[ubuntu/noble-security] sssd 2.9.4-1.1ubuntu6.5 (Accepted)

[Marc Deslauriers]

sssd (2.9.4-1.1ubuntu6.5) noble-security; urgency=medium

  * SECURITY UPDATE: PAM passkey responder denial of service
    - debian/patches/CVE-2026-6245.patch: pam: fix out-of-bounds read in
      pam_passkey_child_read_data in src/responder/pam/pamsrv_passkey.c.
    - CVE-2026-6245

sssd (2.9.4-1.1ubuntu6.4) noble; urgency=medium

  * Continue searching other PKCS#11 tokens if certificates are not found
    (LP: #2110521)
    - d/p/lp2110521-1-P11_CHILD-Extract-slot-processing-into-separate-func.patch
    - d/p/lp2110521-2-P11_CHILD-Make-p11_child-iterate-over-all-slots.patch

sssd (2.9.4-1.1ubuntu6.3) noble; urgency=medium

  * Updating apparmor profile for smartcard authentication.
    Allow access to sssd configuration directory, pcscd socket and libraries
    required for PKCS#11 module initialization. (LP: #2109673)
    - d/apparmor-profile

sssd (2.9.4-1.1ubuntu6.2) noble; urgency=medium

  * Close file descriptors to the /var/lib/sss/pipes/nss socket when threads
    are destroyed to avoid file descriptor leak. (LP: #2085389)
    - d/p/lp2085389-sss-client-handle-key-value-in-destructor.patch

Date: 2026-05-23 22:07:09.125445+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/sssd/2.9.4-1.1ubuntu6.5
-------------- next part --------------
Sorry, changesfile not available.