[CLSA-2026:1787314091] sssd: Fix of CVE-2026-68743
Type:
security
Severity:
Important
Release date:
2026-08-21 12:08:22 UTC
Description:
- CVE-2026-68743: validate auth_token_length in extract_authtok_v1() to prevent an out-of-bounds read from a crafted PAM protocol v1 request
CVEs fixed:
Updated packages:
  • libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els5.i686.rpm
    sha:6cc837d0ec0d9a129ab1523624fa326d293e3ed25c56157034fd5f45567aa5f0
  • libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:9cb0b58b8a678f0199026a9eb571860c4623ab4f74ec229d0b58f127a3fd623a
  • libipa_hbac-devel-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:6da878dcc4274fa45613b35518d1a7ab639997ffd26346bec7675a406dc67415
  • libsss_autofs-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:ffcf44c6018937cc558ccf89c35dae468e543f19ab04e2f049ddd95f92d57a41
  • libsss_certmap-2.9.6-4.el9_6.2.tuxcare.els5.i686.rpm
    sha:4a3cb89a4370c88bd791b17d256eaa39056a144ae0777be81eeabf568aad4267
  • libsss_certmap-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:c43b0b0c7160e50b4bb32295848ed2c43762f4574b63ecd8f1b6e74df8b87033
  • libsss_certmap-devel-2.9.6-4.el9_6.2.tuxcare.els5.i686.rpm
    sha:fe95bb97f5b09b6a0bd43605c2bd015f518e2267f2592e478277d28481187c71
  • libsss_certmap-devel-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:23ed91d0ded3c1ee64add245badd80da9b0fadcca410df3a9c1c09adcc98ff65
  • libsss_idmap-2.9.6-4.el9_6.2.tuxcare.els5.i686.rpm
    sha:3ced8e85aeccfd84d07a0194486c1283572c74a457d791e6e9ab7e8a7714bc75
  • libsss_idmap-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:51e325b0c1460e7ba410962e12337d9ab9eb863a67b3b338dc97d28ee9e5030a
  • libsss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els5.i686.rpm
    sha:4e59490a833f7dc6e56af38e05caed5008e664ba19cb0211c070b2817f67f227
  • libsss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:d475b293e64274b4d22c5f95e683cf57a4404422250d9da67fd80fb9f350dc51
  • libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els5.i686.rpm
    sha:43bfc2bb2f93cdc05432d7b4da103021e237d40885637214722e98134d4f73df
  • libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:f59c2033c459b0635bc92c6b0d1baa949fbe08023164bf484bd4fceb6c011228
  • libsss_nss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els5.i686.rpm
    sha:07da4010ec0c45037d613dfb2f185fe3448e25b7196ac86ff23d0174291de15b
  • libsss_nss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:8257be8448827d05cc2ba85b63d31a8f0c32823a1f409854058c8a7b90f38884
  • libsss_simpleifp-2.9.6-4.el9_6.2.tuxcare.els5.i686.rpm
    sha:7bd35eccd19eba448203a025605ca2693219671fd51d5744e840b8de95de274f
  • libsss_simpleifp-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:0c20b8878d6fc0c6c8cf6bddb6ad89cafb31bd4243bc8612f4f8dd52ee538317
  • libsss_simpleifp-devel-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:9abfca6d8d85b0262ec42496b0c280c0666408a25da9de75ba9e1ae46d1b6705
  • libsss_sudo-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:84a730e68a822b0d7394ccc045a3170f8d16242117351000b6e4ef3bb4d82781
  • python3-libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:0d3c1c84745e09871eca1567ecd9d0654446fcd3f6791954941835f072dc3e1d
  • python3-libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:2a34459a5532ac6eba129338dbe41cb86442a61be0d342d1dc06efbcaad7d95a
  • python3-sss-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:d2e719dfb93213a08ba2091b68cb2808bf32e50549d9267ad49a80360953462b
  • python3-sss-murmur-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:9a3c8bc316b4c83484235efdfda2c44563e92b2abade3a0a1622d5b6bc98448c
  • python3-sssdconfig-2.9.6-4.el9_6.2.tuxcare.els5.noarch.rpm
    sha:b1e76e4879ea34f1b134e09f8b9420b489c6c4bc749294387eb512a0d245195c
  • sssd-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:4d2fb090061d29a9fbb104230cade8f4c06ddfb9311b916ed176994da367405a
  • sssd-ad-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:cf0b4724989ac2c2995267e828b0d48640855d80fc3f7794bb06ac5e34e213a7
  • sssd-client-2.9.6-4.el9_6.2.tuxcare.els5.i686.rpm
    sha:84464b8e056c20f768d3659142fa3d57bfa462ff2e08e333f2100c6bc373640c
  • sssd-client-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:263a595501d5ffbc2343d8bbca5df53ebcf7750fe323edac9e8e8d2be9ccdce6
  • sssd-common-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:623e37e90a60f2182ae4d12cb4a3e130ff47bb62b3d3cb12fc9ebb8f94abb9fc
  • sssd-common-pac-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:9252224bbd3def1db7fd72e6273b717f476127dd068981172d0f2a55cde24a83
  • sssd-dbus-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:fe30cc5d24e3eb0c2ab1ee01761e68694bb8b5cb63c26b707dfffb13220a31bb
  • sssd-idp-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:0e02b0cf35b8c1325678ef0e7f36789e697f689ccee5855329b79b4fca7a20b0
  • sssd-ipa-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:3424a093db9d12e3f9e6de95b1e641b7a38ffece00f4ac3842fd1554a659154f
  • sssd-kcm-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:271a87af1d78cf6422b6d120dfee852af08f33c8d83afff27a6c903b4d6a4b87
  • sssd-krb5-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:3fdc34c99c379f0e62adebdaca5938fc906e788653b9bbf78f4f0b5f37826326
  • sssd-krb5-common-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:6ec839da506e0464b98a7722c922d91c6bd6da7dec862f397c67e4e9a4431314
  • sssd-ldap-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:c2577ef2a0a63a5e38ef291d9b9da12c982ca40430599288614f269a383731e3
  • sssd-nfs-idmap-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:0681271fe07df20b3fe00f070d40e3d9377784f7b790d9ad46968a4726423602
  • sssd-passkey-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:979b31ce8143b65163e5de642228a0d328b3d25298f7fdda508d662f9864a8cf
  • sssd-polkit-rules-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:c09f61ffadbd2283790902b37644b7dabb0cd78761cb906720384d397265795f
  • sssd-proxy-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:4268b74e2d74cffca9c72f0b48d324c6c14a0c634fcb501e15394a935d43dd05
  • sssd-tools-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:6b763a9f59a5d1f1bb83779f2404947daa2f5b160e003f07b81cc23a48543df3
  • sssd-winbind-idmap-2.9.6-4.el9_6.2.tuxcare.els5.x86_64.rpm
    sha:f87aefb7d0b3bd9a9d036622e16bd7d2e08733b021065442b462a88cdeccd9c6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.