-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 15 Sep 2021 20:45:50 +0200 Source: sssd Architecture: source Version: 1.15.0-3+deb9u2 Distribution: stretch-security Urgency: medium Maintainer: Debian SSSD Team <pkg-sssd-devel@lists.alioth.debian.org> Changed-By: Anton Gladky <gladk@debian.org> Changes: sssd (1.15.0-3+deb9u2) stretch-security; urgency=medium . * Non-maintainer upload by the LTS Security Team. * Replace system() with execvp() to avoid execution of user supplied command. CVE-2021-3621 Checksums-Sha1: a088d2e3d589f1a330fa5332efbd8513742c5d51 4446 sssd_1.15.0-3+deb9u2.dsc 0c9fc62c1b9bcdca649223d9f673b9a73f273e56 5178779 sssd_1.15.0.orig.tar.gz c558f3accc6bfb0d97933e2c50e462bdf6435c91 32596 sssd_1.15.0-3+deb9u2.diff.gz c323d47ecdb8ed6d0ae7077de4a6b032e242088e 9026 sssd_1.15.0-3+deb9u2_source.buildinfo Checksums-Sha256: e4bda592b593286d2b177e4c8bab163f0e2a177a6e8f99371e6cef3c63e6057d 4446 sssd_1.15.0-3+deb9u2.dsc 729ed277ff99e4adec81291b6a3ec28147a2531b733f36f429940de01ec7b344 5178779 sssd_1.15.0.orig.tar.gz 8f7bd04bb2c69ed8d75435b9a3ebb3359810961c22faef23164a28e36210009b 32596 sssd_1.15.0-3+deb9u2.diff.gz 6f68e37299269570cb50357d15782d66402ab0bb8bfc7dfc8aa80bf14884ba09 9026 sssd_1.15.0-3+deb9u2_source.buildinfo Files: cb46d200d69bf503d0a9a45df60a6993 4446 utils extra sssd_1.15.0-3+deb9u2.dsc 0c151a045e5292fece1e991b665d525c 5178779 utils extra sssd_1.15.0.orig.tar.gz 5ccc3e75e53f4d844ea952b7cb19f1a3 32596 utils extra sssd_1.15.0-3+deb9u2.diff.gz 4a8ce9daaaf6616789fa7c65e9c4ad7c 9026 utils extra sssd_1.15.0-3+deb9u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu71F6oGKuG/2fnKF0+Fzg8+n/wYFAmFCS/8ACgkQ0+Fzg8+n /wZndhAAiqcU+GdmVDFCVEQYp+emsYaKYAbv//dT7u8D8rh2+0d+6wQigOZFoKMa PSQCV3JJDipj5MFxD2qUk1LGoRmclGfRl8UeqL+kXAVvpFjLZXwRIWrHF1Jntet4 Dh1K9Qj+S001/f3g6biVtX08B4hmr0sw3r7XagAvoUNz9K5zSB6qxHnRw5fEKzaP EH3LyMd47VqgEaHSvkEA9lDVh4YY0JGBY7Pc2ru3mJMG3o24qwxA2qktwSy9bzJh IaSSj022T7snEmk5ZkeKH/DmqJWBK8P80PCF2SS7a2PzPG8WplK1zzUS4m7bKUwx m/V7Yy8wyyiCGeGJtvSPWBySowx+e7JwTMXEgA40NiXN8tY9j4But0Dk/SQaz84Z PDmNa4Ra9IQ4+sA1TokkVRDK2JNMXPQZ7WrWu7ZuNkqXoYWd4hE25+UsHPMtO+5f PQg2rR8RsUdusBk1IYIJnDyDNlD/MJ501Ja+3IlKeixP7vShE+yK5MHxyTFihDqz 8XcVXE8n0GrPV0SrlIJCdNDkpt2BKpKHiOVvSyyl4r8QPrS4/aqfDGqUni7NfqTp bn58bkWJRfhG1flpSCe9f2MgipF0z55jGvl47xR9TQZCDL3FeaNzDBoM0NzvwGMz hCcXP2hB6WfgyY5rqOFmV2y4xqnIvSEtUJFTVkSFpaqP2bdZOKg= =F/IY -----END PGP SIGNATURE-----