org
Wed Jan 12 12:47:13 UTC 2011


commit 10833bf6824141718d2cd3c606132951717e40e3
Author: Stephen Gallagher <sgallagh at redhat.com>
Date:   Tue Jan 11 12:35:59 2011 -0500

    - CVE-2010-4341 - DoS in sssd PAM responder can prevent logins

 sssd.spec |    7 ++++++-
 1 files changed, 6 insertions(+), 1 deletions(-)
---
diff --git a/sssd.spec b/sssd.spec
index df9a0a4..f3922ba 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -7,7 +7,7 @@ Name: sssd
 Version: 1.3.0
 #Never reset the Release, always increment it
 #Otherwise we can have issues if library versions do not change
-Release: 38%{?dist}
+Release: 39%{?dist}
 Group: Applications/System
 Summary: System Security Services Daemon
 License: GPLv3+
@@ -27,6 +27,7 @@ Patch0002: 0002-Return-offline-instead-of-error.patch
 Patch0003: 0003-Fix-incorrect-free-of-req-in-krb5_auth.c.patch
 Patch0004: 0004-Ensure-that-SSSD-shuts-down-completely-before-restar.patch
 Patch0005: 0005-Wait-for-all-children-to-exit.patch
+Patch0006: 0006-Validate-user-supplied-size-of-data-items.patch
 
 ### Dependencies ###
 
@@ -212,6 +213,7 @@ A dynamically-growing, reference-counted array
 %patch0003 -p1
 %patch0004 -p1
 %patch0005 -p1
+%patch0006 -p1
 
 %build
 %configure \
@@ -460,6 +462,9 @@ fi
 %postun -n libref_array -p /sbin/ldconfig
 
 %changelog
+* Tue Jan 11 2011 Stephen Gallagher <sgallagh at redhat.com> - 1.3.0-39
+- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
+
 * Thu Nov 18 2010 Stephen Gallagher <sgallagh at redhat.com> - 1.3.0-38
 - Solve a shutdown race-condition that sometimes left processes running
 


More information about the scm-commits mailing list