[CLSA-2026:1791809045] sssd: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-10-12 12:44:15 UTC
Description:
- CVE-2026-90462: deny access in sdap_access_ppolicy_step_done() when the LDAP ppolicy user search returns zero entries, instead of returning success and caching an allow decision - CVE-2026-90996: reject an empty request body in the NSS responder request parsers before body[blen - 1] is read
CVEs fixed:
Updated packages:
  • libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:2fc41dab43ac669b708f65e92b974c9aea8aa3a9bed0dc0c072e3f4248c8384f
  • libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:68d7696f9c7c6ff4aef2dbc9fdf1b2b4f832760bf6fd4b22a9fed281cc783d22
  • libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:875dbc80ce1dd37fa4743e08e2189a825523b0e7445136c3458f824d2aa23238
  • libipa_hbac-devel-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:21b5f9cbf582428ecf0ed25f220d1a79411270d33a01ca4c05de1531a8b0734f
  • libipa_hbac-devel-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:c85d7efebdd62fc53b1284e42f481b9afb5e6935667798cf9c61153aa88d9a10
  • libipa_hbac-devel-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:5899662512169578a91e84ff8cc0e98237846af6464d5835a9498253dc56c5ec
  • libsss_autofs-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:bb2f6fd45915b6b4185e827b417a77f210ecda83af6bdd1693654552841cd876
  • libsss_autofs-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:8a287d808bc04a216d02844d8a0435643c49cdde33275569bb109173d78913b6
  • libsss_autofs-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:11bd2d33d1b20362de04ad8b63628741e13ec7e35f0448762c7889ec70d45c20
  • libsss_certmap-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:53385edb59eafac53c03502645409bb858c32e3cedc76e7aff028c189d4307a4
  • libsss_certmap-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:d7d1cf38d3ec59cc5f7916f62155ec8332f072e1d9e75bc5a1832717159b18bc
  • libsss_certmap-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:93c2f9a061c583be272d8b0eb8ab045ca02de80aed26d8c35410128743d47f62
  • libsss_certmap-devel-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:cd7b62b9cc6b79b623cab659050c9ad77c99cbbf276b569dd53fed0f278406db
  • libsss_certmap-devel-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:0ca76a4a3b0910a07c61eb98b2dfbdea039b4ec219cb607f3fd3a0939239bf13
  • libsss_certmap-devel-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:e6d55fbd2fe2a37fe59cf5baf786e4639c291e55f15bc82c96b4eac553877a27
  • libsss_idmap-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:3d07af1bb1ed5fe9673c971a85cdacae5702879cad9a2928889b1f78a994955c
  • libsss_idmap-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:6e33e219af11763711c272d4ee4d0bd75194a030121cec2f68c6ed68db66ab4c
  • libsss_idmap-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:5c815b60ac2618cde4f6d3b0c1bb7019c2d6116e42042b853a9806e73d021747
  • libsss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:9dc82541d69e2bdd736e7b8417dae1ea6ff8f690deb4beba4aa4b8fbb1365377
  • libsss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:d8e376858a6bd00b0a9d238ca3ac404c23e3a14c36e4f14f1f78e7a839cda69a
  • libsss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:9a9a926c7a9014bd20ecb6056cfa6687dd10d0c8057386b4e8a7672a89a7118e
  • libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:076555ac417fffae47e3a954717c2d234c0627734df37e332c9be2454e0927dd
  • libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:c98c20337a2c6d0569ae210520ba9c44a8582a4f39c291044e8ce7f9e79eff81
  • libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:ee82001266210b68b8ff0330ea99a89a07e9150c8fdf25e84e12e2c81bd6e8cc
  • libsss_nss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:019b80f2d7805e2f3015a82c0d624127268abe63662a313a4a297080908b3974
  • libsss_nss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:cf873993272a97593a7700f6505a87c465f2b96e6aa2dadd325e49258a4b40b3
  • libsss_nss_idmap-devel-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:b548d04b35a79bc94d45089abf5154b934b3eb2778944fec3c08c7421a686562
  • libsss_simpleifp-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:131fde3b0678d74f09e84c74b34327dbfb5122a4c7dbe8bfe2b96dca02bd5dbf
  • libsss_simpleifp-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:5add65e53f7958771e68342a1dbfbe2c0a07f1292c25456a92faf82200a1e2cc
  • libsss_simpleifp-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:135bb7aa2ad10a41ad1ca05aab266f53daf4ac160c3115d3a2dc1198786b9fa6
  • libsss_simpleifp-devel-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:7ea6b41e632da7fe1f42bcdb5f0694c8f03d020c094bde00e0c37426dc72a4d6
  • libsss_simpleifp-devel-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:9c65a235eb50a4827f3f8fa8f9a9aaf1995fb0f38826500bc11f1614c3cb9bd3
