[From nobody Fri Sep 4 22:19:06 2026 Received: (at 1141769-close) by bugs.debian.org; 4 Sep 2026 21:16:32 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-112.6 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,MONEY,PGPSIGNATURE, STOCKLIKE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 116; hammy, 150; neutral, 218; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:40728) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x2bGx-006sUC-1Q for 1141769-close@bugs.debian.org; Fri, 04 Sep 2026 21:16:32 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x2bGy-002HSm-2V for 1141769-close@bugs.debian.org; Fri, 04 Sep 2026 21:16:32 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=44GhAsv25TDoSdAYWxGfSleHK9hNVVqe+ieL3asjn4s=; b=Hwvz/bfOXtgrCsaGaB64dNNPMZ dRpvQuoGj3rglqa6Z5WspbWwMeYuZxh53i/rbLNUcNnJF8IBm5esCCaPBwdVTPeFs2BscuD02Qcjf STiDnUnaPsxdeL+ZxNeLTGdS3CNrAFgoCFKc1N6Bd/LpMhExs/JQBYOnK6q7DzcgFNpdNomCVbaMD d+T4e1VUGLcYiYZ11XDaYzuWEj70GPEAOf7Nd2uDjxQr8W2d63uBsy4RMAKY+EPG1sv692PI967/M gG07D0OumUAP61aAcpw+pj1KdHLEIY6jvPAM/xv3nMUzniedNP592H5DYjDZeJD+iiV9LdkNDI1R2 BqG+oOoQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1x2bGx-00000006Bov-1jlG; Fri, 04 Sep 2026 21:16:31 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Mike Gabriel <sunweaver@debian.org> To: 1141769-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: sssd Debian: DAK Debian-Changes: sssd_2.13.1-1_source.changes Debian-Source: sssd Debian-Version: 2.13.1-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1141769: fixed in sssd 2.13.1-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============4818880356344922818==" Message-Id: <E1x2bGx-00000006Bov-1jlG@fasolo.debian.org> Date: Fri, 04 Sep 2026 21:16:31 +0000 --===============4818880356344922818== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: sssd Source-Version: 2.13.1-1 Done: Mike Gabriel <sunweaver@debian.org> We believe that the bug you reported is fixed in the latest version of sssd, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1141769@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Mike Gabriel <sunweaver@debian.org> (supplier of updated sssd package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 03 Sep 2026 12:16:27 +0200 Source: sssd Architecture: source Version: 2.13.1-1 Distribution: unstable Urgency: medium Maintainer: Debian SSSD Team <sssd@packages.debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Closes: 1134269 1141323 1141769 Changes: sssd (2.13.1-1) unstable; urgency=3Dmedium . * Team upload. . [ Timo Aaltonen ] * New upstream release. - CVE-2026-6245: pam: fix out-of-bounds read in pam_passkey_child_read_d= ata. (Closes: #1134269). * patches: Drop upstreamed patch. * source: Update diff-ignore. * control: Change maintainer address. . [ Mike Gabriel ] * debian/patches: + Update fix-whitespace-test.diff. Add logic to ignore various code files during the whitespace tests + Add fix-ftbfs-src-m4.patch. Fix FTBFS due to missing src/m4 Makefile target. + Add fix-underlinking-keyutils.patch. Assure