{"id":"CVE-2026-12610","aliases":["CLSA-2026-1787127601","CLSA-2026-1787894517","DEBIAN-CVE-2026-12610","EUVD-2026-40268","GHSA-f953-7679-xc38","OESA-2026-3018","OESA-2026-3019","OESA-2026-3020","OESA-2026-3021","OESA-2026-3022","SUSE-SU-2026:22999-1","SUSE-SU-2026:23061-1","SUSE-SU-2026:23110-1","SUSE-SU-2026:23132-1","SUSE-SU-2026:23171-1","SUSE-SU-2026:3368-1","SUSE-SU-2026:3394-1","SUSE-SU-2026:3401-1","SUSE-SU-2026:4456-1","SUSE-SU-2026:5079-1","UBUNTU-CVE-2026-12610","USN-8672-1","openSUSE-SU-2026:21507-1"],"status":"published","title":"Sssd: use-after-free crash in sssd' 'sssd_pam' process","description":"A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.","severity":{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00123,"percentile":0.0209,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-825"],"published":"2026-06-30T08:27:01Z","modified":"2026-11-11T09:47:41Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libipa_hbac","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libipa_hbac-devel","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_autofs","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_certmap","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_certmap-devel","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_idmap","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_idmap-devel","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_nss_idmap","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_nss_idmap-devel","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_simpleifp","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_simpleifp-devel","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_sudo","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libipa_hbac","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libsss_nss_idmap","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-sss","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-sss-murmur","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-sssdconfig","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-ad","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-client","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-common","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-common-pac","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-dbus","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-idp","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-ipa","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-kcm","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-krb5","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-krb5-common","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-ldap","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-nfs-idmap","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-passkey","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-polkit-rules","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-proxy","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-tools","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-winbind-idmap","fixed_in":["2.9.6-4.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libipa_hbac","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libipa_hbac-devel","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_autofs","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_certmap","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_certmap-devel","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_idmap","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_idmap-devel","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_nss_idmap","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_nss_idmap-devel","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_simpleifp","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_simpleifp-devel","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_sudo","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libipa_hbac","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libsss_nss_idmap","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-sss","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-sss-murmur","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-sssdconfig","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-ad","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-client","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-common","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-common-pac","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-dbus","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-idp","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-ipa","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-kcm","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-krb5","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-krb5-common","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-ldap","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-nfs-idmap","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-polkit-rules","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-proxy","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-tools","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-winbind-idmap","fixed_in":["2.8.2-3.el9_2.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sssd","fixed_in":["2.13.1-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"sssd","fixed_in":["2.6.1-25.