sssd-1.13.0-40.el7
エラータID: AXSA:2015-829:03
リリース日:
2015/11/29 Sunday - 12:39
題名:
sssd-1.13.0-40.el7
影響のあるチャネル:
Asianux Server 7 for x86_64
Severity:
Low
Description:
以下項目について対処しました。
[Security Fix]
- SSSD のPrivilege Attribute Certificate (PAC) responder プラグインには,
メモリリークが存在し,Kerberos 認証の間 PAC ブロブのパースを引き起こす
多くのログインによって,リモートの認証されたユーザがサービス拒否 (メモリ
消費) を引き起こす脆弱性があります。 (CVE-2015-5292)
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2015-5292
Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of service (memory consumption) via a large number of logins that trigger parsing of PAC blobs during Kerberos authentication.
Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of service (memory consumption) via a large number of logins that trigger parsing of PAC blobs during Kerberos authentication.
追加情報:
N/A
ダウンロード:
SRPMS
- sssd-1.13.0-40.el7.src.rpm
MD5: 1d1edf1959ea3d5fb48e9e400122ad7a
SHA-256: d7cbe6ca7312513b6d99632f028e3025a202a8df5e679e6bb8806fd0cde72794
Size: 4.50 MB
Asianux Server 7 for x86_64
- libipa_hbac-1.13.0-40.el7.x86_64.rpm
MD5: 4b15c33e4cb3f670f58a64540315b3bf
SHA-256: 786514014a2a4e32c473c307cae750628e2323305351dde013a148ca77b2b4d9
Size: 96.11 kB - libsss_idmap-1.13.0-40.el7.x86_64.rpm
MD5: 7fd157eab0b0a854ab560787a300c85a
SHA-256: ca2eba2edc2f626b595380cb5c29156e4574e6fcd561ed021f686bf29b264159
Size: 100.92 kB - libsss_nss_idmap-1.13.0-40.el7.x86_64.rpm
MD5: 86950cea91fcfa28d75d717407bdd45d
SHA-256: 8638538fbfdd72244184df42e88aa8286b2267002c1de93c64d0291056d9b84d
Size: 100.12 kB - libsss_simpleifp-1.13.0-40.el7.x86_64.rpm
MD5: 27e8acf737f079523499100b207dfcce
SHA-256: b9b726bfc2280fec560aaef1854977c8c0d67c9fbfc7e30159cb46252df06120
Size: 88.15 kB - python-libipa_hbac-1.13.0-40.el7.x86_64.rpm
MD5: be32a80ccb00de006060d959c647d7c9
SHA-256: 3ca2ad86eae02463584135520fd7080747ec727ff3ddbf74eb14666f37f010b6
Size: 91.01 kB - python-libsss_nss_idmap-1.13.0-40.el7.x86_64.rpm
MD5: a27d598a42bf6b6d072edd85bc6e14e5
SHA-256: 8762a20b1cb0a75cca267c9ba634ae6fa88fd6077d037a12621c06709b4c4b99
Size: 83.12 kB - python-sss-1.13.0-40.el7.x86_64.rpm
MD5: 4830e3d88475bd0f42939bfaee897e2e
SHA-256: dba83e80cfaaa44a467df7b0718084cd2e268b0d7795b34dab953399a2b4a992
Size: 103.98 kB - python-sssdconfig-1.13.0-40.el7.noarch.rpm
MD5: 6e840b1e5381ded21e5a2c871a59e9fc
SHA-256: a1d1814ede92cbeedf5107a7822199ae78c95e93cd74891efa271b733cdce0aa
Size: 122.48 kB - python-sss-murmur-1.13.0-40.el7.x86_64.rpm
MD5: 8664c9c3e0861124f9d22e5d535037f8
SHA-256: bcc9f2ee17812f66e66ee58c03807cc9b86f9705d4a483de0851db48db6539ea
Size: 80.98 kB - sssd-1.13.0-40.el7.x86_64.rpm
MD5: d9d1bc5b844b3a1bd59c87d5fe54e882
SHA-256: dfddb72c3873cff68472aec3d7c5d02a88ce67be59cd11a8ed45e463477bdd2f
Size: 89.80 kB - sssd-ad-1.13.0-40.el7.x86_64.rpm
MD5: db4132c627403f53582bafa8b82dc5cf
SHA-256: 9c26a160302f5253110d3c6f1244eefa04f4dcc150055531f359020ba87b9a74
Size: 214.00 kB - sssd-client-1.13.0-40.el7.x86_64.rpm
MD5: 1a5ccfba3fe7a093bc426af0d3c91a41
