[CLSA-2026:1793167305] Fix CVE(s): CVE-2026-107161
Type:
security
Severity:
Important
Release date:
2026-10-28 06:01:56 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in DIGEST-MD5 add_to_challenge() - debian/patches/0037-CVE-2026-107161.patch: recompute the required buffer size after quoting the value in plugins/digestmd5.c - CVE-2026-107161
CVEs fixed:
Updated packages:
  • cyrus-sasl2-doc_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_all.deb
    sha:409d530f2640713fd27a451fe5ab5d3aa0b2e6e2
  • libsasl2-2_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_amd64.deb
    sha:90a23e722c1a76b1319f10fa688e6d3deb2371e1
  • libsasl2-dev_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_amd64.deb
    sha:ccea163083d973a3ef35886da4bc32bb981ab47b
  • libsasl2-modules_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_amd64.deb
    sha:a19f3e17e0007c29b6c8eba4598a016493cd9540
  • libsasl2-modules-db_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_amd64.deb
    sha:eca8de2dc2908447f195ea131e90cb80867342e3
  • libsasl2-modules-gssapi-heimdal_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_amd64.deb
    sha:2b48a3e444c90786258c95f2831c8ae2664bf782
  • libsasl2-modules-gssapi-mit_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_amd64.deb
    sha:b450ad0e594491509ff6684219d3be16055efb2d
  • libsasl2-modules-ldap_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_amd64.deb
    sha:4ad288cf022241f745a9bffa647b28b6dccace6e
  • libsasl2-modules-otp_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_amd64.deb
    sha:8fd12fa4c154d60b3abda404d29879794d0b082f
  • libsasl2-modules-sql_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_amd64.deb
    sha:8d7867440728bfd48c91107f76a2503351b269b0
  • sasl2-bin_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_amd64.deb
    sha:9e2c6be9adcd39ddcc521de1878a69516462b8eb
  • libsasl2-2_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_arm64.deb
    sha:a52f1414384f421e07c2c7ab0f86e15234663080
  • libsasl2-dev_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_arm64.deb
    sha:a7500ff34b256809f5d41ecf6dfc4cd325316988
  • libsasl2-modules_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_arm64.deb
    sha:67d0cc87eceb0a9361b18417a8ced5492df3166a
  • libsasl2-modules-db_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_arm64.deb
    sha:dc8c1eefabb403863d430e3af27c379052514ef7
  • libsasl2-modules-gssapi-heimdal_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_arm64.deb
    sha:0c4385cc03ae6509469d85a9fae6431e31ff4901
  • libsasl2-modules-gssapi-mit_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_arm64.deb
    sha:c197665aa5ab6448d8b63c5c88479c570692de00
  • libsasl2-modules-ldap_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_arm64.deb
    sha:66e4daf7d2474977fcd02fab4dba52c763c2db71
  • libsasl2-modules-otp_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_arm64.deb
    sha:9cca9a87152a8f1dde1a8fcf487caee670c2b0bd
  • libsasl2-modules-sql_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_arm64.deb
    sha:68a4f9631e88b339fcd03ba0e0f1aceb3e22b891
  • sasl2-bin_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_arm64.deb
    sha:8862f0db85eef11d9872a5ff5115dec3fb228636
  • libsasl2-2_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_armel.deb
    sha:07cbe1f7e2f4c1ce1d0ab3936d0b7f6f4fcb0285
  • libsasl2-dev_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_armel.deb
    sha:5c9c6c68e99357da6ebda5d6cb3f6bc5e27c6b5b
  • libsasl2-modules_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_armel.deb
    sha:869a6e12fbd02a4056398fc2f866167a9da82ee0
  • libsasl2-modules-db_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_armel.deb
    sha:302e72199060c0042e475b7212e52a9cfbea5d98
  • libsasl2-modules-gssapi-heimdal_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_armel.deb
    sha:f28f35bdd010e2528a026e1bf45be342efbd29de
  • libsasl2-modules-gssapi-mit_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_armel.deb
    sha:bde61fd74bcdeeb7aa8a92ad82165af146693ff8
  • libsasl2-modules-ldap_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_armel.deb
    sha:dab1969d1fe62d6851dfe9b4479b5e5329807f14
  • libsasl2-modules-otp_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_armel.deb
    sha:e926bdf2f8e9fddf3630047b1fc50c4af9ee18fd
  • libsasl2-modules-sql_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_armel.deb
    sha:a57a97d9633adc8e2ba5cdef942f7376fb85c1d4
  • sasl2-bin_2.1.27+dfsg-2.1+deb11u1+tuxcare.els1_armel.deb
    sha:9837c542220d48ca4055f67b28081c52425b32c2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.