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"sssd","fixed_in":["2.2.2-25.oe2003sp4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"sssd","fixed_in":["2.10.2-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"sssd","fixed_in":["2.8.2-9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"sssd","fixed_in":["2.10.2-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"sssd","fixed_in":["2.10.2-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"sssd","fixed_in":["2.9.5-slfo.1.1_6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"sssd","fixed_in":["2.5.2-150400.4.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"sssd","fixed_in":["2.5.2-150400.4.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"sssd","fixed_in":["1.16.1-7.76.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"sssd","fixed_in":["2.10.2-150700.9.37.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"sssd","fixed_in":["2.6.3-1ubuntu3.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"sssd","fixed_in":["2.9.4-1.1ubuntu6.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"sssd","fixed_in":["2.12.0-1ubuntu5.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"sssd","fixed_in":["2.10.2-160000.4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_autofs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_certmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_certmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_nss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_simpleifp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_simpleifp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsss_sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-sss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-sss-murmur","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-sssdconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-common-pac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-idp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-kcm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-krb5-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-nfs-idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-passkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-polkit-rules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sssd-winbind-idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-4.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_autofs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_certmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_certmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_nss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_simpleifp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_simpleifp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsss_sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-sss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-sss-murmur","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-sssdconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-common-pac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-idp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-kcm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-krb5-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-nfs-idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-polkit-rules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sssd-winbind-idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.1-1","2.10.1-2","2.11.1-1","2.11.1-2","2.11.1-2.1","2.12.0-1","2.12.0-2","2.12.0-3~exp0","2.12.0-4","2.13.1-1","2.13.1-2","2.13.1-3","2.13.1-4","2.8.2-4","2.8.2-4+deb12u1","2.9.1-1","2.9.1-2","2.9.2-1","2.9.4-1","2.9.4-1.1","2.9.4-1.1~exp1","2.9.4-2","2.9.5-1","2.9.5-2","2.9.5-3","2.9.5-4","2.9.5-5"]},{"source":"osv","ecosystem":"Debian:13","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.1-2","2.11.1-1","2.11.1-2","2.11.1-2.1","2.12.0-1","2.12.0-2","2.12.0-3~exp0","2.12.0-4","2.13.1-1","2.13.1-2","2.13.1-3","2.13.1-4"]},{"source":"osv","ecosystem":"Debian:14","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.1-1"}]}],"versions":["2.10.1-2","2.11.1-1","2.11.1-2","2.11.1-2.1","2.12.0-1","2.12.0-2","2.12.0-3~exp0","2.12.0-4"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-25.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-21.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-21.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-22.oe2403sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-25.oe2003sp4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-slfo.1.1_6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-150400.4.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-150400.4.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-7.76.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-150700.9.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-150500.10.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-150600.3.58.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-150600.3.58.1"}]}],"bundled":19},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.5-2","1.13.1-2","1.13.2-1","1.13.3-1","1.13.4-1","1.13.4-1ubuntu1","1.13.4-1ubuntu1.1","1.13.4-1ubuntu1.2","1.13.4-1ubuntu1.5","1.13.4-1ubuntu1.6","1.13.4-1ubuntu1.7","1.13.4-1ubuntu1.8","1.13.4-1ubuntu1.9","1.13.4-1ubuntu1.10","1.13.4-1ubuntu1.11","1.13.4-1ubuntu1.12","1.13.4-1ubuntu1.13","1.13.4-1ubuntu1.14","1.13.4-1ubuntu1.15","1.13.4-1ubuntu1.15+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.15.3-2ubuntu1","1.15.3-3ubuntu1","1.16.0-5ubuntu1","1.16.0-5ubuntu2","1.16.1-1ubuntu1","1.16.1-1ubuntu1.1","1.16.1-1ubuntu1.2","1.16.1-1ubuntu1.3","1.16.1-1ubuntu1.4","1.16.1-1ubuntu1.5","1.16.1-1ubuntu1.6","1.16.1-1ubuntu1.7","1.16.1-1ubuntu1.8","1.16.1-1ubuntu1.8+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.0-4ubuntu1","2.2.2-1","2.2.2-1ubuntu1","2.2.3-1.1ubuntu1","2.2.3-2","2.2.3-3","2.2.3-3ubuntu0.