subject:"\[SECURITY\] \[DLA 1635\-1\] sssd security update"

Re: [SECURITY] [DLA 1635-1] sssd security update

2019-01-18 Thread Mike Gabriel

Hi all, On Do 17 Jan 2019 13:34:29 CET, Mike Gabriel wrote: Package: sssd Version: 1.11.7-3+deb8u2 CVE ID : CVE-2019-3811 Debian Bug : 919051 A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root

[SECURITY] [DLA 1635-1] sssd security update

2019-01-17 Thread Mike Gabriel

Package: sssd Version: 1.11.7-3+deb8u2 CVE ID : CVE-2019-3811 Debian Bug : 919051 A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory).