[CLSA-2026:1792512801] sssd: Fix of 6 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-20 16:13:36 UTC
Description:
- CVE-2026-6245: out-of-bounds read in pam_passkey_child_read_data() - CVE-2026-12610: use-after-free of the certmap context in p11_child_done() - CVE-2026-68742: out-of-bounds read in sss_nss_protocol_parse_addr() - CVE-2026-68743: out-of-bounds read in extract_authtok_v1() - CVE-2026-90462: access granted on zero results in the LDAP ppolicy check - CVE-2026-90996: empty-body underflow in the NSS request parsers
CVEs fixed:
Updated packages:
  • libipa_hbac-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:c5e5ab60a8e24083f495a33229467a1e93a9ba070464527ee10c941d3ce6fd30
  • libipa_hbac-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:86f95a8e0217e4b1b2bcc9227cdfea7b782da988a1e5ccadf9387c68ba8c7dc1
  • libipa_hbac-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:2cd6140f009ec4cd920aaba68756ba2bd1bf4ce4880093cf54a54226fc80bd44
  • libipa_hbac-devel-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:f29615fcd437aaedb3ce9897ea74646846184e1e3c097b78bdf9d8cecbda5fa8
  • libipa_hbac-devel-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:2b53e34153486a6599391748fda4ed417ea39adf8c1d9cb2456cb59af6053713
  • libipa_hbac-devel-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:271f8a6ee8960c756e2a17159f544b51d382ef6f66b5695968d56b9e6bb3ced0
  • libsss_autofs-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:f3d8ac13da704c4b022fb11e48b0608c82218aedbe576200a74061d466d29850
  • libsss_autofs-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:e83d97104b187385b8b0119f46428a9bfaa367f5f781e47499988a41f85c0520
  • libsss_autofs-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:65145026ce0032b28a9014c9432367d0a3e6d0b41061944577cfa2c196dabfee
  • libsss_certmap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:ee8c82c5e5593e6c0748a3ede814f00f6d7075ad22874f073861368eaae55f9d
  • libsss_certmap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:60bfe39a841089e818bd4fbdfac1880523b931f4859eaff6d58a15c7f5e5208e
  • libsss_certmap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:1febae13110bc20776ecabc3c81f6a79de1ea2743bc589681af85c6e9affea6b
  • libsss_certmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:1e053dcf84c6151d96f1d598b3d36fa05820ef572ef9bceb96ef94586f730687
  • libsss_certmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:a73398582c6b9487205b182e85c1843a8579b1188b98c5f2d44bcd1b173114e2
  • libsss_certmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:62d72a22cbb44d2a4df0b343c83cdac86acf5e38dccc47d809d3965d1b433711
  • libsss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:f13679232f56134a697d9109e71bcde0f81cd86182c96be1eeb40e6ebe7975e1
  • libsss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:d4b0bde341874e5e78f65d04a8649cc645b98b29716d0fd9fbc6a29fc514079e
  • libsss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:dc69e494d10d761bb819cd89ecdf6aa9b3a4accf83e4128cb1158e80054b259c
  • libsss_idmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:0db655f038f944a4f2493d9a1bf4087c28536f84c7d052c773da8d599e7f3021
  • libsss_idmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:1e68bc2cd0db6fcff77e7660c15a73b794f36d00c6782202d48e2584465c0516
  • libsss_idmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:94cfd556412ed0b7f0dbe794e7e2f61bb228e885b799ea2ab2ef88a8f803a00e
  • libsss_nss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:b4ad0aeb967a337a98ee63dab6d21940ab0ad8c829793ab9972c07124058eaea
  • libsss_nss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:b024bf2638aa8d0b3c420de32b9e23977d9f2c62e24ca5f9d030e24299f7d857
  • libsss_nss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:4a544891ec6fea9ed9f96c1500dac6d3c0cbbe0b46be3ed9aa84858db92e4d4c
  • libsss_nss_idmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:ad5fc64f86b1adb4cb2ee18ad19fc49bd1b54716b2ece96954762152c43f737e
  • libsss_nss_idmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:740514eefb7be5e990edc71e05559195070c4533d158b31062b5b17bd62f8d05
  • libsss_nss_idmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:6f1dfc011a05d187f37a929054727790f764a6325efd4bf643616c02c6967ab1
  • libsss_simpleifp-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:bbef0e19cba7e5238e4db7402a6ab5c5aa92df3dd93197142a5436f6502f2283
  • libsss_simpleifp-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:0876bb1ad0169376b136b85f63934007dcaca39b7a7ebb00400454f44f8272aa
  • libsss_simpleifp-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:eaef4317817d98a00ad4b8d03a1b2eb4f432b6a5663e052681e195f8abd6f026
  • libsss_simpleifp-devel-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:36b9876b21faa94922544c8edb517afc9bbeba0860c92826885a1e4db6bb7e86
  • libsss_simpleifp-devel-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:1c1067354d50ec7d9ad5039388e7936c59abebd3a7fddab3bb5742e4520c14a9
