[CLSA-2026:1788195197] sssd: Fix of CVE-2026-68744
Type:
security
Severity:
Low
Release date:
2026-08-31 16:53:28 UTC
Description:
- CVE-2026-68744: heap information disclosure in the NSS responder's sss_nss_protocol_fill_initgr() - the initgroups reply packet is sized for every group in the result set but never shrunk when entries are skipped as non-POSIX, incomplete or negative-cache filtered, so the unwritten tail of the packet leaks uninitialized heap bytes to the client
CVEs fixed:
Updated packages:
  • libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els7.i686.rpm
    sha:6a24eb2026d19380ff697231bd15653ad34236c4b304862fdb469046f698ae36
  • libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:7edddb0c7c8aa1b55385372ee666f511c33849e328188e6de70cf7369e304bd9
  • libipa_hbac-devel-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:6ddb0c5f29ad581f89ca59540c4f1696ecf70c41123d28ce92cc79c87bd08a12
  • libsss_autofs-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:a1ce13666c6a80d55460bd015ba6f565b66b30a60bbc5cc617a33033ac49e060
  • libsss_certmap-2.9.6-4.el9_6.2.tuxcare.els7.i686.rpm
    sha:d9f98868b9dff189117fc0c5734e588a02d7b1e239216cb912aca7d1de6cfd4a
  • libsss_certmap-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:a53ab6a3dac25caf1452b0540e67bb539b5b00d47c60551158ee714931719e56
  • libsss_certmap-devel-2.9.6-4.el9_6.2.tuxcare.els7.i686.rpm
    sha:25a1b077857c2360dcb8fa6f0002937b56d586147cbf020fb2b20139b78e83a5
  • libsss_certmap-devel-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:8348581d24d0575ac1517f184e7cc33d5c7bbd93bed352870fd0c2f23371797e
  • libsss_idmap-2.9.6-4.el9_6.2.tuxcare.els7.i686.rpm
    sha:392abdf7cb201cd03cccc754ae7036faac2ca0b6ffd9cff753c50a750b62f784
  • libsss_idmap-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:26fc653aa6e464be41fdcde320ab32185086cf51c6583e5e7563e723c9a64348
  • libsss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els7.i686.rpm
    sha:7d0d58f9dc952809b4ed9d23cb6e4f61f357aa7935d0a2cb481906548aa71e21
  • libsss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:9cafc1b2777685fe45199daef21559236c5fa63eb8e74e8e131592270e8984ed
  • libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els7.i686.rpm
    sha:48cd44bf923116c9dd2f026a98ce90ae4ed7e1c49e3d602b6cf40fc860945863
  • libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:db40730a0563b9d2927cee42016ba3402297ba2fc56983c4a3c0b3b5630f2f05
  • libsss_nss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els7.i686.rpm
    sha:6d508781ceb9f0d172a1e29b6c5bb59f0697690a3fd9c29c29d1e456dc8b3d3d
  • libsss_nss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:1fd5e8d394135c146bd0d382133e666d376d6fd1bafab86fdcaec44db08f83c3
  • libsss_simpleifp-2.9.6-4.el9_6.2.tuxcare.els7.i686.rpm
    sha:eb2e656e9c4d60852807ed76aebd7c4707e12f8a0d3556f65d49df1787ef65ed
  • libsss_simpleifp-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:11d1a42d72ef7192653119a894dff50622e403e165c0e26e187c111f499f2f67
  • libsss_simpleifp-devel-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:42503e7db5c4e6be42508e41708297523580659a6dd3d1c61dc898fd598f0709
  • libsss_sudo-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:fed0808ca4e11f623dc6ea2f0a70e712fb0ac5069a38f9c119f45aa660fc403f
  • python3-libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:8613baa025b17342101241a27c5220a5a76afc5135283ce432d1ec96a3f848d2
  • python3-libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:c0ff031f50a8c63d1bd9c1b6b4c7c440afa83ed545ceadff0b27069a56ddbc34
  • python3-sss-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:2309fef165f0f68953863dde58dd7937899410fbaf272bcec2b8d2aaf17831b4
  • python3-sss-murmur-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:1ecf62676a5cb72dc6dd2bbf347e3ad5e2f9c202b46a4775809c113199f9b058
  • python3-sssdconfig-2.9.6-4.el9_6.2.tuxcare.els7.noarch.rpm
    sha:5201decc3054f94df64a0fad60fb72ed24435141b1e0018d9679ef9b1c5d81c0
  • sssd-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:89c540b0db9c40ef301333a59b776bf98366ccc6e5bafd819016c377fee452d5
  • sssd-ad-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:fe2d179c70c475a6af7550a7d8ec0075a90bfdf864314aff36ca72c0bb4a149c
  • sssd-client-2.9.6-4.el9_6.2.tuxcare.els7.i686.rpm
    sha:33e57da2728a3b1bcb002a7de3d4812b7eb4e475b901a29513000c444a39e44c
  • sssd-client-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:88e9e8b4542c0c6f25a66c4878ec6e86994076f05693492033e30d9771e5bd20
  • sssd-common-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:17803c8963aae9600c6c9c0d48c70e514999a67a7cbd39b3411a99d073f7d22f
  • sssd-common-pac-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:6d7902d47b343acf6c06eff1ccc0b31e0123f42e38bccf6f44adfcdaac57684e
  • sssd-dbus-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:dd3585b5a1e47ff036eeb558d0515d29eb7d74a3da69e5239f76077a8aed088e
  • sssd-idp-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:13be0a483254ac6fdcf2dd8a87a991fe48ee5889f722038fcbfe289f2bbf906e
  • sssd-ipa-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:e8f7bdeaeff60d8b6663e081c0f7182fd2d0f13a95e0051d274c861706944155
  • sssd-kcm-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:a124283fe8aa6cf588d611d0e951943a5b770da61f4675ab92795148395e8a27
  • sssd-krb5-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:ce5736f07bf3d255e40d7d1681c5f8e0792ac9cceec9c17468e3f4bd3d20ed2d
  • sssd-krb5-common-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:dd3df199be24d7e734d5e1177a9a78de8414e43b043cb7e07d44d958d1b42a8e
  • sssd-ldap-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:6aa70f29697aa4acd665ee118803770e33a0582733f968b3f9386899d739ce89
  • sssd-nfs-idmap-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:f2f75e4e1aef7a79f92bd7549ab9f56b1bc3d87ba995124d6a0d65ab39ba9feb
  • sssd-passkey-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:64905665920b73c6ed0b158d974b4552a351792c0f195f7868004322ba4aaf97
  • sssd-polkit-rules-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:4d94e717ba711ff371ef3a274110303292a900440d37e3875cbb5f3b553f7072
  • sssd-proxy-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:b865d48775feebb9740c4095aae40b7077f231bd4fce2446b025827d1f569bc0
  • sssd-tools-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:3136b592666ca03e3fd1f8190dcfe44469d3cd9826947b2efb51196d5da2dc70
  • sssd-winbind-idmap-2.9.6-4.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:c70a9e37492c7f6f51827198163f248777516dabbaee47c1bce9e03cbf3aa30d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.