-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 04 Sep 2026 15:54:27 +0200 Source: sssd Architecture: source Version: 2.13.1-2 Distribution: unstable Urgency: medium Maintainer: Debian SSSD Team <sssd@packages.debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Closes: 1143600 1143947 Changes: sssd (2.13.1-2) unstable; urgency=medium . * debian/patches: Add CVE-2026-68742.diff, CVE-2026-68743.diff, and CVE- 2026-68744.diff. (Closes: #1143600, #1143947). CVE-2026-68742: nss: validate addrlen in sss_nss_protocol_parse_addr() CVE-2026-68743: pam: validate auth_token_length in extract_authtok_v1() CVE-2026-68744: NSS: fix initgroups packet heap disclosure Checksums-Sha1: 2ec8bcec27437c7a0682fbedc2b1ed62c46d52d2 5165 sssd_2.13.1-2.dsc 55065130bcdd70e29e07e2393bb4667d425f2403 54428 sssd_2.13.1-2.debian.tar.xz 2c889c082caa43d4d8846a8eebe20c660e2d8dac 19490 sssd_2.13.1-2_source.buildinfo Checksums-Sha256: af0e02eeed95529e2b271e597891e722d8166037e237cedcfd3be4dd0efa54e2 5165 sssd_2.13.1-2.dsc fdbf65bd8698db566bd9d1f743d967be0053586cb058fd3e9f8358fe0c9cbe19 54428 sssd_2.13.1-2.debian.tar.xz 8e6dc3f339c98ed3710ff5d5f5a38406b0e2ca72dd0defff879b56f5dd4ad613 19490 sssd_2.13.1-2_source.buildinfo Files: 477f35abac80cb445935a5c87c3ed320 5165 utils optional sssd_2.13.1-2.dsc c67f816ad397f2f9e5f31466b2a6a186 54428 utils optional sssd_2.13.1-2.debian.tar.xz 1313b4ea3bcd5731a5dceae4fb6f4bff 19490 utils optional sssd_2.13.1-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJJBAEBCgAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAmqbMr4VHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxXXAP/jRBO26fg3AlKW1afmz909BK2RXN LM9RDn/LtbOtx32bbrCKpn8p51DwE4bcfHlvnhBRyHACpgHcjLhgQ2md4UhhsiwB 3IDPmMoM1wCdg2pNADOMbj6yzmyLGJ/MPkkjoaImk1/33X1C0bs5Gw8SfizfgLCv hT+bvtaXxQhpI09uF76NBZNdY0e6e3aL++FsQ/CQahuS/35P3R7BGMCaXWVcpJc/ 8vKxJALYL2FihLm/wbhPPfC32LtA9zqfFAMtBaH4RPmg1PpUwMjljiXLpLUDnxs9 31p4RxndtQb4Yv/fv3vj56Jnq8KAOS/WO6xWCZPIIXq1XP8J/y7j921SUf824Pqy Yu93HEw3VUST+aBvVuYj63LWu9uirnDhkLhik7of1vjfLdvEYybCbXhrbAITHjD0 tNrcRp2P3Dbdy4dicrvit0TEq6g3LgCHjnqGbjlPYxI+s5mJ0NBLArebVOca0hwG EB8XO2Taj+aF8WtwKhhdH60IqU9JW5e3BhUSScI/NwRtsVGENOPcm/J278d1qB2Z wI3CrigvHDDbgYm/33ELbrMVNTucim29QpNl1a46HEjfEiLnqH9WwtQ2b23aY0Ew kSiGMTDPM9wDyGnn/KYlNCB9Ej1yNCzIoe5Gh7WWUVLkgNexigqyGF5xvuc4TRNH 7cEX1N175wmuL9A6 =/Aow -----END PGP SIGNATURE-----
