[From nobody Fri Sep 4 22:41:10 2026 Received: (at 1143947-close) by bugs.debian.org; 4 Sep 2026 21:38:18 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.6 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PDS_BTC_ID,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 91; hammy, 150; neutral, 150; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:37022) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x2bc1-006w2F-1x for 1143947-close@bugs.debian.org; Fri, 04 Sep 2026 21:38:18 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x2bc1-002EUq-1f for 1143947-close@bugs.debian.org; Fri, 04 Sep 2026 21:38:17 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=2NwVKA59r9RQPNtjl7w6d2WyT/5Nyzucq9PtUEO63Io=; b=X02zvqqJlMk8wY5fE+xDd/D/9Q Ti1A6FfyDd8+4veefGlf6B/H0OpPIJpUcPYo6TJr11jfaacIjI8lkntSck6GPAFagIz960Sn21UdB 4xvRlMGANiI5f4IMAsDmmOO3+65NfWstKO8/JOmdLEM5Wu84otgxkKzS1/vsc5CjDovOHcvKoC4Na XClJrtf84F0jxb5RWoAnTAY3kdCIi82L0mtkVGPItTTT7gOi3zx9fTOiT9OidWtb+iSnu6HtnfB73 0CRvexowOX9djAhxZ6AypcGf5RhJ7FQPFp5IWh031cDTmQyGQp98SNx9CXqV7L/NirFsot+c942DA dWBsh6pw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1x2bc0-00000006F4a-2VUJ; Fri, 04 Sep 2026 21:38:16 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Mike Gabriel <sunweaver@debian.org> To: 1143947-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: sssd Debian: DAK Debian-Changes: sssd_2.13.1-2_source.changes Debian-Source: sssd Debian-Version: 2.13.1-2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1143947: fixed in sssd 2.13.1-2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============4593642610538182278==" Message-Id: <E1x2bc0-00000006F4a-2VUJ@fasolo.debian.org> Date: Fri, 04 Sep 2026 21:38:16 +0000 --===============4593642610538182278== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: sssd Source-Version: 2.13.1-2 Done: Mike Gabriel <sunweaver@debian.org> We believe that the bug you reported is fixed in the latest version of sssd, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1143947@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Mike Gabriel <sunweaver@debian.org> (supplier of updated sssd package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 04 Sep 2026 15:54:27 +0200 Source: sssd Architecture: source Version: 2.13.1-2 Distribution: unstable Urgency: medium Maintainer: Debian SSSD Team <sssd@packages.debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Closes: 1143600 1143947 Changes: sssd (2.13.1-2) unstable; urgency=3Dmedium . * debian/patches: Add CVE-2026-68742.diff, CVE-2026-68743.diff, and CVE- 2026-68744.diff. (Closes: #1143600, #1143947). CVE-2026-68742: nss: validate addrlen in sss_nss_protocol_parse_addr() CVE-2026-68743: pam: validate auth_token_length in extract_authtok_v1() CVE-2026-68744: NSS: fix initgroups packet heap disclosure Checksums-Sha1: 2ec8bcec27437c7a0682fbedc2b1ed62c46d52d2 5165 sssd_2.13.1-2.dsc 55065130bcdd70e29e07e2393bb4667d425f2403 54428 sssd_2.13.1-2.debian.tar.xz 2c889c082caa43d4d8846a8eebe20c660e2d8dac 19490 sssd_2.13.1-2_source.buildinfo Checksums-Sha256: af0e02eeed95529e2b271e597891e722d8166037e237cedcfd3be4dd0efa54e2 5165 sssd_2= .13.1-2.dsc fdbf65bd8698db566bd9d1f743d967be0053586cb058fd3e9f8358fe0c9cbe19 54428 sssd_= 2.13.1-2.debian.tar.xz 8e6dc3f339c98ed3710ff5d5f5a38406b0e2ca72dd0defff879b56f5dd4ad613 19490 sssd_= 2.13.1-2_source.buildinfo Files: 477f35abac80cb445935a5c87c3ed320 5165 utils optional sssd_2.13.1-2.dsc c67f816ad397f2f9e5f31466b2a6a186 54428 utils optional sssd_2.13.1-2.debian.t= ar.xz 1313b4ea3bcd5731a5dceae4fb6f4bff 19490 utils optional sssd_2.13.1-2_source.b= uildinfo -----BEGIN PGP SIGNATURE----- iQJJBAEBCgAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAmqbMr4VHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxXXAP/jRBO26fg3AlKW1afmz909BK2RXN LM9RDn/LtbOtx32bbrCKpn8p51DwE4bcfHlvnhBRyHACpgHcjLhgQ2md4UhhsiwB 3IDPmMoM1wCdg2pNADOMbj6yzmyLGJ/MPkkjoaImk1/33X1C0bs5Gw8SfizfgLCv hT+bvtaXxQhpI09uF76NBZNdY0e6e3aL++FsQ/CQahuS/35P3R7BGMCaXWVcpJc/ 8vKxJALYL2FihLm/wbhPPfC32LtA9zqfFAMtBaH4RPmg1PpUwMjljiXLpLUDnxs9 31p4RxndtQb4Yv/fv3vj56Jnq8KAOS/WO6xWCZPIIXq1XP8J/y7j921SUf824Pqy Yu93HEw3VUST+aBvVuYj63LWu9uirnDhkLhik7of1vjfLdvEYybCbXhrbAITHjD0 tNrcRp2P3Dbdy4dicrvit0TEq6g3LgCHjnqGbjlPYxI+s5mJ0NBLArebVOca0hwG EB8XO2Taj+aF8WtwKhhdH60IqU9JW5e3BhUSScI/NwRtsVGENOPcm/J278d1qB2Z wI3CrigvHDDbgYm/33ELbrMVNTucim29QpNl1a46HEjfEiLnqH9WwtQ2b23aY0Ew kSiGMTDPM9wDyGnn/KYlNCB9Ej1yNCzIoe5Gh7WWUVLkgNexigqyGF5xvuc4TRNH 7cEX1N175wmuL9A6 =3D/Aow -----END PGP SIGNATURE----- --===============4593642610538182278== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaps6SAAKCRCb9qggYcy5 IX9EAP9vn2ceYaH6JItiiSDttOkMHfBilfVWSSInZOvy4OJ2GwEAga9gK+kNyfFY NnhMg1o5drHT/tRSM8Efcmf3Vs9ejwU= =u0Rz -----END PGP SIGNATURE----- --===============4593642610538182278==-- ]