← All notices | Source (USN-8718-1) | Text version
QSN-8718-1: SSSD vulnerability
September 3, 2026
Summary
SSSD could be made to crash if it received specially crafted input.
Details
It was discovered that SSSD did not properly validate authentication token lengths when processing PAM responder requests. A local attacker could possibly use this issue to cause SSSD to crash, resulting in a denial of service.
Affected QuantaStor releases
| Release | Platform | Package | Exposure | Shipped version | Fixed version | Status |
|---|---|---|---|---|---|---|
| 6.9.1.001 | Ubuntu 22.04 LTS | libipa-hbac0 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | libnss-sss | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | libpam-sss | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | libsss-certmap0 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | libsss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | libsss-nss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | python3-sss | Externally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | sssd | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | sssd-ad | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | sssd-ad-common | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | sssd-common | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | sssd-ipa | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | sssd-krb5 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | sssd-krb5-common | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | sssd-ldap | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | sssd-proxy | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.1.001 | Ubuntu 22.04 LTS | sssd-tools | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | libipa-hbac0 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | libnss-sss | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | libpam-sss | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | libsss-certmap0 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | libsss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | libsss-nss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | python3-sss | Externally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | sssd | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | sssd-ad | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | sssd-ad-common | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | sssd-common | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | sssd-ipa | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | sssd-krb5 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | sssd-krb5-common | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | sssd-ldap | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | sssd-proxy | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.9.0.464 | Ubuntu 22.04 LTS | sssd-tools | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | libipa-hbac0 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | libnss-sss | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | libpam-sss | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | libsss-certmap0 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | libsss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | libsss-nss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | python3-sss | Externally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | sssd | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | sssd-ad | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | sssd-ad-common | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | sssd-common | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | sssd-ipa | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | sssd-krb5 | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | sssd-krb5-common | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | sssd-ldap | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | sssd-proxy | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.6.015 | Ubuntu 22.04 LTS | sssd-tools | Internally-facing | 2.6.3-1ubuntu3.9 | 2.6.3-1ubuntu3.9 | Fixed in this release |
| 6.8.5.018 | Ubuntu 22.04 LTS | libipa-hbac0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | libnss-sss | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | libpam-sss | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | libsss-certmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | libsss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | libsss-nss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | python3-sss | Externally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | sssd | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | sssd-ad | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | sssd-ad-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | sssd-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | sssd-ipa | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | sssd-krb5 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | sssd-krb5-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | sssd-ldap | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | sssd-proxy | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.5.018 | Ubuntu 22.04 LTS | sssd-tools | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | libipa-hbac0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | libnss-sss | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | libpam-sss | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | libsss-certmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | libsss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | libsss-nss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | python3-sss | Externally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | sssd | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | sssd-ad | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | sssd-ad-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | sssd-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | sssd-ipa | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | sssd-krb5 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | sssd-krb5-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | sssd-ldap | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | sssd-proxy | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.4.038 | Ubuntu 22.04 LTS | sssd-tools | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | libipa-hbac0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | libnss-sss | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | libpam-sss | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | libsss-certmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | libsss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | libsss-nss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | python3-sss | Externally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | sssd | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | sssd-ad | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | sssd-ad-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | sssd-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | sssd-ipa | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | sssd-krb5 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | sssd-krb5-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | sssd-ldap | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | sssd-proxy | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.3.018 | Ubuntu 22.04 LTS | sssd-tools | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | libipa-hbac0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | libnss-sss | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | libpam-sss | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | libsss-certmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | libsss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | libsss-nss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | python3-sss | Externally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | sssd | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | sssd-ad | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | sssd-ad-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | sssd-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | sssd-ipa | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | sssd-krb5 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | sssd-krb5-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | sssd-ldap | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | sssd-proxy | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.2.002 | Ubuntu 22.04 LTS | sssd-tools | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | libipa-hbac0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | libnss-sss | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | libpam-sss | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | libsss-certmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | libsss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | libsss-nss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | python3-sss | Externally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | sssd | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | sssd-ad | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | sssd-ad-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | sssd-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | sssd-ipa | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | sssd-krb5 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | sssd-krb5-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | sssd-ldap | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | sssd-proxy | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.1.007 | Ubuntu 22.04 LTS | sssd-tools | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | libipa-hbac0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | libnss-sss | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | libpam-sss | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | libsss-certmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | libsss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | libsss-nss-idmap0 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | python3-sss | Externally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | sssd | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | sssd-ad | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | sssd-ad-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | sssd-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | sssd-ipa | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | sssd-krb5 | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | sssd-krb5-common | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | sssd-ldap | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | sssd-proxy | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
| 6.8.0.205 | Ubuntu 22.04 LTS | sssd-tools | Internally-facing | 2.6.3-1ubuntu3.6 | 2.6.3-1ubuntu3.9 | Fixed by QuantaStor security update |
Internally-facing: only accessible when logged into the QuantaStor console/ssh as the qadmin administrative sudo user; generally lower priority. Externally-facing: part of a service the storage platform presents on the network (or the kernel), so potentially reachable over the network.
CVEs
References
https://ubuntu.com/security/notices/USN-8718-1
https://nvd.nist.gov/vuln/detail/CVE-2026-68743
Update
Fixes marked Fixed by QuantaStor security update are applied by upgrading QuantaStor with security patches included (Upgrade Manager). Fixed package versions:
| Platform | Package | Version |
|---|---|---|
| bionic | sssd | 1.16.1-1ubuntu1.8+esm1 |
| Ubuntu 20.04 LTS | sssd | 2.2.3-3ubuntu0.13+esm1 |
| Ubuntu 22.04 LTS | sssd | 2.6.3-1ubuntu3.9 |
| Ubuntu 24.04 LTS | sssd | 2.9.4-1.1ubuntu6.8 |
| resolute | sssd | 2.12.0-1ubuntu5.4 |
| xenial | sssd | 1.13.4-1ubuntu1.15+esm1 |