  • libsss_simpleifp-devel-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:e85395b4608c3a26d88929aa027721d7f9ff820d447332371c5bf2563c2caf77
  • libsss_sudo-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:ffcf064c5690300da43667dc38e9a30b542ae3ad278e9f4f9d6f7deef354e64a
  • libsss_sudo-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:f4e870e999bfef0f7eed6ba4b09cb1362bf9ccce5b9b5d4c413a3a03f2d9aa91
  • libsss_sudo-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:77ba9cd01092f02681f2d780ad047ca07f41120da759a375a6ca8933e20136fd
  • python3-libipa_hbac-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:fefaf5d228b360f84514f7dcf594bd0ba1dc4d4883e86f973f3ad19b52e10813
  • python3-libipa_hbac-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:151e39d6bd54d0501c27eb09a082747f5fa7342b112806b95f0c880a5accc3d2
  • python3-libipa_hbac-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:d72ee6ab5b3504a8d1922e34f35e0d9234148ea85cc9dcbc2d47a7accb5b1938
  • python3-libsss_nss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:0b3c86b3230767cb14d1ef8d6c7cc5f22b8d3b679b442ab3c369747270f592df
  • python3-libsss_nss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:fde05088f0f1167113e57ffc99ff50c0421ef1c1f1c691dc740385a85b4c4245
  • python3-libsss_nss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:909b7668b0fcaaa3eae12435fcef5ecfaa7ccd1a0c118fd545f268de9a3575d0
  • python3-sss-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:e0d0dc26e67003bb80b212bbb1ea454817ba0901311d20365295b6ac6ca9247d
  • python3-sss-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:0aaee8c792dda0ecbd4d5641c2a6f8603a42898470448715a87a0a7b4300df14
  • python3-sss-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:25b53ab8fbb67ee06495be1af0b2a1dbe2160eddf00a50211f3a124421f12554
  • python3-sss-murmur-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:405ee1c9d5436ccc7c1ff00c4966f38ea406fbcde56f56edc56cb1b56124ecb9
  • python3-sss-murmur-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:cfc868f61a3bd9cf4067a22d04d8b3bb7da4046fb8a75a398daa5a7576541ee9
  • python3-sss-murmur-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:8ff863bde39704834f5a47b139a52511aea8f74e1f8699aecc5cdbeb6e60a8c9
  • python3-sssdconfig-2.9.8-4.el9_8.1.tuxcare.els1.noarch.rpm
    sha:9302158ad4e4dcc2bce25d17831d96a7e947f04ae823d3e6d6ab2d082b8b01f6
  • sssd-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:1f065c4396d904a0bcccb0ca726e1f7aa68c6753ba2ea2ac8d40cb9cb4715bf6
  • sssd-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:4b9cba155b22c6c7c8f1dd5dc01ba0f0790ece86fa5515fdff3f41b24fb4c6cb
  • sssd-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:43cd7f8d37da96fd857d6952d3cfa11ffc1d2fc3e09f4910bbbd67852b066b7f
  • sssd-ad-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:388449c95b46911db750d33f187c8159b308ce04b35a81bedf3c30ace2037dc7
  • sssd-ad-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:7cd5572d0be4c327739616b89d28071ff13027487c4af80c3475641c1f4d1ebf
  • sssd-ad-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:3e98ab01999130acb7886dc71613b2322cd7c01a84531c977d7055d89bb3da4c
  • sssd-client-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:65ac77d2ba1f38fff2894616039794057298b55582ceb529b694b63a38dcac07
  • sssd-client-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:99855f1dc4540d657d47b70e1f7c668a87d962264388b82f0bb4639f0a94914c
  • sssd-client-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:6b58c52b2e483c4bd28b0e8e14f31e29ed9f7315946c315ae52508afe69f5511
  • sssd-common-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:ff1fac2aa93288ca6e8e9e42f1ae9f5c0900d181b8c5bf893e4a8f5ea291c557
  • sssd-common-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:8cdbfbfb2ed1f27dd9032472006c916a420f1be27214ad079648c5eecca2c7c3
  • sssd-common-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:c09c0856853d1098e86d9882f24eedd3fe721d873601387432baa62754ec3dd6
  • sssd-common-pac-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:755d23bcccadb2199cac79762df65c89a7951d734241e21a950a3260f4cbd6ad
  • sssd-common-pac-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:ca673b7c73e339582ecbbe85a36b3d5b72024d1cb1a417d20e767943fdd64ea7
  • sssd-common-pac-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:3a0c39dbb718769e990bb5aa2a820aa508a860ecefeb2664ce6a2747910cb5a6
  • sssd-dbus-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:1d7274df68ce814ef71a884321c2509fb0fc79fddbf36a865c942d1630376864
  • sssd-dbus-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:164245ef11e7d5569d3f890b62f4a469da09015fc0874c070a919f820bce9c7a
  • sssd-dbus-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:c2062c0069cabb057504f032b0bd0ae5463dafa0c5d4c1de56a9380fc56f0cb4
