mirrors/meta-security
1
0 Fork 0
mirror of https://git.yoctoproject.org/meta-security synced 2026-10-22 07:28:14 +00:00
Code Issues Projects Releases Wiki Activity
1,773 Commits 40 Branches 0 Tags
master
Commit Graph
7 Commits
Author SHA1 Message Date
Scott Murray dddf6f4781 sssd: upgrade 2.10.2 -> 2.13.1 
Upgrade sssd to latest release, in part to fix OpenSSL 4.0 related build
failures.  Add _GNU_SOURCE to CFLAGS when building with musl to pick up
strchrnul definition.

Release notes:
https://sssd.io/release-notes/sssd-2.11.0.html
https://sssd.io/release-notes/sssd-2.11.1.html
https://sssd.io/release-notes/sssd-2.12.0.html
https://sssd.io/release-notes/sssd-2.13.0.html
https://sssd.io/release-notes/sssd-2.13.1.html

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
 2026-09-14 20:52:46 +03:00
Yi Zhao 0d6aa528cf sssd: upgrade 2.9.2 -> 2.10.2 
ChangeLog:
https://github.com/SSSD/sssd/releases/tag/2.10.2

* Drop backport patches.
* Update sssd.conf and volatile files.
* Drop PACKAGECONFIG[infopipe] as it has been removed upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2025-04-13 14:07:57 -04:00
Hitendra Prajapati ecdd682b92 sssd: Fix CVE-2023-3758 
A race condition flaw was found in sssd where the GPO policy is
not consistently applied for authenticated users. This may lead
to improper authorization issues, granting or denying access to
resources inappropriately.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-3758

Upstream-patch:
https://github.com/SSSD/sssd/commit/f4ebe1408e0bc67abfbfb5f0ca2ea13803b36726

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2024-07-29 20:07:01 -04:00
Kai Kang 782251aa8f sssd: 2.7.4 -> 2.9.1 
Update sssd from 2.7.4 to 2.9.1.

* backport patch to fix interpreter of script sss_analyze
* add runtime dependency python3-systemd when systemd is enabled
* update FILES

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2023-08-06 11:31:18 -04:00
Armin Kuster caadc8672b sssd: update to 2.7.1 
drop CVE-2021-3621.patch
refresh a few patches

fixup configure-unsafe globally via sed in build.m4

=== test
RESULTS - sssd.SSSDTest.test_sssd_help: PASSED (1.70s)
RESULTS - sssd.SSSDTest.test_sssd_sssctl_conf_perms_chk: PASSED (2.71s)
RESULTS - sssd.SSSDTest.test_sssd_sssctl_deamon: PASSED (2.07s)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-06-18 06:48:22 -07:00
Armin Kuster 23d501eb70 sssd: use example conf file 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-06-18 06:48:22 -07:00
Armin Kuster db3a3e87a6 sssd:move to dynamic networking-layer 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-06-18 06:48:22 -07:00