Red Hat would like to thank Vivek Parikh (BreachX Zero Day Labs) for reporting this issue.

Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)

Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply

Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr

Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1