  • sssd-idp-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:4e61fcbe69eb213403e78f8d90e9a6622cf0167947546620699a91b6303ed278
  • sssd-idp-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:a99f3c1b26affc24975ac771d15e26fb30dee53d2b6d5fd9db23f5efe15a8863
  • sssd-idp-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:bffc1c0b55c08431913ac9ca5b028f770ccfa1aa1332133944a4c56f0eb31f48
  • sssd-ipa-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:3f13ba12e7f09f5bf665bf787ba7b5c6180c49e87355a2b7362ebe0419edc821
  • sssd-ipa-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:86d7ae70ccc1222258034925aaedf69ee8624a8f44f41ab00c19d5729d23b486
  • sssd-ipa-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:59d8c7989d24ef7b157552602907fd033eb2f6d6f2c6b1fe9824c193a98a6b9c
  • sssd-kcm-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:749150dc8ec5976b82fc476264c146a16e8633b2ace3ea85b05b36daea21a1a3
  • sssd-kcm-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:8f63fbe9f179809819c861b110a66fa4c8748fad8f7a0b6cb5af0ad3c21b9b23
  • sssd-kcm-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:abf9ad46e0f455728e74ab1ff9bb1f814e70ebb89df87cbfe1f363b0bd72066d
  • sssd-krb5-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:e16b15d400cc87dc1a40c9491bb02bcff8615a15131d9b9482bc22f1f3c17ac7
  • sssd-krb5-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:740652e42be3a7519ae0b2d1d6a1f9fadef3b72eb77a1959315af1af4677457d
  • sssd-krb5-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:f234ad8d13d1a079eff83e7ee780cad3e69104f67cbc72c6d2c6c35c142bca8c
  • sssd-krb5-common-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:35432cae3f90251c1a56ee64ee18388b146ac27ea0cec3a0bfeb2185189b4d2f
  • sssd-krb5-common-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:4f2a657d551319563c5a4e5f7e797d0a2cac60c3cbce311dc83e3512d2e70c59
  • sssd-krb5-common-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:055773b14fa0f02eb1fa0e6655fd694d1dc12886f5f2e88849287b24187ba59b
  • sssd-ldap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:9c9b11bb849dc1f164668d3f0b10c3a856dad3ebad3d374154e49cf6a7e10d82
  • sssd-ldap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:d06db46a54867d6a2c5ad02447b84b6fd2318966eb50882d65389c2d42bce52a
  • sssd-ldap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:ded33d628be7150c4d8104bbbd45b63d5d240081141a804d3257ab3f39b4e4db
  • sssd-nfs-idmap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:771243fa9cee968d87b9db6ab38144d91a73c5ee977d74dc52794a92907197fa
  • sssd-nfs-idmap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:e83cb3c182a71149b3268d4b2d5ce279bbe917e16202935065e8bc0342604b92
  • sssd-nfs-idmap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:b61956ffdfc8de99a478ea63e711879f6e10ba9af2cd50bdce6449e9c6cc4b91
  • sssd-passkey-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:a65bc2af5a8c7f8e329a43bbaf9967a21db9bb8ff9be98a54e933f6ce77cab22
  • sssd-passkey-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:5344368b761c4784d3173d96e73556078859145c97119b9b02d9f528ae07cc40
  • sssd-passkey-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:521cc42d369874346bc5e57bc430ccad76ad7242f9e960c1ec7bbe87d74374b6
  • sssd-polkit-rules-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:765eac8b078600f062bbab461a9d7c24f79e7dff80fb2edb6c65aa054661e124
  • sssd-polkit-rules-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:283da31f39a3fd5feb990df3db076686c48c612066eaf15ae9ab3e32277a913d
  • sssd-polkit-rules-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:c029d8f07c7139db3b613e5e1c379c9b1a67be3acc3dd769d46ce9e975d2f132
  • sssd-proxy-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:dac9a992eab17daa2ca16d94e084b2407206fb79b54021a341517645df5a7f44
  • sssd-proxy-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:45243ff02154a5acac9720e0776a3d3b0db64110a5932384a821d1fb980cb143
  • sssd-proxy-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:ee36fd0e6e709edc69440b34d453ade88ff9566ac1e62ff0e8098bc739933735
  • sssd-tools-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:2f96c644fdec30f90ab2908ad204d1b10bdd7910a4f28d23fb0d1af159b5e02a
  • sssd-tools-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:1ff1c9570066dd1f4c8640361db606daeee40f98bcc3ef6138e35c75440a9201
  • sssd-tools-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:2d4627f76a79908bf2ee0a8e36e434f1ce11f3cc7c1bf1a9302b120b88cb40f3
  • sssd-winbind-idmap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:d4ae18ae2b226ce22b458c271439777c10c4fdf74fb2c5f5398f07694e70b7e2
  • sssd-winbind-idmap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm
    sha:87a067efab69a81a2a4593c6599a7fe348219c09764f46ce1330a270554167d1
  • sssd-winbind-idmap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:83eae2095cd49b392e278b52acc2388c52934e44f6f35db9a5335ba431f28236
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.