SUSE-RU-2017:0627-1: Recommended update for sssd

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for sssd
______________________________________________________________________________

Announcement ID:    SUSE-RU-2017:0627-1
Rating:             low
References:         #1009710 #1010064 #1012440 #992599 
Affected Products:
                    SUSE OpenStack Cloud 5
                    SUSE Manager Proxy 2.1
                    SUSE Manager 2.1
                    SUSE Linux Enterprise Software Development Kit 11-SP4
                    SUSE Linux Enterprise Server 11-SP4
                    SUSE Linux Enterprise Server 11-SP3-LTSS
                    SUSE Linux Enterprise Point of Sale 11-SP3
                    SUSE Linux Enterprise Debuginfo 11-SP4
                    SUSE Linux Enterprise Debuginfo 11-SP3
______________________________________________________________________________

   An update that has four recommended fixes can now be
   installed.

Description:


   This update for sssd provides fixes and enhancements:

   - Introduce new configuration option "ignore_group_members" that can be
     used to disable retrieval of group members from LDAP servers when
     issuing group lookups. (fate#320926)
   - In addition to sudoRunAsUser and sudoRunAsGroup, fetch also sudoRunAs
     attribute from LDAP to be compatible with older versions of sudo.
     (bsc#1009710)
   - Fix a rare segmentation fault in the PAM responder code. (bsc#992599)
   - Fix a rare segmentation fault in ldb_msg_sanity_check(). (bsc#1010064)


Patch Instructions:

   To install this SUSE Recommended Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE OpenStack Cloud 5:

      zypper in -t patch sleclo50sp3-sssd-13009=1

   - SUSE Manager Proxy 2.1:

      zypper in -t patch slemap21-sssd-13009=1

   - SUSE Manager 2.1:

      zypper in -t patch sleman21-sssd-13009=1

   - SUSE Linux Enterprise Software Development Kit 11-SP4:

      zypper in -t patch sdksp4-sssd-13009=1

   - SUSE Linux Enterprise Server 11-SP4:

      zypper in -t patch slessp4-sssd-13009=1

   - SUSE Linux Enterprise Server 11-SP3-LTSS:

      zypper in -t patch slessp3-sssd-13009=1

   - SUSE Linux Enterprise Point of Sale 11-SP3:

      zypper in -t patch sleposp3-sssd-13009=1

   - SUSE Linux Enterprise Debuginfo 11-SP4:

      zypper in -t patch dbgsp4-sssd-13009=1

   - SUSE Linux Enterprise Debuginfo 11-SP3:

      zypper in -t patch dbgsp3-sssd-13009=1

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE OpenStack Cloud 5 (x86_64):

      libsss_idmap0-1.9.4-0.33.1
      python-sssd-config-1.9.4-0.33.1
      sssd-1.9.4-0.33.1
      sssd-32bit-1.9.4-0.33.1
      sssd-tools-1.9.4-0.33.1

   - SUSE Manager Proxy 2.1 (x86_64):

      libsss_idmap0-1.9.4-0.33.1
      python-sssd-config-1.9.4-0.33.1
      sssd-1.9.4-0.33.1
      sssd-32bit-1.9.4-0.33.1
      sssd-tools-1.9.4-0.33.1

   - SUSE Manager 2.1 (s390x x86_64):

      libsss_idmap0-1.9.4-0.33.1
      python-sssd-config-1.9.4-0.33.1
      sssd-1.9.4-0.33.1
      sssd-32bit-1.9.4-0.33.1
      sssd-tools-1.9.4-0.33.1

   - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64):

      libsss_idmap-devel-1.9.4-0.33.1
      libsss_sudo-devel-1.9.4-0.33.1

   - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64):

      libsss_idmap0-1.9.4-0.33.1
      python-sssd-config-1.9.4-0.33.1
      sssd-1.9.4-0.33.1
      sssd-tools-1.9.4-0.33.1

   - SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64):

      sssd-32bit-1.9.4-0.33.1

   - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 s390x x86_64):

      libsss_idmap0-1.9.4-0.33.1
      python-sssd-config-1.9.4-0.33.1
      sssd-1.9.4-0.33.1
      sssd-tools-1.9.4-0.33.1

   - SUSE Linux Enterprise Server 11-SP3-LTSS (s390x x86_64):

      sssd-32bit-1.9.4-0.33.1

   - SUSE Linux Enterprise Point of Sale 11-SP3 (i586):

      libsss_idmap0-1.9.4-0.33.1
      python-sssd-config-1.9.4-0.33.1
      sssd-1.9.4-0.33.1
      sssd-tools-1.9.4-0.33.1

   - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64):

      sssd-debuginfo-1.9.4-0.33.1
      sssd-debugsource-1.9.4-0.33.1

   - SUSE Linux Enterprise Debuginfo 11-SP4 (ppc64 s390x x86_64):

      sssd-debuginfo-32bit-1.9.4-0.33.1

   - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 s390x x86_64):

      sssd-debuginfo-1.9.4-0.33.1
      sssd-debugsource-1.9.4-0.33.1

   - SUSE Linux Enterprise Debuginfo 11-SP3 (s390x):

      sssd-debuginfo-32bit-1.9.4-0.33.1


References:

   https://bugzilla.suse.com/1009710
   https://bugzilla.suse.com/1010064
   https://bugzilla.suse.com/1012440
   https://bugzilla.suse.com/992599