  • libsss_simpleifp-devel-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:8d1dd975193465d47a2d3d3413741daeb3d77ee3516f02903fb85ce364116004
  • libsss_sudo-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:bfb72ac751787b61c193d993153706cb853d7272c76ae42be338af7d3071d1d0
  • libsss_sudo-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:2048db792403666c1313e0a62520c096fd67171a83eceef577f20f1dfa4bd147
  • libsss_sudo-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:8558177756bc96c0359ede3565107ee90c5dc147670276d55663e6106b3b7da1
  • python3-libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:51b239afa06af2af4e204241dc9f0041faf97a2b52cc0eee32756419b0aef826
  • python3-libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:a5f591321190dcd61d4189a9a72d68eed5c3a3142fbf9786d2019cd390bf13ee
  • python3-libipa_hbac-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:6ab4edb0682bb3b88fe4d3aab1f2b70296396c1ec29ff82c215f955e019b4802
  • python3-libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:aa9e7abcda2d2c7b96d81145442d5cff82ab172a82bab7078c24bfced307ddfb
  • python3-libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:801d6dd348d8709814b0d6c8bf0ef1a626ebe263679f3377a206c744185097c9
  • python3-libsss_nss_idmap-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:ab969857d2f0db57fa9eedaa523783dc70d4bca12d8315d670717a17c970e471
  • python3-sss-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:601be041c47c0b88ee2125e86ea4131c518505cc6cbdb9ff95935b7cab4e5c2b
  • python3-sss-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:9e1fea001c38439349f2d4f142dec55aa59553a05d31577fc64a8b7306207ae9
  • python3-sss-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:afba547ead969b3f9c77e8ea5fa4038c4d89341842595e0f48042daa8b1aa26c
  • python3-sss-murmur-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:5664d0553715895f48454dc040df131a7b9557c9eefa8cc4465ea32f7b14bc2b
  • python3-sss-murmur-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:f9eff6683f6f72c9c1d9320ddfd1ab5159f605e65e71ee8217449afe2f176524
  • python3-sss-murmur-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:f2ba18a9d27402a48f0e9ab632f44dcc6fb840ec93639fcfff8ba4f2a6aaeddb
  • python3-sssdconfig-2.9.6-4.el9_6.2.tuxcare.els8.noarch.rpm
    sha:d89b66614243013fc0a5d8fca5e6c12d9b5c2dbe646e6098c2995caa25fe1133
  • sssd-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:259c720ea301514c4263796ead13e39c204061e88c5758f02827fcb7de6c4f12
  • sssd-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:90f97fb3472aaf3cec4e12b61645e3fa53c3bdc9bc818c71da3089ce1a92dfd5
  • sssd-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:d5d4a0056602ab54a4396c8b98df91ffa5429a0f58f9ea40bb87d6f9825a3e80
  • sssd-ad-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:bec13ffca636878e34924a31ae5d910ebf2f05e47b37a823b13310d1fd244319
  • sssd-ad-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:549879082a5b819dd60c075cdfff65bd3c8bae2f5fe6a64533ae2ef28c8e7079
  • sssd-ad-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:a6c4250a3dae1e250863b0196c8760d5f3ad8ecc826860933ea5b098aa6a11f4
  • sssd-client-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:c2ca5f0dffd9c698ea8067f20d42a9138cfd2dc065dfe8c4a457ccbc928ce374
  • sssd-client-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:c6afcb7abedf79ea913546218d169b86efe27308fbf73e87ee8e7edeb8b2343e
  • sssd-client-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:7b95dba34cee0eb08678dd43920371d4aa67780ce493a6900bc929d7febbbf62
  • sssd-common-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:9f1d7a4f5313500629179b089f5d454d474319ade519cae165e8fda1a5d398cb
  • sssd-common-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:54a24935adc3bdcd80e203f8f4ecd2623b243cc34f83da732c09a879af53246b
  • sssd-common-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:3165af79798cfe0d516bb9323a5510b5a930c474184c3c57286e3d140f57126c
  • sssd-common-pac-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:5548a0087b422e23d6eab9a04133bf64a18eb6084035aa2c705568fad0e49890
  • sssd-common-pac-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:4fd043185cbdd842dbca29b87ddc041f8b145266624389ababa2307e29a6dcc6
  • sssd-common-pac-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:10a9b8dd12d7643bef6ea442cd3627778b344b6d1b271cc9f52d36d0a9568415
  • sssd-dbus-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:55f92e4d251cfafb3b5fa2f4d9fc56d580ef18d3fd3bb402057fb55c0f9e1dee
  • sssd-dbus-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:0cc284365c82e81cb8834226b976b366e45865846e9167da07a66eebac323ab4
  • sssd-dbus-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:157866c03ecddddab797e3f4749e9166bf0db8041d6d4213f81d18d1ad74bba5
  • sssd-idp-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:ea15a6077d6f335af457d619640206b824485c7c8221d9e670a6f1089b8a0f97
