CLSA-2026-1792405584

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792405584
Upstream
CVE (3)
Published
2026-10-20T17:33:31Z
Modified
2026-10-26T09:43:29Z
Summary
sssd: Fix of 3 CVEs
Details
  • CVE-2026-90462: deny access and cache the deny decision when the LDAP ppolicy access check lookup returns zero results, fixing a fail-open that let deleted or deprovisioned users keep passing access checks
  • CVE-2026-90996: reject header-only requests with an empty body in the NSS responder parsers, preventing a size_t underflow on body[blen - 1] access that could crash the responder
  • CVE-2026-104045: skip reparenting the autofs enumeration context to the maps table when its key was orphaned during the async request, fixing a memory leak in the autofs responder
References

Affected packages

TuxCare:AlmaLinux:9.2
libipa_hbac

Package

Name
libipa_hbac
Purl
pkg:rpm/tuxcare/libipa_hbac?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
libipa_hbac-devel

Package

Name
libipa_hbac-devel
Purl
pkg:rpm/tuxcare/libipa_hbac-devel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
libsss_autofs

Package

Name
libsss_autofs
Purl
pkg:rpm/tuxcare/libsss_autofs?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
libsss_certmap

Package

Name
libsss_certmap
Purl
pkg:rpm/tuxcare/libsss_certmap?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
libsss_certmap-devel

Package

Name
libsss_certmap-devel
Purl
pkg:rpm/tuxcare/libsss_certmap-devel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
libsss_idmap

Package

Name
libsss_idmap
Purl
pkg:rpm/tuxcare/libsss_idmap?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
libsss_idmap-devel

Package

Name
libsss_idmap-devel
Purl
pkg:rpm/tuxcare/libsss_idmap-devel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
libsss_nss_idmap

Package

Name
libsss_nss_idmap
Purl
pkg:rpm/tuxcare/libsss_nss_idmap?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
libsss_nss_idmap-devel

Package

Name
libsss_nss_idmap-devel
Purl
pkg:rpm/tuxcare/libsss_nss_idmap-devel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
libsss_simpleifp

Package

Name
libsss_simpleifp
Purl
pkg:rpm/tuxcare/libsss_simpleifp?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
libsss_simpleifp-devel

Package

Name
libsss_simpleifp-devel
Purl
pkg:rpm/tuxcare/libsss_simpleifp-devel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
libsss_sudo

Package

Name
libsss_sudo
Purl
pkg:rpm/tuxcare/libsss_sudo?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
python3-libipa_hbac

Package

Name
python3-libipa_hbac
Purl
pkg:rpm/tuxcare/python3-libipa_hbac?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
python3-libsss_nss_idmap

Package

Name
python3-libsss_nss_idmap
Purl
pkg:rpm/tuxcare/python3-libsss_nss_idmap?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
python3-sss

Package

Name
python3-sss
Purl
pkg:rpm/tuxcare/python3-sss?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
python3-sss-murmur

Package

Name
python3-sss-murmur
Purl
pkg:rpm/tuxcare/python3-sss-murmur?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
python3-sssdconfig

Package

Name
python3-sssdconfig
Purl
pkg:rpm/tuxcare/python3-sssdconfig?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd

Package

Name
sssd
Purl
pkg:rpm/tuxcare/sssd?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-ad

Package

Name
sssd-ad
Purl
pkg:rpm/tuxcare/sssd-ad?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-client

Package

Name
sssd-client
Purl
pkg:rpm/tuxcare/sssd-client?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-common

Package

Name
sssd-common
Purl
pkg:rpm/tuxcare/sssd-common?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-common-pac

Package

Name
sssd-common-pac
Purl
pkg:rpm/tuxcare/sssd-common-pac?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-dbus

Package

Name
sssd-dbus
Purl
pkg:rpm/tuxcare/sssd-dbus?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-idp

Package

Name
sssd-idp
Purl
pkg:rpm/tuxcare/sssd-idp?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-ipa

Package

Name
sssd-ipa
Purl
pkg:rpm/tuxcare/sssd-ipa?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-kcm

Package

Name
sssd-kcm
Purl
pkg:rpm/tuxcare/sssd-kcm?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-krb5

Package

Name
sssd-krb5
Purl
pkg:rpm/tuxcare/sssd-krb5?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-krb5-common

Package

Name
sssd-krb5-common
Purl
pkg:rpm/tuxcare/sssd-krb5-common?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-ldap

Package

Name
sssd-ldap
Purl
pkg:rpm/tuxcare/sssd-ldap?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-nfs-idmap

Package

Name
sssd-nfs-idmap
Purl
pkg:rpm/tuxcare/sssd-nfs-idmap?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-polkit-rules

Package

Name
sssd-polkit-rules
Purl
pkg:rpm/tuxcare/sssd-polkit-rules?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-proxy

Package

Name
sssd-proxy
Purl
pkg:rpm/tuxcare/sssd-proxy?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-tools

Package

Name
sssd-tools
Purl
pkg:rpm/tuxcare/sssd-tools?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"
sssd-winbind-idmap

Package

Name
sssd-winbind-idmap
Purl
pkg:rpm/tuxcare/sssd-winbind-idmap?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-3.el9_2.alma.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792405584.json"