1","2.2.3-3ubuntu0.2","2.2.3-3ubuntu0.3","2.2.3-3ubuntu0.4","2.2.3-3ubuntu0.6","2.2.3-3ubuntu0.7","2.2.3-3ubuntu0.8","2.2.3-3ubuntu0.9","2.2.3-3ubuntu0.10","2.2.3-3ubuntu0.11","2.2.3-3ubuntu0.12","2.2.3-3ubuntu0.13","2.2.3-3ubuntu0.13+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1ubuntu3.8"}]}],"versions":["2.4.1-2ubuntu4","2.5.2-4ubuntu1","2.5.2-4ubuntu3","2.5.2-4ubuntu4","2.6.1-1ubuntu3","2.6.3-1ubuntu3","2.6.3-1ubuntu3.1","2.6.3-1ubuntu3.2","2.6.3-1ubuntu3.3","2.6.3-1ubuntu3.4","2.6.3-1ubuntu3.5","2.6.3-1ubuntu3.6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-1.1ubuntu6.7"}]}],"versions":["2.9.1-2ubuntu2","2.9.1-2ubuntu3","2.9.2-1ubuntu2","2.9.4-1ubuntu1","2.9.4-1.1ubuntu3","2.9.4-1.1ubuntu5","2.9.4-1.1ubuntu6","2.9.4-1.1ubuntu6.1","2.9.4-1.1ubuntu6.2","2.9.4-1.1ubuntu6.3","2.9.4-1.1ubuntu6.4","2.9.4-1.1ubuntu6.5","2.9.4-1.1ubuntu6.6"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.1-2ubuntu4","2.10.1-2ubuntu5","2.10.1-2ubuntu5.1","2.10.1-2ubuntu5.2","2.10.1-2ubuntu5.3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.0-1ubuntu5.3"}]}],"versions":["2.10.1-2ubuntu5","2.10.1-2ubuntu7","2.12.0-1ubuntu3","2.12.0-1ubuntu4","2.12.0-1ubuntu5","2.12.0-1ubuntu5.1","2.12.0-1ubuntu5.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1ubuntu3.8"}]}],"versions":["2.4.1-2ubuntu4","2.5.2-4ubuntu1","2.5.2-4ubuntu3","2.5.2-4ubuntu4","2.6.1-1ubuntu3","2.6.3-1ubuntu3","2.6.3-1ubuntu3.1","2.6.3-1ubuntu3.2","2.6.3-1ubuntu3.3","2.6.3-1ubuntu3.4","2.6.3-1ubuntu3.5","2.6.3-1ubuntu3.6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-1.1ubuntu6.7"}]}],"versions":["2.9.1-2ubuntu2","2.9.1-2ubuntu3","2.9.2-1ubuntu2","2.9.4-1ubuntu1","2.9.4-1.1ubuntu3","2.9.4-1.1ubuntu5","2.9.4-1.1ubuntu6","2.9.4-1.1ubuntu6.1","2.9.4-1.1ubuntu6.2","2.9.4-1.1ubuntu6.3","2.9.4-1.1ubuntu6.4","2.9.4-1.1ubuntu6.5","2.9.4-1.1ubuntu6.6"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.0-1ubuntu5.3"}]}],"versions":["2.10.1-2ubuntu5","2.10.1-2ubuntu7","2.12.0-1ubuntu3","2.12.0-1ubuntu4","2.12.0-1ubuntu5","2.12.0-1ubuntu5.1","2.12.0-1ubuntu5.2"]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-160000.4.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"sssd"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift ai (rhoai)"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 5"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:97077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-12610","tags":["vdb-entry","x_refsource_REDHAT","Mitigation","Vendor Advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2490288","tags":["issue-tracking","x_refsource_REDHAT","Vendor Advisory"]},{"url":"https://github.com/SSSD/sssd/issues/8796","tags":["Issue Tracking","Mitigation"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12610","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f953-7679-xc38"},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1787127601.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6245","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1787894517.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-12610","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3018","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3019","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14476","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3020","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3021","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3022","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622999-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1269807","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12610","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623061-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623110-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623132-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623171-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263368-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263394-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263401-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264456-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1273925","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68743","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265079-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1273009","tags":["report"]},{"url":"https://bugzilla.suse.com/1273922","tags":["report"]},{"url":"https://bugzilla.suse.com/1273924","tags":["report"]},{"url":"https://bugzilla.suse.com/1280360","tags":["report"]},{"url":"https://bugzilla.suse.com/1280361","tags":["report"]},{"url":"https://bugzilla.suse.com/1280362","tags":["report"]},{"url":"https://bugzilla.suse.com/1280363","tags":["report"]},{"url":"https://bugzilla.suse.com/1282584","tags":["report"]},{"url":"https://bugzilla.suse.com/1284266","tags":["report"]},{"url":"https://bugzilla.suse.com/1284314","tags":["report"]},{"url":"https://bugzilla.suse.com/1284316","tags":["report"]},{"url":"https://bugzilla.suse.com/1284318","tags":["report"]},{"url":"https://bugzilla.suse.com/1284321","tags":["report"]},{"url":"https://bugzilla.suse.com/1284322","tags":["report"]},{"url":"https://bugzilla.suse.com/1284323","tags":["report"]},{"url":"https://bugzilla.suse.com/1284324","tags":["report"]},{"url":"https://bugzilla.suse.com/1284326","tags":["report"]},{"url":"https://bugzilla.suse.com/1284470","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-104029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-104031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-104033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-104036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-104037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-104038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-104039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-104043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-104045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92821","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-12610","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-12610","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8672-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-12610","title":"Sssd: use-after-free crash in sssd' 'sssd_pam' process","description":"A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.","status":"published","published":"2026-06-30T08:27:01.504Z","modified":"2026-11-10T12:55:02.562Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-825"],"updated_at":"2026-11-10T13:38:44.039016Z"}],"euvd":[{"id":"EUVD-2026-40268","description":"A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.","status":"published","published":"2026-06-30T08:27:01Z","modified":"2026-11-10T12:55:02Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-10T14:21:09.632261Z"}],"ghsa":[{"id":"GHSA-f953-7679-xc38","title":"A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash...","description":"A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.","status":"published","published":"2026-06-30T12:31:51Z","modified":"2026-11-10T15:33:54Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-825"],"updated_at":"2026-11-10T15:55:02.881893Z"}],"nvd":[{"id":"CVE-2026-12610","description":"A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.","status":"published","published":"2026-06-30T10:16:34.397Z","modified":"2026-11-10T13:18:23.9Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-825"],"updated_at":"2026-11-10T16:19:47.381868Z"}],"osv":[{"id":"DEBIAN-CVE-2026-12610","description":"A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.","status":"published","published":"2026-06-30T10:16:34.397Z","modified":"2026-11-11T09:47:41.975923776Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-11T10:35:40.696585Z"},{"id":"OESA-2026-3018","title":"sssd security update","description":"Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.(CVE-2026-12610)","status":"published","published":"2026-07-19T11:11:55Z","modified":"2026-08-18T01:21:18.681775927Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3019","title":"sssd security update","description":"Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.(CVE-2026-12610)\n\nA path traversal flaw was found in SSSD\u0026apos;s AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.(CVE-2026-14476)","status":"published","published":"2026-07-19T11:11:55Z","modified":"2026-08-18T01:21:18.339403529Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3020","title":"sssd security update","description":"Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.(CVE-2026-12610)\n\nA path traversal flaw was found in SSSD\u0026apos;s AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.(CVE-2026-14476)","status":"published","published":"2026-07-19T11:11:55Z","modified":"2026-08-18T01:21:18.443604637Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3021","title":"sssd security update","description":"Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.(CVE-2026-12610)\n\nA path traversal flaw was found in SSSD\u0026apos;s AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.(CVE-2026-14476)","status":"published","published":"2026-07-19T11:11:55Z","modified":"2026-08-18T01:21:18.164276046Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3022","title":"sssd security update","description":"Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.(CVE-2026-12610)","status":"published","published":"2026-07-19T11:11:55Z","modified":"2026-08-18T01:21:18.135676739Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"UBUNTU-CVE-2026-12610","description":"A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.","status":"published","published":"2026-06-30T10:16:00Z","modified":"2026-09-03T16:04:10.956439696Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T16:56:00.592716Z"},{"id":"CLSA-2026-1787127601","title":"sssd: Fix of 2 CVEs","description":"- CVE-2026-12610: dereference the PAM context's certificate-map context when the\n  p11_child response is parsed instead of caching it in the request state, fixing\n  a use-after-free when a domain refresh replaced it mid-smartcard-authentication","status":"published","published":"2026-08-19T08:20:12Z","modified":"2026-10-26T09:31:26.801272795Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787894517","title":"sssd: Fix of CVE-2026-12610","description":"- CVE-2026-12610: fix PAM responder use-after-free during asynchronous p11_child processing","status":"published","published":"2026-08-28T05:22:07Z","modified":"2026-10-26T09:30:43.801185156Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"openSUSE-SU-2026:21507-1","title":"Security update for sssd","description":"This update for sssd fixes the following issue:\n\n- CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a\n  use-after-free (bsc#1269807).\n","status":"published","published":"2026-07-31T13:13:42Z","modified":"2026-08-02T18:24:04.04112387Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22999-1","title":"Security update for sssd","description":"This update for sssd fixes the following issue:\n\n- CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a\n  use-after-free (bsc#1269807).