SHA-256: 5dabf56ad160c90fa1111a2611aaf2795864c692f47d1a43ed6043fa3005e15b
Size: 155.50 kB - sssd-common-1.13.0-40.el7.x86_64.rpm
MD5: 84aca664a46bb52a244eeb63c022ab28
SHA-256: 82873c3b299766f040e95ddfd129b3edcafd32d13835ac4535e95e8fe750d270
Size: 1.08 MB - sssd-common-pac-1.13.0-40.el7.x86_64.rpm
MD5: 00c658ad13a7e95b1e991489b2d6ce90
SHA-256: 43aa7a5307d6bdbce1020f868d88245e09d40d15d83bbd338de12959659135bf
Size: 133.03 kB - sssd-dbus-1.13.0-40.el7.x86_64.rpm
MD5: ae8d9f5be71493180a89bd9737be4783
SHA-256: bf8f6483ea89eba0596c6b8bb22b6a45490b74045112b16ed98f2706e1d427c3
Size: 156.10 kB - sssd-ipa-1.13.0-40.el7.x86_64.rpm
MD5: 1a7170b0311b7ecb1cf33a80106917ea
SHA-256: d6af29be5be4f7d09dcb13af1a4918c3615295999eece0485b9999f4bd675eb5
Size: 250.77 kB - sssd-krb5-1.13.0-40.el7.x86_64.rpm
MD5: 16009003c2c40abbf7008e8b4b02fb1a
SHA-256: 27bf56cb83cb65df5062c5f0d0786f11a97e1fa94f5aa357e81dcc46947deeb7
Size: 127.54 kB - sssd-krb5-common-1.13.0-40.el7.x86_64.rpm
MD5: 4e3fedd13ec6fc20b907d21154dee5fa
SHA-256: 51cbcc073e4390a6ccff4daef41df51a55702680ed7101eff3b1050318c5c8c6
Size: 153.18 kB - sssd-ldap-1.13.0-40.el7.x86_64.rpm
MD5: 110da981cb57d818c0d66300c63c6440
SHA-256: 6b72eaf3b7b76cb986b59709a7f072b284468d83c9edffd6c162a043484cb1fd
Size: 192.48 kB - sssd-libwbclient-1.13.0-40.el7.x86_64.rpm
MD5: 928209de180605ab0fb1e9ce0ee83905
SHA-256: 72b0612d7a3f5e6e747e8f6c29927879374731234749f122540d539252a8285a
Size: 91.21 kB - sssd-proxy-1.13.0-40.el7.x86_64.rpm
MD5: 346f3ce171e68c888d191b5f138e497d
SHA-256: 206cec88cfb8fa29f2d35c9f5705ba0870cade12a82aeaacd868ba9a403d322d
Size: 121.82 kB - sssd-tools-1.13.0-40.el7.x86_64.rpm
MD5: 146d5e2f43f551dbc9f065bf3e3ecb9a
SHA-256: 0d295c796baeac84d7ea97fefa0f6db70080905ae24370f2bafd8314530ceb7c
Size: 343.40 kB - libipa_hbac-1.13.0-40.el7.i686.rpm
MD5: b631bdac075f3d4acd9097976c6e388c
SHA-256: a1fe3a6b340c36972b129e42d7ac3d1544ecb2d3c280a6e6080466235bc69ac9
Size: 96.13 kB - libsss_idmap-1.13.0-40.el7.i686.rpm
MD5: 7fc7bcadcf0bece49c3307c8a8ab0f43
SHA-256: 741d2b4d5b8cf0adbd687033d3cdf01d2e9a02bfa6e8a1b7d2f5170886406586
Size: 101.05 kB - libsss_nss_idmap-1.13.0-40.el7.i686.rpm
MD5: 0744f63e11ee9f2ec2ad135d1df837e8
SHA-256: c340679e6ea123eb0718e6279fbacdaafe8de18682f5825be3fd825cc8f2f94d
Size: 100.25 kB - libsss_simpleifp-1.13.0-40.el7.i686.rpm
MD5: abfae76b5ef2453e4ca039c54cfbec23
SHA-256: a285ff59a56cb4d97ddb381ca6db97f780a3b1db3aacf7d0a26ee89abb722277
Size: 88.25 kB - sssd-client-1.13.0-40.el7.i686.rpm
MD5: a15f54887233deb4c0a176abebd4153f
SHA-256: 36de3930e3a0bf819197b5804e97d37cfd1f073ecb197c8d6a470ea1ca87bddb
Size: 155.37 kB - sssd-common-1.13.0-40.el7.i686.rpm
MD5: 1edb1378bc27d72a538366a7546f5a32
SHA-256: 400c6a91a87e17c47d3934a35c5c4401b461f9587f92b37136a5446a6a30f958
Size: 1.06 MB - sssd-krb5-common-1.13.0-40.el7.i686.rpm
MD5: f9abda18d21e0988ef5eceb37c9b7ea5
SHA-256: 38e8a7f5035e13ecd5f34988e932b9aca5e337ae49d2bd7574ee5b8f976605ce
Size: 152.15 kB