[CLSA-2026:1793364990] cyrus-sasl: Fix of CVE-2026-107161
Type:
security
Severity:
Important
Release date:
2026-10-30 12:56:42 UTC
Description:
- CVE-2026-107161: fix heap buffer overflow in DIGEST-MD5 add_to_challenge() when the value needs escaping
CVEs fixed:
Updated packages:
  • cyrus-sasl-2.1.26-24.0.1.el7_9.tuxcare.els1.i686.rpm
    sha:d6f38cccc7ceeb41e86ccf6f5ee95c19b5af64be02fcea258964507f19c64b50
  • cyrus-sasl-2.1.26-24.0.1.el7_9.tuxcare.els1.x86_64.rpm
    sha:f2ccdea1c6caeef8e40addabbc49b499d79df2335bbe10ea178d8171bbb17207
  • cyrus-sasl-devel-2.1.26-24.0.1.el7_9.tuxcare.els1.i686.rpm
    sha:e195a75a40b88af6718c05c6b5ff3ffeef55f9b7fe80dcc1726b7cc6fdb923d4
  • cyrus-sasl-devel-2.1.26-24.0.1.el7_9.tuxcare.els1.x86_64.rpm
    sha:546fba86fc0962d5c95a117280a15204391cf79a8cf6279cdbb1c0a7f104fa07
  • cyrus-sasl-gs2-2.1.26-24.0.1.el7_9.tuxcare.els1.i686.rpm
    sha:d814b814dcff2a5bfccb99cf4806247d6e84d6330368301fe91c1bc564bf831a
  • cyrus-sasl-gs2-2.1.26-24.0.1.el7_9.tuxcare.els1.x86_64.rpm
    sha:4848f858c28c9eedb8389ce803b2940bcf41c0111121db80db879a4b026eec51
  • cyrus-sasl-gssapi-2.1.26-24.0.1.el7_9.tuxcare.els1.i686.rpm
    sha:e3dcd4c02db8690ac22621291221776fb037bb878f54298895c1eed30ff59c8d
  • cyrus-sasl-gssapi-2.1.26-24.0.1.el7_9.tuxcare.els1.x86_64.rpm
    sha:d3959129235de4577a36d6e23deb931696b35327722ea077db0e46ad8b12e8be
  • cyrus-sasl-ldap-2.1.26-24.0.1.el7_9.tuxcare.els1.i686.rpm
    sha:60cff07b8e7e5eba127ce9b2de6e276f76730612e98a5f68bb1598126837c830
  • cyrus-sasl-ldap-2.1.26-24.0.1.el7_9.tuxcare.els1.x86_64.rpm
    sha:0eaef0c54452a0185c92960d814a4f239df3c9292f436f786fe01442c19e635d
  • cyrus-sasl-lib-2.1.26-24.0.1.el7_9.tuxcare.els1.i686.rpm
    sha:8c053dbb3fe46f36fb1f29221841bf6c6298077bf74b0eee7409c0c269a3fd7f
  • cyrus-sasl-lib-2.1.26-24.0.1.el7_9.tuxcare.els1.x86_64.rpm
    sha:8b8ead9512c493620e6205104b65e80a242f1fa04ad2fecf0475d951ad9dec5c
  • cyrus-sasl-md5-2.1.26-24.0.1.el7_9.tuxcare.els1.i686.rpm
    sha:56c83d32b91daeed0aa82205d4506c2515ee614cb58922d031dec2eff80c718c
  • cyrus-sasl-md5-2.1.26-24.0.1.el7_9.tuxcare.els1.x86_64.rpm
    sha:bc584cb407b34d6a3bf886b1586a3c7b8bd6a8ca699f74107f7ef631ceb90ce1
  • cyrus-sasl-ntlm-2.1.26-24.0.1.el7_9.tuxcare.els1.i686.rpm
    sha:4bd7f154c737ec524b3fc59c6ea152c1c8aaa44399bf8522287be630d5309bd0
  • cyrus-sasl-ntlm-2.1.26-24.0.1.el7_9.tuxcare.els1.x86_64.rpm
    sha:926117a9bd9f1d891d07a05b5405540357276fa20e6c0fbfd362faa1b8344614
  • cyrus-sasl-plain-2.1.26-24.0.1.el7_9.tuxcare.els1.i686.rpm
    sha:f80a60225fc720795ddababc47e423d9289cdc9ee5d7913ffa15188ce2480062
  • cyrus-sasl-plain-2.1.26-24.0.1.el7_9.tuxcare.els1.x86_64.rpm
    sha:6aaf3d8f2f21f1038df3d6d25ea057a39faa3f1d772eff6f5ed4cd3344406651
  • cyrus-sasl-scram-2.1.26-24.0.1.el7_9.tuxcare.els1.i686.rpm
    sha:d2d858e49480251e5d82d6af699a777b7da6f6f015ba3f0e9c3ec7928e9acea3
  • cyrus-sasl-scram-2.1.26-24.0.1.el7_9.tuxcare.els1.x86_64.rpm
    sha:0a3c07e0d1e8efa4643cbbb280722b9d2f0fd91b7529937cdb21e19b924fb6df
  • cyrus-sasl-sql-2.1.26-24.0.1.el7_9.tuxcare.els1.i686.rpm
    sha:1451ebb3623589faea9c71d96f9c5e70b5cc153b20974a1b2ce84f26a155e5de
  • cyrus-sasl-sql-2.1.26-24.0.1.el7_9.tuxcare.els1.x86_64.rpm
    sha:612b4fec33c363a4016b61c0d51db4838782124d00dc5ab861fc576ad9eea782
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.