  • sssd-idp-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:e4b05ba957a28d8ea84d6258ed4f6716b77d4ba825400e1d32bab3ec6aa03e5e
  • sssd-idp-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:8ac00636bbcaf140cd7ddc0131406e5084026e4241a044536356ff7626cb62b8
  • sssd-ipa-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:e0b7e02ba5743cbbc0cd70669eea349924cd912290e9bdfdefefe14f95132945
  • sssd-ipa-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:67a7347deea3f655a717cb413e564a4912dde71baaba4a1ded9f5bb70957d8f4
  • sssd-ipa-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:ea38e6261e69ace7b7f1a51e32329c1bdc843145b7ac29ab6064caff81b8602e
  • sssd-kcm-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:84bb3803d25ac11c8c62a949eddc95ff7db4c1ca77496248464294221cb17858
  • sssd-kcm-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:12217ff0c50169ca7bfbcd41e227515dced1d581b101054958de8d96e7582e4d
  • sssd-kcm-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:c591d1b0a22d51eef0c1e34225d1e0b11c496c75ac54be33c96a77e1e27b247e
  • sssd-krb5-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:b748d5c500c8d81a6466ac3dff96aebe62b03188af57a4108f62df9ddc3ee9f4
  • sssd-krb5-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:f0bd0d82ca552478f5d3222d589030c2af450bbe354f840c28466b9f5c8997c4
  • sssd-krb5-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:95d3319878e3321612822ea1450e3b159062847c76fe10c895b7f8561341d651
  • sssd-krb5-common-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:04b77898ed05463ca73011bcf42d253382c0e796cd35db09040455770154080b
  • sssd-krb5-common-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:fa5d195e4f69eba966f67e0a9d59ecad5e74e2ee62e78e3b7cb12d5856b72c27
  • sssd-krb5-common-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:45d5ea1478867fdf68bd80680737188a5a912aa67f14b69a2f6e299709a90f9f
  • sssd-ldap-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:1997d8c506e8dc57fbe7ace9f08b486a093e02bd3ce244c1e1b0606441683100
  • sssd-ldap-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:5df46c1eaa7c3d20a00afcca66e1be19b7492e182caefa3d4ad7cc6d8126bfe3
  • sssd-ldap-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:1a19a63c2c2d7a100cf38c016ee7bb7a0989712502d9cd1e18b6fd4576e6ae9e
  • sssd-nfs-idmap-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:ec4ce4b7335da90d38f301261401f51e39a1f5f00a92f274229480eb3b941a99
  • sssd-nfs-idmap-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:a456c1d6a9f43a304f07ea17abb6da4745794da564f5e63fdfdf56bdb8233734
  • sssd-nfs-idmap-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:c5edd1f146fc3f538c2b279c93c0265395af1076809c5349c2bd19b1e5b51aa8
  • sssd-passkey-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:88305b0a384e3a8a5276a4bde5669b0f412327dc24a601aee88fd90aab9441b4
  • sssd-passkey-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:25ff3c85e0774aab5a48bd0be8ec36f4544dc54759280b702a83af718403faf5
  • sssd-passkey-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:20dbaf360dca23c482a4dfd713d249d88ac390362704a0b8caa441a3f88c3c76
  • sssd-polkit-rules-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:82a030a2bd9672db8ca8a3e9a3b691708bd5e681f4d94ef7db7fc425a9248dae
  • sssd-polkit-rules-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:a3e6044ffe9ed05110c6a582e4c1dfc6674d0f61fe52e679b5e0290038c30d72
  • sssd-polkit-rules-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:e17779a3b0cae4c2524ae3fd90e302c5e404623f9075829a5ba58f3331bac5ce
  • sssd-proxy-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:3625f023d14d6d6b8a529fdac8c6eef13978fe0edd71d9d165a36452074dcc96
  • sssd-proxy-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:0cd64ccc580f05293868a0cec94a18f9cf8935535d334f25328de1096790aadb
  • sssd-proxy-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:ef3e742b481b954846a853dd331049e6c4023dd4a0c90654191abbd823fadf93
  • sssd-tools-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:00768b213665d8773f6501552048d6ebd053e82c630b1dcf00fc5c6766f0f230
  • sssd-tools-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:9108d6596b6c1546a294df1a721a7180abe90ef0eb722d59434108755ae0df70
  • sssd-tools-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:273966b9b85f2b014f73a3d713acfdf6b887124e1af5fd859348f9a51f9aa7b3
  • sssd-winbind-idmap-2.9.6-4.el9_6.2.tuxcare.els8.aarch64.rpm
    sha:493ad53438760af1e7e735ad023a4d5708ee09654008319f3f720383c6b7470d
  • sssd-winbind-idmap-2.9.6-4.el9_6.2.tuxcare.els8.i686.rpm
    sha:f28b1d5f3e9d650f3685ee2df68f0adbf2450f2e22f91ed334729d748a00a72d
  • sssd-winbind-idmap-2.9.6-4.el9_6.2.tuxcare.els8.x86_64.rpm
    sha:c69e37e2057b810f7fba3903597b256f64affaad32a38f8ede798be19e8d28f3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.