[ubuntu/jammy-security] sssd 2.6.3-1ubuntu3.8 (Accepted)

[Seth Arnold]

sssd (2.6.3-1ubuntu3.8) jammy-security; urgency=medium

  * SECURITY UPDATE: sssd_pam crash when authenticating with slow
    smartcards (LP: #2162577)
    - d/p/lp2162577-fix-use-after-free-during-p11-child-processing.patch
    - CVE-2026-12610

sssd (2.6.3-1ubuntu3.6) jammy; urgency=medium

  * Updating apparmor profile for smartcard authentication.
    Allow access to sssd configuration directory, pcscd socket and libraries
    required for PKCS#11 module initialization. (LP: #2109673)
    - d/apparmor-profile

sssd (2.6.3-1ubuntu3.5) jammy; urgency=medium

  * Fix a regression in pam_sss_gss where if KRB5CCNAME was
    not set, authentication would fail. (LP: #2103623)
    - d/p/lp2103623-pam_sss_gss-KRB5CCNAME-may-be-NULL.patch

sssd (2.6.3-1ubuntu3.4) jammy; urgency=medium

  * Improve PAM smartcard support for everyday scenarios such as
    removing the smartcard mid auth, by actually respecting
    require_cert_auth and improving the messaging to the user.
    (LP: #2081129)
    - d/p/lp2081129-1-pam-add-more-checks-for-require_cert_auth.patch
    - d/p/lp2081129-2-pam-better-SC-fallback-message.patch

Date: 2026-08-18 02:18:12.677214+00:00
Changed-By: Wesley Hershberger <wesley.hershberger at canonical.com>
Signed-By: Seth Arnold <seth.arnold at canonical.com>
https://launchpad.net/ubuntu/+source/sssd/2.6.3-1ubuntu3.8
-------------- next part --------------
Sorry, changesfile not available.