[Git][security-tracker-team/security-tracker][master] Add second batch of sssd issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2bae4921 by Salvatore Bonaccorso at 2026-10-06T09:46:32+02:00
Add second batch of sssd issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -328,25 +328,35 @@ CVE-2026-104039 (A flaw was found in SSSD. A local user can cause a denial of se
 	- sssd <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2478956
 CVE-2026-104038 (A flaw was found in sssd. A remote attacker can cause a denial of serv ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2478980
 CVE-2026-104037 (A flaw was found in SSSD. A local attacker can exploit this issue by s ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2479030
 CVE-2026-104036 (A flaw was found in SSSD's NFS idmap plugin. When retrieving cached us ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2479057
 CVE-2026-104035 (A flaw was found in SSSD. An issue in the Kerberos Credential Manager  ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2479107
 CVE-2026-104034 (A flaw was found in SSSD. A use-after-free vulnerability exists in the ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2479178
 CVE-2026-104033 (A flaw was found in SSSD. When configured to enforce account expiratio ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2479271
 CVE-2026-104032 (A flaw was found in SSSD. An unprivileged local user can repeatedly re ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2479381
 CVE-2026-104031 (A flaw was found in SSSD. In configurations where the autofs responder ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2479418
 CVE-2026-104030 (A flaw was found in sssd. This vulnerability allows a local user to ca ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2479429
 CVE-2026-104029 (A flaw was found in SSSD. A local attacker can exploit this vulnerabil ...)
-	TODO: check
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2479444
 CVE-2026-103546 (In MongoDB Controllers for Kubernetes, insufficient validation of Ops  ...)
 	TODO: check
 CVE-2026-103433 (Docker Buildx Bake does not request the expected fs.read approval for  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2bae4921f0b7629a9edf975ceabd5264625a661b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2bae4921f0b7629a9edf975ceabd5264625a661b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/726809df/attachment-0001.htm>