Format: 1.8
Date: Thu, 03 Sep 2026 12:16:27 +0200
Source: sssd
Architecture: source
Version: 2.13.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian SSSD Team <sssd@packages.debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Closes: 1134269 1141323 1141769
Changes:
 sssd (2.13.1-1) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Timo Aaltonen ]
   * New upstream release.
     - CVE-2026-6245: pam: fix out-of-bounds read in pam_passkey_child_read_data.
       (Closes: #1134269).
   * patches: Drop upstreamed patch.
   * source: Update diff-ignore.
   * control: Change maintainer address.
 .
   [ Mike Gabriel ]
   * debian/patches:
     + Update fix-whitespace-test.diff. Add logic to ignore various code files
       during the whitespace tests
     + Add fix-ftbfs-src-m4.patch. Fix FTBFS due to missing src/m4 Makefile
       target.
     + Add fix-underlinking-keyutils.patch. Assure that unit tests that reference
       headers from libkeyutils-dev get linked against the library.
     + Add fix-eol-flaws-in-codefiles.patch. Fix EOL and EOF issue in one file to
       make whitespace_test unit test happy.
     + CVE-2026-12610: Add CVE-2026-12610.diff. PAM: fix use-after-free during
       p11_child processing. (Closes: #1141323).
     + CVE-2026-14474, CVE-2026-14476: Add CVE-2026-14474.diff (sudo: warn when
       ldap_sudo_search_base falls back to root DN) and CVE-2026-14476.diff (gpo:
       reject path traversal in gPCFileSysPath. (Closes: #1141769).
Checksums-Sha1:
 e5d89185a6a6c43c8b1077bbc8532900769f57d6 5165 sssd_2.13.1-1.dsc
 d4510a8875a5183e2d1cbea8b24b35e984959e05 9136618 sssd_2.13.1.orig.tar.gz
 92f49083de70833ade28ca7df834dfbb5b0236ec 833 sssd_2.13.1.orig.tar.gz.asc
 a981092002c731374610204bda13674acab0a3c9 53120 sssd_2.13.1-1.debian.tar.xz
 58f1e29b1174c0931b1e507f8b4edb63714382c3 19490 sssd_2.13.1-1_source.buildinfo
Checksums-Sha256:
 0109edd80074c9ab53a85f6d76d6de92762ab2ddcab7ce6d508eb4f53d712518 5165 sssd_2.13.1-1.dsc
 05ea79e89f0be399983925b8874ac196d6dc5fd4416f83609557b9fc8ef798b5 9136618 sssd_2.13.1.orig.tar.gz
 aa199860656563065819cedd3aa0b217ae6ce357a6c2c3311ba0b68fcb9cdcab 833 sssd_2.13.1.orig.tar.gz.asc
 e4dde2863bf4d7c2017cf7142a16bda3059d501720ad4143961f941a57ae0eb8 53120 sssd_2.13.1-1.debian.tar.xz
 26f73d73706a240dfad2ec4425d34314b7d5d2a54dbaa9e4c3dc63d6af7d8eb5 19490 sssd_2.13.1-1_source.buildinfo
Files:
 b933a4c0017e1657c0c672e769ab1dbc 5165 utils optional sssd_2.13.1-1.dsc
 f5e1d4554e28560059b4ffd551a668d9 9136618 utils optional sssd_2.13.1.orig.tar.gz
 a08da1bfe5734a8d103c55134e2909b7 833 utils optional sssd_2.13.1.orig.tar.gz.asc
 0ba01f5cce64c2b1a0de4bc84a9eadc6 53120 utils optional sssd_2.13.1-1.debian.tar.xz
 ff09e976b315b02c36984f1072d6a7bd 19490 utils optional sssd_2.13.1-1_source.buildinfo
Location: DEFERRED
Delayed-Until: 2026-09-10 10:42:41
Delay-Remaining: 6 days 21:46
Fingerprint: 9BFBAEE86C0AA5FFBF2207829AF46B3025771B31