SUSE-SU-2026:4027-1 Security update for sssd

This update for sssd fixes the following issue: - CVE-2026-68743: oversized length parameters in authentication requests can cause heap out-of-bounds reads bsc1273925...

CVE-2026-68743

A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds...

Linux Distros Unpatched Vulnerability : CVE-2026-68743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size befor...