CentOS Linux 7 [TuxCare] Security Update: cyrus-sasl / cyrus-sasl-devel / cyrus-sasl-gs2 / cyrus-sasl-gssapi / etc (CENTOS7:CLSA-2026:1793184437)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793184437 advisory. - A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST- MD5 plugin computes the size of the buffe...

Debian dla-4871 : cyrus-sasl2-doc - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4871 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4871-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 4871-1] cyrus-sasl2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4871-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 30, 2026 https://wiki.debian.org/LTS -...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cyrus-sasl (UTSA-2026-146966)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146966 advisory. A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST- MD5 plugin computes the size of the buffer needed for a...

CLSA-2026-1792928909 Fix CVE(s): CVE-2026-107161

SECURITY UPDATE: Heap buffer overflow in DIGEST-MD5 addtochallenge - debian/patches/0024-CVE-2026-107161.patch: recompute the required buffer size after quoting the value in plugins/digestmd5.c - CVE-2026-107161...

Amazon Linux 2023 : cyrus-sasl, cyrus-sasl-devel, cyrus-sasl-gs2 (ALAS2023-2026-3290)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3290 advisory. A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST- MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5...

Important: cyrus-sasl

Issue Overview: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping specia...

Amazon Linux 2 : cyrus-sasl (ALAS-2026-4029)

The version of cyrus-sasl installed on the remote host is prior to 2.1.26-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4029 advisory. A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST- MD5 plugin computes the...

Important: cyrus-sasl

Issue Overview: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping specia...

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues: Security issue fixed: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Non security issues fixed: Fix cyrus-sasl package failing to build with GCC...

Security update for cyrus-sasl (important)

openSUSE security update: security update for cyrus-sasl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22146-1 Rating: important References: bsc1221863 bsc1230111 bsc1247498 bsc1284687 Cross-References: CVE-2026-107161 CVSS scores: CVE-2026-107161...

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues: Security issue fixed: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Non security issues fixed: Fix cyrus-sasl package failing to build with GCC...

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues: Security issue fixed: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Non security issues fixed: Fix cyrus-sasl package failing to build with GCC...

OESA-2026-4302 cyrus-sasl security update

The package contains the Cyrus implementation of SASL. SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. Security Fixes: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the...

OESA-2026-4303 cyrus-sasl security update

The package contains the Cyrus implementation of SASL. SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. Security Fixes: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the...

OESA-2026-4301 cyrus-sasl security update

The package contains the Cyrus implementation of SASL. SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. Security Fixes: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the...

OESA-2026-4300 cyrus-sasl security update

The package contains the Cyrus implementation of SASL. SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. Security Fixes: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the...

SUSE CVE-2026-107161

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...