{"id":"SUSE-SU-2026:5079-1","summary":"Security update for sssd","details":"This update for sssd fixes the following issues:\n\n- CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a\n  use-after-free (bsc#1269807).\n- CVE-2026-68742: unvalidated address lengths in NSS responder packet parsing can cause a heap out-of-bounds read\n  (bsc#1273922).\n- CVE-2026-68743: oversized length parameters in authentication requests can cause heap out-of-bounds reads\n  (bsc#1273925).\n- CVE-2026-68744: unshrunk packet allocations during group resolution can allow uninitialized heap memory disclosure\n  (bsc#1273924).\n- CVE-2026-90462: Fail-open in LDAP ppolicy access check allows continued authorization (bsc#1282584).\n- CVE-2026-90463: out-of-bounds read in the NSS service request parsers (bsc#1280360).\n- CVE-2026-90994: out-of-bounds read in PAM v1 parser (bsc#1280361).\n- CVE-2026-90995: NULL pointer dereference in PAM responder (bsc#1280362).\n- CVE-2026-90996: zero-length request body underflow in the NSS responder (bsc#1280363).\n- CVE-2026-92821: access control bypass due to premature LDAP access rule evaluation (bsc#1284326).\n- CVE-2026-104029: denial of service due to out-of-bounds read in autofs responder (bsc#1284314).\n- CVE-2026-104031: denial of service via memory exhaustion in autofs responder (bsc#1284316).\n- CVE-2026-104033: access control bypass due to improper LDAP shadow expiration check (bsc#1284318).\n- CVE-2026-104036: denial of service due to out-of-bounds write in NFS idmap plugin (bsc#1284321).\n- CVE-2026-104037: denial of service due to packet length underflow in autofs responder (bsc#1284322).\n- CVE-2026-104038: denial of service via missing SID extension in certificate mapping (bsc#1284323).\n- CVE-2026-104039: denial of service due to stale connection state reuse in PAM GSSAPI responder (bsc#1284324).\n- CVE-2026-104043: Denial of Service via undersized packet parsing in NSS responder (bsc#1284266).\n- CVE-2026-104045: denial of service via race condition in autofs responder (bsc#1284470).\n","modified":"2026-11-03T22:45:05.157791012Z","published":"2026-11-03T08:22:57Z","related":["CVE-2026-104029","CVE-2026-104031","CVE-2026-104033","CVE-2026-104036","CVE-2026-104037","CVE-2026-104038","CVE-2026-104039","CVE-2026-104043","CVE-2026-104045","CVE-2026-12610","CVE-2026-68742","CVE-2026-68743","CVE-2026-68744","CVE-2026-90462","CVE-2026-90463","CVE-2026-90994","CVE-2026-90995","CVE-2026-90996","CVE-2026-92821"],"upstream":["CVE-2026-104029","CVE-2026-104031","CVE-2026-104033","CVE-2026-104036","CVE-2026-104037","CVE-2026-104038","CVE-2026-104039","CVE-2026-104043","CVE-2026-104045","CVE-2026-12610","CVE-2026-68742","CVE-2026-68743","CVE-2026-68744","CVE-2026-90462","CVE-2026-90463","CVE-2026-90994","CVE-2026-90995","CVE-2026-90996","CVE-2026-92821"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265079-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269807"},{"type":"REPORT","url":"https://bugzilla.suse.com/1273009"},{"type":"REPORT","url":"https://bugzilla.suse.com/1273922"},{"type":"REPORT","url":"https://bugzilla.suse.com/1273924"},{"type":"REPORT","url":"https://bugzilla.suse.com/1273925"},{"type":"REPORT","url":"https://bugzilla.suse.com/1280360"},{"type":"REPORT","url":"https://bugzilla.suse.com/1280361"},{"type":"REPORT","url":"https://bugzilla.suse.com/1280362"},{"type":"REPORT","url":"https://bugzilla.suse.com/1280363"},{"type":"REPORT","url":"https://bugzilla.suse.com/1282584"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284266"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284314"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284316"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284318"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284321"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284322"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284323"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284324"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284326"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284470"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104029"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104031"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104033"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104036"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104037"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104038"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104039"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104043"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104045"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-12610"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-68742"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-68743"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-68744"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-90462"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-90463"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-90994"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-90995"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-90996"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-92821"}],"affected":[{"package":{"name":"sssd","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","purl":"pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-150600.3.58.1"}]}],"ecosystem_specific":{"binaries":[{"libsss_simpleifp-devel":"2.10.2-150600.3.58.1","sssd-krb5-common":"2.10.2-150600.3.58.1","libsss_nss_idmap-devel":"2.10.2-150600.3.58.1","sssd-kcm":"2.10.2-150600.3.58.1","libipa_hbac-devel":"2.10.2-150600.3.58.1","sssd":"2.10.2-150600.3.58.1","sssd-tools":"2.10.2-150600.3.58.1","libsss_idmap-devel":"2.10.2-150600.3.58.1","sssd-ad":"2.10.2-150600.3.58.1","libsss_certmap-devel":"2.10.2-150600.3.58.1","libsss_simpleifp0":"2.10.2-150600.3.58.1","libsss_idmap0":"2.10.2-150600.3.58.1","sssd-krb5":"2.10.2-150600.3.58.1","sssd-winbind-idmap":"2.10.2-150600.3.58.1","libipa_hbac0":"2.10.2-150600.3.58.1","sssd-ipa":"2.10.2-150600.3.58.1","libsss_nss_idmap0":"2.10.2-150600.3.58.1","sssd-32bit":"2.10.2-150600.3.58.1","sssd-proxy":"2.10.2-150600.3.58.1","libsss_certmap0":"2.10.2-150600.3.58.1","python3-sssd-config":"2.10.2-150600.3.58.1","sssd-ldap":"2.10.2-150600.3.58.1","sssd-dbus":"2.10.2-150600.3.58.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5079-1.json"}},{"package":{"name":"sssd","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","purl":"pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-150600.3.58.1"}]}],"ecosystem_specific":{"binaries":[{"sssd-proxy":"2.10.2-150600.3.58.1","sssd-dbus":"2.10.2-150600.3.58.1","libsss_certmap0":"2.10.2-150600.3.58.1","libsss_certmap-devel":"2.10.2-150600.3.58.1","sssd":"2.10.2-150600.3.58.1","libsss_nss_idmap-devel":"2.10.2-150600.3.58.1","sssd-kcm":"2.10.2-150600.3.58.1","sssd-krb5":"2.10.2-150600.3.58.1","libsss_idmap-devel":"2.10.2-150600.3.58.1","sssd-winbind-idmap":"2.10.2-150600.3.58.1","python3-sssd-config":"2.10.2-150600.3.58.1","sssd-ldap":"2.10.2-150600.3.58.1","libipa_hbac0":"2.10.2-150600.3.58.1","libsss_idmap0":"2.10.2-150600.3.58.1","libipa_hbac-devel":"2.10.2-150600.3.58.1","sssd-ad":"2.10.2-150600.3.58.1","libsss_simpleifp-devel":"2.10.2-150600.3.58.1","sssd-32bit":"2.10.2-150600.3.58.1","libsss_nss_idmap0":"2.10.2-150600.3.58.1","sssd-tools":"2.10.2-150600.3.58.1","sssd-krb5-common":"2.10.2-150600.3.58.1","sssd-ipa":"2.10.2-150600.3.58.1","libsss_simpleifp0":"2.10.2-150600.3.58.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5079-1.json"}}],"schema_version":"1.9.2"}