CVE-2026-104035

A flaw was found in SSSD. An issue in the Kerberos Credential Manager KCM responder allows a local user to cause a Denial of Service DoS by maintaining a persistent connection and repeatedly storing and destroying credentials. Because the service fails to release cached objects from memory when...

CVE-2026-104034

A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager KCM responder during Kerberos ticket-granting ticket TGT renewal, where a deferred callback accesses memory that has already been released. An authenticated local user with a renewable Kerberos tick...

CVE-2026-104033

A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...

UBUNTU-CVE-2026-104037

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...

CVE-2026-104037

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...

[SECURITY] Fedora 43 Update: python3.12-3.12.15-1.fc43

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

CVE-2026-104044

A flaw was found in sssd. A local attacker can trigger a Denial of Service DoS by sending a specially crafted Pluggable Authentication Module PAM request when passkey authentication is enabled. Due to a missing state validation check in passkey Kerberos handling, the PAM responder dereferences an...

CVE-2026-104043

A flaw exists in SSSD where a local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow . By sending a specially crafted request with an undersized packet header, the attacker can cause an out-of-bounds memory read during packet parsing. Th...

CVE-2026-104043 Sssd: sssd: denial of service via undersized packet parsing in nss responder

A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the...

CVE-2026-104043

A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the...

CVE-2026-104042

A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...

CVE-2026-104039

A flaw was found in SSSD. A local user can cause a denial of service DoS by disrupting system authentication services. When handling Generic Security Services Application Programming Interface GSSAPI authentication in the Pluggable Authentication Module PAM responder, cached connection state is...

CLEANSTART-2026-LS69569 On Unix platforms, when listing the contents of a directory using File

Security vulnerability affects the temporal-server package. On Unix platforms, when listing the contents of a directory using File...

CLEANSTART-2026-JZ54456 On Unix systems, opening a file in an os

Security vulnerability affects the temporal-server package. On Unix systems, opening a file in an os...

[SECURITY] Fedora 45 Update: zenon-0.8.5-45.fc45

Zenon is an automated theorem prover for first order classical logic with equality, based on the tableau method. Zenon can read input files in TPTP, Coq, Focal, and its own Zenon format. Zenon can directly generate Coq proofs proof scripts or proof terms, which can be reinserted into Coq...

[SECURITY] Fedora 45 Update: utop-2.17.0-5.fc45

utop is an improved toplevel i.e., Read-Eval-Print Loop for OCaml. It can run in a terminal or in Emacs. It supports line editing, history, real-time and context sensitive completion, colors, and more...

[SECURITY] Fedora 45 Update: rocq-stdlib-9.2.0-1.fc45

Rocq is a formal proof management system. It provides a formal language to write mathematical definitions, executable algorithms and theorems together with an environment for semi-interactive development of machine-checked proof s. This package includes the Rocq Standard Library, that is to say,...

[SECURITY] Fedora 45 Update: ocaml-xmlrpc-light-0.6.1-92.fc45

XmlRpc-Light is an XmlRpc library written in OCaml...

[SECURITY] Fedora 45 Update: ocaml-yojson-3.0.0-14.fc45

Yojson is an optimized parsing and printing library for the JSON format. It addresses a few shortcomings of json-wheel including 2x speedup, polymorphic variants and optional syntax for tuples and variants. ydump is a pretty-printing command-line program provided with the yojson package. The...

[SECURITY] Fedora 45 Update: ocaml-xmlm-1.4.0-21.fc45

Xmlm is an OCaml streaming codec to decode and encode the XML data format. It can process XML documents without a complete in-memory representation of the data...