MGASA-2026-0400 Updated perl-Authen-SASL packages fix a security vulnerability

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. CVE-2026-86219...

perl-Authen-SASL-2.210.0-1.1 on GA media (moderate)

perl-Authen-SASL-2.210.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11734-1 Rating: moderate Cross-References: CVE-2026-86219 CVSS scores: CVE-2026-86219 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-86219 SUSE : 9.1...

CVE-2026-86219

creationtimestamp| type| source ---|---|--- 2026-09-08 19:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzqjmtli42p...

DEBIAN-CVE-2026-86219

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...