\n","status":"published","published":"2026-07-31T13:14:49Z","modified":"2026-08-08T18:23:58.444906259Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23061-1","title":"Security update for sssd","description":"This update for sssd fixes the following issue:\n\n- CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a\n  use-after-free (bsc#1269807).\n","status":"published","published":"2026-08-10T10:47:30Z","modified":"2026-08-12T18:23:41.16875024Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23110-1","title":"Security update for sssd","description":"This update for sssd fixes the following issue:\n\n- CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a\n  use-after-free (bsc#1269807).\n","status":"published","published":"2026-07-31T13:14:49Z","modified":"2026-08-14T18:23:39.658917673Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23132-1","title":"Security update for sssd","description":"This update for sssd fixes the following issue:\n\n- CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a\n  use-after-free (bsc#1269807).\n","status":"published","published":"2026-07-31T13:14:49Z","modified":"2026-08-14T18:23:40.142784836Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23171-1","title":"Security update for sssd","description":"This update for sssd fixes the following issue:\n\n- CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a\n  use-after-free (bsc#1269807).\n","status":"published","published":"2026-08-07T15:09:28Z","modified":"2026-08-22T18:23:33.790870733Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:3368-1","title":"Security update for sssd","description":"This update for sssd fixes the following issue:\n\n- CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a\n  use-after-free (bsc#1269807).\n","status":"published","published":"2026-07-28T12:23:46Z","modified":"2026-07-29T09:00:06.325149462Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3394-1","title":"Security update for sssd","description":"This update for sssd fixes the following issue:\n\n- CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a\n  use-after-free (bsc#1269807).\n","status":"published","published":"2026-07-28T18:27:51Z","modified":"2026-07-30T17:15:06.946085686Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3401-1","title":"Security update for sssd","description":"This update for sssd fixes the following issue:\n\n- CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a\n  use-after-free (bsc#1269807).\n","status":"published","published":"2026-07-29T10:39:07Z","modified":"2026-07-30T17:15:10.473039671Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:4456-1","title":"Security update for sssd","description":"This update for sssd fixes the following issues:\n\n- CVE-2026-68743: insufficient validation in the PAM responder can lead to an out-of-bounds read and a process crash\n  when a crafted protocol v1 request is processed (bsc#1273925).\n- CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to\n  a use-after-free (bsc#1269807).\n","status":"published","published":"2026-10-05T10:49:47Z","modified":"2026-10-05T18:00:05.547742455Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:5079-1","title":"Security update for sssd","description":"This update for sssd fixes the following issues:\n\n- CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a\n  use-after-free (bsc#1269807).\n- CVE-2026-68742: unvalidated address lengths in NSS responder packet parsing can cause a heap out-of-bounds read\n  (bsc#1273922).\n- CVE-2026-68743: oversized length parameters in authentication requests can cause heap out-of-bounds reads\n  (bsc#1273925).\n- CVE-2026-68744: unshrunk packet allocations during group resolution can allow uninitialized heap memory disclosure\n  (bsc#1273924).\n- CVE-2026-90462: Fail-open in LDAP ppolicy access check allows continued authorization (bsc#1282584).\n- CVE-2026-90463: out-of-bounds read in the NSS service request parsers (bsc#1280360).\n- CVE-2026-90994: out-of-bounds read in PAM v1 parser (bsc#1280361).\n- CVE-2026-90995: NULL pointer dereference in PAM responder (bsc#1280362).\n- CVE-2026-90996: zero-length request body underflow in the NSS responder (bsc#1280363).\n- CVE-2026-92821: access control bypass due to premature LDAP access rule evaluation (bsc#1284326).\n- CVE-2026-104029: denial of service due to out-of-bounds read in autofs responder (bsc#1284314).\n- CVE-2026-104031: denial of service via memory exhaustion in autofs responder (bsc#1284316).\n- CVE-2026-104033: access control bypass due to improper LDAP shadow expiration check (bsc#1284318).\n- CVE-2026-104036: denial of service due to out-of-bounds write in NFS idmap plugin (bsc#1284321).\n- CVE-2026-104037: denial of service due to packet length underflow in autofs responder (bsc#1284322).\n- CVE-2026-104038: denial of service via missing SID extension in certificate mapping (bsc#1284323).\n- CVE-2026-104039: denial of service due to stale connection state reuse in PAM GSSAPI responder (bsc#1284324).\n- CVE-2026-104043: Denial of Service via undersized packet parsing in NSS responder (bsc#1284266).\n- CVE-2026-104045: denial of service via race condition in autofs responder (bsc#1284470).\n","status":"published","published":"2026-11-03T08:22:57Z","modified":"2026-11-03T22:45:05.157791012Z","updated_at":"2026-11-03T22:59:30.419462Z"},{"id":"USN-8672-1","title":"sssd vulnerability","description":"It was discovered that the SSSD PAM responder may crash if a physically\nproximate attacker manipulates a smartcard or Yubikey. Non-malicious\nphysically proximate users may not be able to log in depending upon the\ndetails of their legitimate smartcard or Yubikey.","status":"published","published":"2026-08-25T02:30:55Z","modified":"2026-09-02T07:56:20.155109957Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}