that unit tests that refer= ence headers from libkeyutils-dev get linked against the library. + Add fix-eol-flaws-in-codefiles.patch. Fix EOL and EOF issue in one fil= e to make whitespace_test unit test happy. + CVE-2026-12610: Add CVE-2026-12610.diff. PAM: fix use-after-free during p11_child processing. (Closes: #1141323). + CVE-2026-14474, CVE-2026-14476: Add CVE-2026-14474.diff (sudo: warn wh= en ldap_sudo_search_base falls back to root DN) and CVE-2026-14476.diff (= gpo: reject path traversal in gPCFileSysPath. (Closes: #1141769). Checksums-Sha1: e5d89185a6a6c43c8b1077bbc8532900769f57d6 5165 sssd_2.13.1-1.dsc d4510a8875a5183e2d1cbea8b24b35e984959e05 9136618 sssd_2.13.1.orig.tar.gz 92f49083de70833ade28ca7df834dfbb5b0236ec 833 sssd_2.13.1.orig.tar.gz.asc a981092002c731374610204bda13674acab0a3c9 53120 sssd_2.13.1-1.debian.tar.xz 58f1e29b1174c0931b1e507f8b4edb63714382c3 19490 sssd_2.13.1-1_source.buildinfo Checksums-Sha256: 0109edd80074c9ab53a85f6d76d6de92762ab2ddcab7ce6d508eb4f53d712518 5165 sssd_2= .13.1-1.dsc 05ea79e89f0be399983925b8874ac196d6dc5fd4416f83609557b9fc8ef798b5 9136618 sss= d_2.13.1.orig.tar.gz aa199860656563065819cedd3aa0b217ae6ce357a6c2c3311ba0b68fcb9cdcab 833 sssd_2.= 13.1.orig.tar.gz.asc e4dde2863bf4d7c2017cf7142a16bda3059d501720ad4143961f941a57ae0eb8 53120 sssd_= 2.13.1-1.debian.tar.xz 26f73d73706a240dfad2ec4425d34314b7d5d2a54dbaa9e4c3dc63d6af7d8eb5 19490 sssd_= 2.13.1-1_source.buildinfo Files: b933a4c0017e1657c0c672e769ab1dbc 5165 utils optional sssd_2.13.1-1.dsc f5e1d4554e28560059b4ffd551a668d9 9136618 utils optional sssd_2.13.1.orig.tar= .gz a08da1bfe5734a8d103c55134e2909b7 833 utils optional sssd_2.13.1.orig.tar.gz.= asc 0ba01f5cce64c2b1a0de4bc84a9eadc6 53120 utils optional sssd_2.13.1-1.debian.t= ar.xz ff09e976b315b02c36984f1072d6a7bd 19490 utils optional sssd_2.13.1-1_source.b= uildinfo -----BEGIN PGP SIGNATURE----- iQJJBAEBCgAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAmqZTFYVHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxZLQP/jjd6uICH8BE7JZjDbZJrS1OqzFI JWq+bzHfbKwz910d4FmIop/aY7dp3+n8Nenih0wYvuDzxqdQgEyjwAiY5ua8vp9a D2T2PO/4JZLoF2vABv54q4ztt7Tm501ho73jrR8mMcO7z88/f+W2KXMNY1Ok3ybp 0/eQiNrR5gOHbDoQI23AjcRBdCuRwOYvuLnp0rM09rVTK8rLYWQI7dBbOrfzf+DY VaagIoytr3C/mXBNbyHJg875qdzZ88dyI90otxRfBLW7nupK9EMkA8CRM3wtnsKP SpmyirxpsNXhnbj3601eUw8CTdYh/bBGLTou4o0eS3gAiM9+PNGLdlsePFadxZYG YWGoz3EjJkGzASbTBVIn5Ebap1KW5st5WqMUKZGBFPyVivHTJiuujst1bvhrdO2J XQMa7CxPG0IuXQWqwE/VV7821LMSVPxmh2qb0T2b/SFa8pW7jnocuiCb0QCU7CJ2 4RcV1vWtGIMUGULOpxKza96e1Vzzp//cR5rcbzJ0fJ8CqVRfITD9G6hnXqxxd+uJ B3b5H8cgstTn2by7Gn+tPgijU5RbvsloQLwyy6STWcLwZc+eGDbrMj7P85m0MgVD GlMG6/9x6uhBLg3Uc/C51D+edpq0wk+enLv0Fn/9sDVAP5S7H1W0bp6YvjwOYN2G rVQxeWS9ImYHW3Kb =3DZ886 -----END PGP SIGNATURE----- --===============4818880356344922818== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaps1LwAKCRCb9qggYcy5 IWFfAQCyReioVWIdz3uzZmtss57Ta9V0PHQ32k6xbUq2zRBX7gEAtIlzPKMHXMRG MjYLMbyw+NUj0gg7UY0cvmQJ8yCT/w8= =MBe5 -----END PGP SIGNATURE----- --===============4818880356344922818==-- ]