CLSA-2026-1792928909 Fix CVE(s): CVE-2026-107161

SECURITY UPDATE: Heap buffer overflow in DIGEST-MD5 addtochallenge - debian/patches/0024-CVE-2026-107161.patch: recompute the required buffer size after quoting the value in plugins/digestmd5.c - CVE-2026-107161...

Amazon Linux 2023 : cyrus-sasl, cyrus-sasl-devel, cyrus-sasl-gs2 (ALAS2023-2026-3290)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3290 advisory. A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST- MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5...

Amazon Linux 2 : cyrus-sasl (ALAS-2026-4029)

The version of cyrus-sasl installed on the remote host is prior to 2.1.26-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4029 advisory. A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST- MD5 plugin computes the...

Important: cyrus-sasl

Issue Overview: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping specia...

openSUSE 16: cyrus-sasl / cyrus-sasl-bdb / cyrus-sasl-bdb-crammd5 / etc (openSUSE-SU-2026:22146-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22146-1 advisory. Security issue fixed: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5...

SUSE SLES16: cyrus-sasl / cyrus-sasl-crammd5 / cyrus-sasl-devel / etc (SUSE-SU-2026:24266-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:24266-1 advisory. Security issue fixed: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise...

SUSE SLED15: cyrus-sasl / cyrus-sasl-32bit / cyrus-sasl-bdb / etc (SUSE-SU-2026:4836-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4836-1 advisory. This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl...

SUSE-SU-2026:24380-1 Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues: Security issue fixed: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Non security issues fixed: - Fix cyrus-sasl package failing to build with...

SUSE SLES15: cyrus-sasl / cyrus-sasl-32bit / cyrus-sasl-bdb / etc (SUSE-SU-2026:4802-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4802-1 advisory. This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious...

SUSE SLES12: cyrus-sasl / cyrus-sasl-32bit / cyrus-sasl-crammd5 / etc (SUSE-SU-2026:4795-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4795-1 advisory. This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious...

SUSE SLES15: cyrus-sasl / cyrus-sasl-32bit / cyrus-sasl-bdb / etc (SUSE-SU-2026:4817-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4817-1 advisory. This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious...

Security update for cyrus-sasl (important)

openSUSE security update: security update for cyrus-sasl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22146-1 Rating: important References: bsc1221863 bsc1230111 bsc1247498 bsc1284687 Cross-References: CVE-2026-107161 CVSS scores: CVE-2026-107161...

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

SUSE-SU-2026:4836-1 Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687...

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

SUSE-SU-2026:24266-1 Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues: Security issue fixed: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Non security issues fixed: - Fix cyrus-sasl package failing to build with...

OPENSUSE-SU-2026:22146-1 Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues: Security issue fixed: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Non security issues fixed: - Fix cyrus-sasl package failing to build with...

OESA-2026-4303 cyrus-sasl security update

The package contains the Cyrus implementation of SASL. SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. Security Fixes: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the...