Skip to content

nss: validate addrlen in sss_nss_protocol_parse_addr() - #9039

Merged
alexey-tikhonov merged 1 commit into
SSSD:masterfrom
alexey-tikhonov:bz_2510306
Aug 18, 2026
Merged

nss: validate addrlen in sss_nss_protocol_parse_addr()#9039
alexey-tikhonov merged 1 commit into
SSSD:masterfrom
alexey-tikhonov:bz_2510306

Conversation

@alexey-tikhonov

@alexey-tikhonov alexey-tikhonov commented Aug 4, 2026

Copy link
Copy Markdown
Member

@alexey-tikhonov
alexey-tikhonov force-pushed the bz_2510306 branch 2 times, most recently from 9b79014 to 67c786b Compare August 4, 2026 19:42
@alexey-tikhonov
alexey-tikhonov marked this pull request as ready for review August 5, 2026 06:03
@pbrezina pbrezina self-assigned this Aug 6, 2026

@sumit-bose sumit-bose left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi,

thank you for adding the validation checks., ACK.

bye,
Sumit

:fixes: CVE-2026-68742

Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
@sssd-bot

Copy link
Copy Markdown
Contributor

The pull request was accepted by @alexey-tikhonov with the following PR CI status:


🟢 CodeQL (success)
🟢 osh-diff-scan:fedora-rawhide-x86_64:upstream (success)
🟢 rpm-build:centos-stream-10-x86_64:upstream (success)
🟢 rpm-build:fedora-43-x86_64:upstream (success)
🟢 rpm-build:fedora-44-x86_64:upstream (success)
🟢 rpm-build:fedora-rawhide-x86_64:upstream (success)
🟢 testing-farm:centos-stream-10-x86_64:upstream (success)
🔴 testing-farm:fedora-43-x86_64:upstream (failure)
🔴 testing-farm:fedora-44-x86_64:upstream (failure)
🔴 testing-farm:fedora-rawhide-x86_64:upstream (failure)
🟢 Build / freebsd (success)
🟢 Build / make-distcheck (success)
🟢 ci / intgcheck (centos-10) (success)
🟢 ci / intgcheck (fedora-43) (success)
🟢 ci / intgcheck (fedora-44) (success)
🟢 ci / intgcheck (fedora-45) (success)
🟢 ci / prepare (success)
🟢 ci / system (centos-10) (success)
🟢 ci / system (fedora-43) (success)
🟢 ci / system (fedora-44) (success)
🔴 ci / system (fedora-45) (failure)
➖ Coverity scan / coverity (skipped)
🟢 Static code analysis / codeql (success)
🟢 Static code analysis / pre-commit (success)
🟢 Static code analysis / python-system-tests (success)


There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging.

@alexey-tikhonov
alexey-tikhonov merged commit 2839e8c into SSSD:master Aug 18, 2026
13 of 20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants