O Ubuntu publicou o aviso de segurança "identifier": "USN-8718-1",, referente a uma vulnerabilidade no SSSD. A data do anúncio é "announcementDate": "2026-09-03 12:00:57+00", e a fonte oficial é "officialSource": "https://ubuntu.com/security/notices/USN-8718-1",.
Detalhes do aviso
- Projeto: "project": "ubuntu",
- Evento: "event": "security",
- Identificador: "identifier": "USN-8718-1",
- Versão: "version": null,
- Data do anúncio: "announcementDate": "2026-09-03 12:00:57+00",
- Fonte oficial: "officialSource": "https://ubuntu.com/security/notices/USN-8718-1",
- Lista de CVEs: "cves": [
- CVE: "CVE-2026-68743"
Versões corrigidas
O aviso lista as versões corrigidas do pacote sssd-common na lista de pacotes "fixedPackages": [:
| Versão do Ubuntu | Pacote | Versão corrigida | Acesso |
|---|---|---|---|
| "release": "26.04 LTS resolute", | "package": "sssd-common", | "version": "2.12.0-1ubuntu5.4", | "access": "standard update" |
| "release": "24.04 LTS noble", | "package": "sssd-common", | "version": "2.9.4-1.1ubuntu6.8", | "access": "standard update" |
| "release": "22.04 LTS jammy", | "package": "sssd-common", | "version": "2.6.3-1ubuntu3.9", | "access": "standard update" |
| "release": "20.04 LTS focal", | "package": "sssd-common", | "version": "2.2.3-3ubuntu0.13+esm1", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "18.04 LTS bionic", | "package": "sssd-common", | "version": "1.16.1-1ubuntu1.8+esm1", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "16.04 LTS xenial", | "package": "sssd-common", | "version": "1.13.4-1ubuntu1.15+esm1", | "access": "Ubuntu Pro / ESM (see official notice)" |
As três primeiras entradas usam o acesso "access": "standard update". As versões LTS mais antigas exigem acesso via Ubuntu Pro/ESM, indicado em "access": "Ubuntu Pro / ESM (see official notice)", conforme o aviso oficial.
Os delimitadores do registro de dados do aviso são {, },, } e ],. O aviso inclui ainda os limites editoriais "editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue.".
