CVE-2026-68744: heap information disclosure in the NSS responder's
sss_nss_protocol_fill_initgr() - the initgroups reply packet is sized for
every group in the result set but never shrunk when entries are skipped as
non-POSIX, incomplete or negative-cache filtered, so the unwritten tail of
the packet leaks uninitialized heap bytes to the client