tocsin

Debian/sssd: high 8.8

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into r

Action: Upgrade sssd to 2.5.2-1 or later.

Affected

introducedfixedlast affected
02.5.2-1-

Fixed versions

2.5.2-1

Sources

published · modified · JSON