{"id":"CLSA-2026-1788440142","summary":"sssd: Fix of CVE-2026-68743","details":"- CVE-2026-68743: validate auth_token_length against the remaining request\n  buffer in the PAM responder's extract_authtok_v1(), preventing an\n  out-of-bounds read","modified":"2026-10-26T09:30:44.501915066Z","published":"2026-09-03T12:55:53Z","upstream":["CVE-2026-68743"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1788440142.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68743"}],"affected":[{"package":{"name":"libipa_hbac","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libipa_hbac?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"libipa_hbac-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libipa_hbac-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"libsss_autofs","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_autofs?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"libsss_certmap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_certmap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"libsss_certmap-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_certmap-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"libsss_idmap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_idmap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"libsss_idmap-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_idmap-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"libsss_nss_idmap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_nss_idmap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"libsss_nss_idmap-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_nss_idmap-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"libsss_simpleifp","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_simpleifp?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"libsss_simpleifp-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_simpleifp-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"libsss_sudo","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsss_sudo?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"python3-libipa_hbac","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-libipa_hbac?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"python3-libsss_nss_idmap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-libsss_nss_idmap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"python3-sss","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-sss?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"python3-sss-murmur","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-sss-murmur?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"python3-sssdconfig","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-sssdconfig?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-ad","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-ad?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-client","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-client?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-common-pac","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-common-pac?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-dbus","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-dbus?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-idp","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-idp?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-ipa","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-ipa?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-kcm","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-kcm?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-krb5","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-krb5?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-krb5-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-krb5-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-ldap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-ldap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-nfs-idmap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-nfs-idmap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-polkit-rules","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-polkit-rules?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-proxy","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-proxy?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-tools","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-tools?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}},{"package":{"name":"sssd-winbind-idmap","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/sssd-winbind-idmap?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788440142.json"}}],"schema_version":"1.9.0"}