August 2021 - Sssd-maintainers - Fedora mailing-lists

[Bug 1975142] CVE-2021-3621 sssd: shell command injection in sssctl
by bugzilla＠redhat.com 31 Aug '21

31 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1975142 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2021:3336 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1975142] CVE-2021-3621 sssd: shell command injection in sssctl
by bugzilla＠redhat.com 31 Aug '21

31 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1975142 --- Comment #26 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2021:3336 https://access.redhat.com/errata/RHSA-2021:3336 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1993910] New: CVE-2021-3621 sssd: shell command injection in sssctl [fedora-all]
by bugzilla＠redhat.com 25 Aug '21

25 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1993910 Bug ID: 1993910 Summary: CVE-2021-3621 sssd: shell command injection in sssctl [fedora-all] Product: Fedora Version: 34 Status: NEW Component: sssd Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: sssd-maintainers(a)lists.fedoraproject.org Reporter: cbuissar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: abokovoy(a)redhat.com, atikhono(a)redhat.com, jhrozek(a)redhat.com, lslebodn(a)redhat.com, luk.claes(a)gmail.com, mzidek(a)redhat.com, pbrezina(a)redhat.com, sbose(a)redhat.com, ssorce(a)redhat.com, sssd-maintainers(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug.

1 10

[Bug 1975142] CVE-2021-3621 sssd: shell command injection in sssctl
by bugzilla＠redhat.com 23 Aug '21

23 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1975142 --- Comment #25 from Cedric Buissart <cbuissar(a)redhat.com> --- Upstream fix : https://github.com/SSSD/sssd/commit/7ab83f97e1cbefb78ece17232185bdd2985f0bbe -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1975142] CVE-2021-3621 sssd: shell command injection in sssctl
by bugzilla＠redhat.com 19 Aug '21

19 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1975142 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2021:3235 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1975142] CVE-2021-3621 sssd: shell command injection in sssctl
by bugzilla＠redhat.com 19 Aug '21

19 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1975142 --- Comment #24 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 Via RHSA-2021:3235 https://access.redhat.com/errata/RHSA-2021:3235 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1975142] CVE-2021-3621 sssd: shell command injection in sssctl
by bugzilla＠redhat.com 17 Aug '21

17 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1975142 Bug 1975142 depends on bug 1993910, which changed state. Bug 1993910 Summary: CVE-2021-3621 sssd: shell command injection in sssctl [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1993910 What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1975142] CVE-2021-3621 sssd: shell command injection in sssctl
by bugzilla＠redhat.com 17 Aug '21

17 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1975142 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2021:3178 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1975142] CVE-2021-3621 sssd: shell command injection in sssctl
by bugzilla＠redhat.com 17 Aug '21

17 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1975142 --- Comment #23 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Enterprise Linux 8.1 Extended Update Support Via RHSA-2021:3178 https://access.redhat.com/errata/RHSA-2021:3178 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1975142] CVE-2021-3621 sssd: shell command injection in sssctl
by bugzilla＠redhat.com 16 Aug '21

16 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1975142 Product Security DevOps Team <prodsec-dev(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |ERRATA Status|NEW |CLOSED Last Closed| |2021-08-16 13:28:15 --- Comment #22 from Product Security DevOps Team <prodsec-dev(a)redhat.com> --- This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2021-3621 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

2025

2024

2023

2022

2021

2020

Sssd-maintainers August 2021