[Git][security-tracker-team/security-tracker][master] Add first batch of new sssd issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4aafa2e1 by Salvatore Bonaccorso at 2026-10-06T09:40:42+02:00
Add first batch of new sssd issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -35,7 +35,8 @@ CVE-2026-93315 (When proxy networking with CA injection is enabled, a build can
 	NOTE: https://github.com/moby/buildkit/security/advisories/GHSA-2f5p-x9ph-g97x
 	TODO: check security impact on docker.io
 CVE-2026-92821 (A flaw was found in SSSD. When configured to evaluate password expirat ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2479031
 CVE-2026-91107 (openSIS Classic 9.3 allows an authenticated user with the built-in tea ...)
 	NOT-FOR-US: OS4ED openSIS
 CVE-2026-89289 (The Fast Courier  WordPress plugin through 5.2.3 does not restrict an  ...)
@@ -309,17 +310,23 @@ CVE-2026-105072 (Unauthenticated Broken Access Control in FluentBooking Pro < 2.
 CVE-2026-104852 (GraphQL Tools provides utilities for building, stitching, and mocking  ...)
 	TODO: check
 CVE-2026-104044 (A flaw was found in sssd. A local attacker can trigger a Denial of Ser ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2478664
 CVE-2026-104043 (A flaw was found in SSSD. A local attacker with access to the Name Ser ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2478852
 CVE-2026-104042 (A flaw was found in sssd. A local attacker can cause a Denial of Servi ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2478862
 CVE-2026-104041 (A flaw was found in SSSD. An unprivileged local user can repeatedly re ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2478864
 CVE-2026-104040 (A flaw was found in SSSD. When configured with the Entra ID identity p ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2478915
 CVE-2026-104039 (A flaw was found in SSSD. A local user can cause a denial of service ( ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2478956
 CVE-2026-104038 (A flaw was found in sssd. A remote attacker can cause a denial of serv ...)
 	TODO: check
 CVE-2026-104037 (A flaw was found in SSSD. A local attacker can exploit this issue by s ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4aafa2e1d982b4e8d97456f24c64b0b183b71d21

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4aafa2e1d982b4e8d97456f24c64b0b183b71d21
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/d5487d7f/attachment.htm>