CLSA-2026-1792928909 Fix CVE(s): CVE-2026-107161

SECURITY UPDATE: Heap buffer overflow in DIGEST-MD5 addtochallenge - debian/patches/0024-CVE-2026-107161.patch: recompute the required buffer size after quoting the value in plugins/digestmd5.c - CVE-2026-107161...

Amazon Linux 2023 : cyrus-sasl, cyrus-sasl-devel, cyrus-sasl-gs2 (ALAS2023-2026-3290)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3290 advisory. A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST- MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5...

Amazon Linux 2 : cyrus-sasl (ALAS-2026-4029)

The version of cyrus-sasl installed on the remote host is prior to 2.1.26-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4029 advisory. A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST- MD5 plugin computes the...

Important: cyrus-sasl

Issue Overview: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping specia...

Important: cyrus-sasl

Issue Overview: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping specia...

Security update for cyrus-sasl (important)

openSUSE security update: security update for cyrus-sasl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22146-1 Rating: important References: bsc1221863 bsc1230111 bsc1247498 bsc1284687 Cross-References: CVE-2026-107161 CVSS scores: CVE-2026-107161...

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

OESA-2026-4302 cyrus-sasl security update

The package contains the Cyrus implementation of SASL. SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. Security Fixes: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the...

OESA-2026-4303 cyrus-sasl security update

The package contains the Cyrus implementation of SASL. SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. Security Fixes: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the...

OESA-2026-4301 cyrus-sasl security update

The package contains the Cyrus implementation of SASL. SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. Security Fixes: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the...

OESA-2026-4300 cyrus-sasl security update

The package contains the Cyrus implementation of SASL. SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. Security Fixes: A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the...

SUSE CVE-2026-107161

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...

AZL-107300 CVE-2026-107161 affecting package cyrus-sasl-bootstrap 2.1.28-8

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...

AZL-107297 CVE-2026-107161 affecting package cyrus-sasl 2.1.28-8

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...

CVE-2026-107161

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...

DEBIAN-CVE-2026-107161

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...

UBUNTU-CVE-2026-107161

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...

CVE-2026-107161

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...

CVE-2026-107161

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...