Security update for sssd (moderate)

An update that solves one vulnerability and has three fixes
is now available.

Description:

This update for sssd fixes the following issues:

Security issue fixed:

• CVE-2018-16838: Fixed an authentication bypass related to the Group
  Policy Objects implementation (bsc#1124194).

Non-security issues fixed:

• Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
• Missing GPOs directory could have led to login problems (bsc#1132879)
• Fix a crash by adding a netgroup counter to struct nss_enum_index
  (bsc#1132657)

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.1:

  zypper in -t patch openSUSE-2019-1589=1

• openSUSE Leap 15.0:

  zypper in -t patch openSUSE-2019-1589=1