[CLSA-2026:1793177546] cyrus-sasl: Fix of CVE-2026-107161
Type:
security
Severity:
None
Release date:
2026-10-28 08:52:34 UTC
Description:
- Rebase onto Amazon Linux 2 2.1.26-24.amzn2.0.2 - CVE-2026-107161: recompute the output buffer size after quoting in add_to_challenge() in plugins/digestmd5.c - Retain the TuxCare off-by-one heap write fix in _sasl_add_string() in lib/common.c
Updated packages:
  • cyrus-sasl-2.1.26-24.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:8d7e7849b16d88ce8483a6f3bd9c6ce9c0700a2e301ea1bd05785223094ff5f4
  • cyrus-sasl-2.1.26-24.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:1f48957403e3e12545a21aacb601f3613f0ebec82c33a9dff75cc7c3b380407a
  • cyrus-sasl-2.1.26-24.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:6be28162de422c79fc281cdf3b01e3604c725993fd6a301a29823b8697940286
  • cyrus-sasl-devel-2.1.26-24.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:518d7a82d5eec50ba6f9b21f03d3cd3f0baed703f4a6dcd043e51f9fa22731ef
  • cyrus-sasl-devel-2.1.26-24.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:406c8df62328eae9a6d631d280180fa7b5dd6e6ec4ad7bf9bfceab9ef5ee0f7c
  • cyrus-sasl-devel-2.1.26-24.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:cc092c178d3e0d6f656dc7ea47cc4ae466ccccaa93350a8a2d086f90f6423889
  • cyrus-sasl-gs2-2.1.26-24.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:f0b7a312efdd87033390b8ce47b52e6c33ccd55818eefa7ea44f5947d138480e
  • cyrus-sasl-gs2-2.1.26-24.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:ad4fa3078ceecaca7efb98e5e591d79fc90de34202c908d8dd85188501bad16f
  • cyrus-sasl-gs2-2.1.26-24.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:747e7e111c74f64f42779609b9dfbc1f467468e6ee4686569be9c78e6c604089
  • cyrus-sasl-gssapi-2.1.26-24.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:f461bec536c55ce4eec27c1b2c6ee118b21fa9b131e4d288abc2c2d9b5b03528
  • cyrus-sasl-gssapi-2.1.26-24.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:5be19bbfc71811beb6b02ef1a56005f80ba75bd9af76691ebcdd2450a631d9c2
  • cyrus-sasl-gssapi-2.1.26-24.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:a9df5857d69428aa804d6d312bfdbd03a28f6211e0099c5390227610ca539f9a
  • cyrus-sasl-ldap-2.1.26-24.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:798d3901e165c7fe0610755f9aa825c5f28c18e4ff4a85a2fc111d21cf6523f5
  • cyrus-sasl-ldap-2.1.26-24.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:7f87cfc82f50876c73a759fb5e7b0d5a913d58cb1777d8132ec4626590dd7b79
  • cyrus-sasl-ldap-2.1.26-24.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:38390e0e6dde8e05e7eb84cc5c648e5774cab84a26d4d4a609d13151ffd6f37c
  • cyrus-sasl-lib-2.1.26-24.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:5545363627fa43dcfcb2816dfc2a581e21ec4e5b3e78347a95af5614c8a0b537
  • cyrus-sasl-lib-2.1.26-24.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:53cb87edff3b0c53421c88246ebaef3629572fe82de826ea94dfc3aefaf6f63c
  • cyrus-sasl-lib-2.1.26-24.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:72e238fd07cdf2fcf6e4d589e659555f72ae181948bc6b02709df6b22433ff66
  • cyrus-sasl-md5-2.1.26-24.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:3f2cde566e53f545279e23e34125b750fd851e5e12a83208d9120515761502b5
  • cyrus-sasl-md5-2.1.26-24.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:1bcf4279e01e3ee065690ffdc2a17245467e1d76b5e69deb08ab5cca251bd08a
  • cyrus-sasl-md5-2.1.26-24.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:f39a1c02b18a838393ea4f9780ee31bff34463862cfda8dca70aa683d79f96fb
  • cyrus-sasl-ntlm-2.1.26-24.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:72230673c311714cfea3db305b20a8657761a2585eb1b25ded200fc387cacdf5
  • cyrus-sasl-ntlm-2.1.26-24.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:75849cdea37d86f64e021c686f4b0fbbf7dfdf00307d8d63debd1727cbd133dd
  • cyrus-sasl-ntlm-2.1.26-24.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:4823f12c3e303a9a28430095fe476255acf90c7cbe27a11651b34352ee6008b8
  • cyrus-sasl-plain-2.1.26-24.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:9aebf80f383201b340dec6918284308c33b880434311146505fd9bcf26310f53
  • cyrus-sasl-plain-2.1.26-24.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:506d328806d5869b4e0563a1e7f8fa65e9af63ae31d1af008215a01d7ef6c281
  • cyrus-sasl-plain-2.1.26-24.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:91b6f7753a188b0d42df13f8208879cc09de12777fc5587ab0c4802dc6dc1d46
  • cyrus-sasl-scram-2.1.26-24.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:6bf2aec51b10816837adcf6240ece94690a61b58a387c912c8cefd894d79e62f
  • cyrus-sasl-scram-2.1.26-24.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:e447945e3574ad09514b2c8cc1b46a599eb0399505eb94cb63f7067bc00d17c0
  • cyrus-sasl-scram-2.1.26-24.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:28b6ae18ed425e3b3acea167674fdc7ae5e4764ab0d24f2002145b19b938a9e4
  • cyrus-sasl-sql-2.1.26-24.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:552d8f29ba45eee02c9e08d2be4fb6247d2f9f8c33b4823fe1ec292db9f955c0
  • cyrus-sasl-sql-2.1.26-24.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:3aefa5743f81927573f0467ab3efe73f7df8a4afac9ac4b07e72af205818ff9c
  • cyrus-sasl-sql-2.1.26-24.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:2a69c9e61c5c55e37580e76cac147b59463558e087230e36d554fb3821e64a4c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.