[CLSA-2026:1792928909] Fix CVE(s): CVE-2026-107161
Type:
security
Severity:
Important
Release date:
2026-10-25 11:48:40 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in DIGEST-MD5 add_to_challenge() - debian/patches/0024-CVE-2026-107161.patch: recompute the required buffer size after quoting the value in plugins/digestmd5.c - CVE-2026-107161
CVEs fixed:
Updated packages:
  • cyrus-sasl2-doc_2.1.27+dfsg-1+deb10u2+tuxcare.els1_all.deb
    sha:abeed71d9b04460bae790f8a77db52e4346408d9
  • libsasl2-2_2.1.27+dfsg-1+deb10u2+tuxcare.els1_amd64.deb
    sha:da7ff01d764583aebe17e7ac64dd6612c4676e35
  • libsasl2-dev_2.1.27+dfsg-1+deb10u2+tuxcare.els1_amd64.deb
    sha:5b6eb191005deefae9ca3d38c68ef589de118ed5
  • libsasl2-modules_2.1.27+dfsg-1+deb10u2+tuxcare.els1_amd64.deb
    sha:7364a404aae8ceb28de9327b3aa84efd016e1621
  • libsasl2-modules-db_2.1.27+dfsg-1+deb10u2+tuxcare.els1_amd64.deb
    sha:a06da8a1c3242b50d2820ccd30a51f26f713b6bb
  • libsasl2-modules-gssapi-heimdal_2.1.27+dfsg-1+deb10u2+tuxcare.els1_amd64.deb
    sha:af502947e307791905177eefcc89f38012446627
  • libsasl2-modules-gssapi-mit_2.1.27+dfsg-1+deb10u2+tuxcare.els1_amd64.deb
    sha:c09d0d90bd23e0a57edf479378ed82dc4d45f68d
  • libsasl2-modules-ldap_2.1.27+dfsg-1+deb10u2+tuxcare.els1_amd64.deb
    sha:7e5dda5481581a6a9ad4fc2e62dbb0e366954e3b
  • libsasl2-modules-otp_2.1.27+dfsg-1+deb10u2+tuxcare.els1_amd64.deb
    sha:1c7c5cbc664a5bc274d6ba2bfbd63dc2641a481f
  • libsasl2-modules-sql_2.1.27+dfsg-1+deb10u2+tuxcare.els1_amd64.deb
    sha:ad596413f2c385c96c93251a6c1612d51a62cb64
  • sasl2-bin_2.1.27+dfsg-1+deb10u2+tuxcare.els1_amd64.deb
    sha:b0c133479804f54958c39f28932f5ad66c86c9ed
  • libsasl2-2_2.1.27+dfsg-1+deb10u2+tuxcare.els1_arm64.deb
    sha:e27996089b48c15e078df63c97694cc49027bc2f
  • libsasl2-dev_2.1.27+dfsg-1+deb10u2+tuxcare.els1_arm64.deb
    sha:b91b6f046a1c22914de2ee246c90791c104c1f53
  • libsasl2-modules_2.1.27+dfsg-1+deb10u2+tuxcare.els1_arm64.deb
    sha:11d7568a5b69f017099360761ead915d1a067db7
  • libsasl2-modules-db_2.1.27+dfsg-1+deb10u2+tuxcare.els1_arm64.deb
    sha:87bac0d7d5b2c0383fd8aad8a803f6a3d55c668e
  • libsasl2-modules-gssapi-heimdal_2.1.27+dfsg-1+deb10u2+tuxcare.els1_arm64.deb
    sha:80202f6ed595493928f67c33c3c1dabf0d7b5a9b
  • libsasl2-modules-gssapi-mit_2.1.27+dfsg-1+deb10u2+tuxcare.els1_arm64.deb
    sha:a9e80d62b710704a47eec0d73a1b876a6bdbb682
  • libsasl2-modules-ldap_2.1.27+dfsg-1+deb10u2+tuxcare.els1_arm64.deb
    sha:0d75b9af612572f16456b28fc79d78cdecb1c2b1
  • libsasl2-modules-otp_2.1.27+dfsg-1+deb10u2+tuxcare.els1_arm64.deb
    sha:b32a86547e261218f4c58d6003c74cf69a4e5188
  • libsasl2-modules-sql_2.1.27+dfsg-1+deb10u2+tuxcare.els1_arm64.deb
    sha:2b3d66b43b47ca3c5fb6986e94062f677df114d8
  • sasl2-bin_2.1.27+dfsg-1+deb10u2+tuxcare.els1_arm64.deb
    sha:4b2720bae88b98cecfed4b85d4b7bd9dc17cd9ca
  • libsasl2-2_2.1.27+dfsg-1+deb10u2+tuxcare.els1_armel.deb
    sha:757a1b6131dcb26b517ee0504d725a1b43f552a8
  • libsasl2-dev_2.1.27+dfsg-1+deb10u2+tuxcare.els1_armel.deb
    sha:43a7ba5a67a735eecb8ad90ffad70e1137cbb25f
  • libsasl2-modules_2.1.27+dfsg-1+deb10u2+tuxcare.els1_armel.deb
    sha:73f0b21a695f5098caae104d6a6367b25ceadfd9
  • libsasl2-modules-db_2.1.27+dfsg-1+deb10u2+tuxcare.els1_armel.deb
    sha:3fedaee94d84f5ce3b801753224bdb4d46c80eb1
  • libsasl2-modules-gssapi-heimdal_2.1.27+dfsg-1+deb10u2+tuxcare.els1_armel.deb
    sha:b1724ba321f9dd2fb44fe90e166bfd524bbd155a
  • libsasl2-modules-gssapi-mit_2.1.27+dfsg-1+deb10u2+tuxcare.els1_armel.deb
    sha:7195edec0771b0711f3685a1954c5016f8f27b40
  • libsasl2-modules-ldap_2.1.27+dfsg-1+deb10u2+tuxcare.els1_armel.deb
    sha:a3c45e6242a278b3d0eb4b424c6b6cb604838590
  • libsasl2-modules-otp_2.1.27+dfsg-1+deb10u2+tuxcare.els1_armel.deb
    sha:09fb0b0fb70631f60f64a5be3483a015ce42217e
  • libsasl2-modules-sql_2.1.27+dfsg-1+deb10u2+tuxcare.els1_armel.deb
    sha:af25a06aef77cb1f39ce3144b02635d24fc1e1f8
  • sasl2-bin_2.1.27+dfsg-1+deb10u2+tuxcare.els1_armel.deb
    sha:f7ebe524eefcce736171242feddf6f98b041211a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.