CVE-2026-68744: heap memory disclosure in sss_nss_protocol_fill_initgr() in
the NSS responder, which sized the initgroups reply packet for every group
in the result but left the slots of skipped groups (non-POSIX, incomplete,
or negative-cache filtered) holding unzeroed heap from talloc_realloc_size()