[CLSA-2026:1787127601] sssd: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-08-19 08:20:12 UTC
Description:
- CVE-2026-12610: dereference the PAM context's certificate-map context when the p11_child response is parsed instead of caching it in the request state, fixing a use-after-free when a domain refresh replaced it mid-smartcard-authentication
Updated packages:
  • libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els4.i686.rpm
    sha:a527024fb8833b3503575495cc93c9e2a5af11fbf905c6600322c5d86eb361e0
  • libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:ab411156b19a2e618e0ea0c29e6cc7b2bd71a2db2b50af4102b4532fe4849615
  • libipa_hbac-devel-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:f122890d237b503ad6c0e588c34c30be1f3733ae35153b295982672976fda17b
  • libsss_autofs-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:2efa48ae090f22daa48697242d7d2228c0b9b4719622c5a9df26c05ffba70b28
  • libsss_certmap-2.9.6-4.el9_6.2.tuxcare.els4.i686.rpm
    sha:efa3f0bd6877a9a29dd6bea4a2902af82bdaeb2224cb95ec14ca5eef9e2ba085
  • libsss_certmap-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:e756205348fd9359aa50e4fc7bfe02cdc358c55ddcacf8f88eb9713c294abb74
  • libsss_certmap-devel-2.9.6-4.el9_6.2.tuxcare.els4.i686.rpm
    sha:f2cfe7b97e966206e7922c6b4bfc4b2c6b9d500b4ac06fbf5b251514edcbec4d
  • libsss_certmap-devel-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:796c7b0db06277dad09bffe71a61d567a1c2b8d49415773c1691a7f64133c776
  • libsss_idmap-2.9.6-4.el9_6.2.tuxcare.els4.i686.rpm
    sha:9e4a48edd6196ff21d5ed9e72ad69dc7746474802fa3c99a09be014b5d8f5e20
  • libsss_idmap-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:35bef9dfdc7c2f1c126ce0d1fe0706ceb45e9d1b2922d516bb2a527b5839550d
  • libsss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els4.i686.rpm
    sha:afb0223b10b88c6ea6f9563ccd0a30027e277af5025fb4c31b1fd6355a4c8a70
  • libsss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:46a55878635db91891fda6f0d0a7005a2cf0787aa07089c00ebb3e382f9f0bf8
  • libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els4.i686.rpm
    sha:149d443baaad0b5c018c417f2006f5899fd3f73a8f99064ecb1285a1a34f0a9d
  • libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:19fdb1b2aa22aaba8a9854289bc7f83d83af72cadc769992fc739d7c48e3a464
  • libsss_nss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els4.i686.rpm
    sha:c76d5706a5f077f12742eefec3d0f33099fa99a672ecc3a29649f3e426e95a3c
  • libsss_nss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:bd70b68e48e561175e4fb50763d600af5e4e8b5deb186b5a747010920c6879f7
  • libsss_simpleifp-2.9.6-4.el9_6.2.tuxcare.els4.i686.rpm
    sha:4aec49116e5172ed64662d32054fce7aa0d9f4b5fffcd2e542f80625a979bb83
  • libsss_simpleifp-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:2fdefe4257e168e57cfcdcd8ed0bd40ea3773a7d53aed69da76bd76b2961bc29
  • libsss_simpleifp-devel-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:445551f61859aafca1de57fadd3f0546fd4ecd8d54b3327507cbbe87dba52d1d
  • libsss_sudo-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:569067e798a2f5e1482df50d90228bab4885c6d425f16f5994c874724f778b2d
  • python3-libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:e111a2468709986431feeb5ab7723336dd327348e4f5e459a669d345cc0e2ffb
  • python3-libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:9333204fb5c2ef700123ae19c2d07c488eae4c454292c2e410ef687ab7f35566
  • python3-sss-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:72680dc731b994c539afdfe3ffa692b68b93579ae5aa500bc50b225bff881c57
  • python3-sss-murmur-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:922ef72d5eb1dab32ae68c525e90959cae9ce01397d176986e9b4524a04e82e2
  • python3-sssdconfig-2.9.6-4.el9_6.2.tuxcare.els4.noarch.rpm
    sha:735604b16f799102c312ee64c0f16f3e4d230dd733683cbb4e5aa61d386e224f
  • sssd-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:e0bace43c962f5c897e7f030f88414857384a9ca6bacdda44347989a275845f2
  • sssd-ad-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:2b7f86a052ad4c1b1b7d28fb94ef275630e0acde109c6acd269afe98790dd2db
  • sssd-client-2.9.6-4.el9_6.2.tuxcare.els4.i686.rpm
    sha:ff0d76a5abb3accfade29cbc5152c1ff2a955df568b2019e6c27ed84e5711adc
  • sssd-client-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:6b422b1698458f8798a441510faa1025077d9d26012ae54d7fe5dc29a08db012
  • sssd-common-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:d4c95e17bc4c70863c701d74a4f8ffd22fd068644de24e11bf9327ce1ca40c9d
  • sssd-common-pac-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:df386f8e8f62169e05f1a8ac8b798313221f84eb11d88e72a5f80f26951f1709
  • sssd-dbus-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:d4d1efd1cf19cbe6f4bf5be22432cd06c7d219765d81ccb73ba5e67b83afe0b8
  • sssd-idp-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:bde5cf95d7b81cf72b7a002bb5fd6f1510e5ac002bbf67412679ae1088388ebb
  • sssd-ipa-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:0ddaa8d70740fa94af155dc130d0e399202006141b8e6268dff0bea3040ce1e8
  • sssd-kcm-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:dd8767aa1a6725d114404181601d66f3d76ca21764aa296779a77b3b59faf6c2
  • sssd-krb5-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:101e36f6003e158a806cf30199ffc1aec7241e8bd6daa25064119a6bc7cdc502
  • sssd-krb5-common-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:078aa0e68efb177335f3084a0d11904d5a6bdf625e28184bdccdc04f77b8de05
  • sssd-ldap-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:40b48d27e010ec1558867be26c0c53442513042b4ce5621cd06b3932d95c1d97
  • sssd-nfs-idmap-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:8ce9cb919ab9dff0ad8f5eef297ec74d6e3918f30acc7e25ae13a27a555e5afd
  • sssd-passkey-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:9eaffc87fb42c4979e2971075201df2b5943400144e259f7fe77dfb9e888b8a6
  • sssd-polkit-rules-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:1a5e7033bd91c40dee343d01a3d7e7c33fc4b9ef9a632271562ecfc00ffe1f61
  • sssd-proxy-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:370cc029ba6411072d2c15508e138f3c88941f57ae2f5387a3a3991c5798e4a4
  • sssd-tools-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:b7c4f9ea6b7e8949bf3316ecd1d0feeb9eae5c070d38f72ed2d2cafee248e56d
  • sssd-winbind-idmap-2.9.6-4.el9_6.2.tuxcare.els4.x86_64.rpm
    sha:6bffdfcc609111c4e80a272aa218ea46f53a35103b8ee49e0bf201f94781aaf6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.