{"id":"CLSA-2026-1792928909","summary":"Fix CVE(s): CVE-2026-107161","details":"   * SECURITY UPDATE: Heap buffer overflow in DIGEST-MD5 add_to_challenge()\n     - debian/patches/0024-CVE-2026-107161.patch: recompute the required\n       buffer size after quoting the value in plugins/digestmd5.c\n     - CVE-2026-107161","modified":"2026-10-26T09:31:53.727544568Z","published":"2026-10-25T11:48:40Z","upstream":["CVE-2026-107161"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1792928909.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107161"}],"affected":[{"package":{"name":"cyrus-sasl2-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cyrus-sasl2-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.27+dfsg-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792928909.json"}},{"package":{"name":"libsasl2-2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libsasl2-2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.27+dfsg-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792928909.json"}},{"package":{"name":"libsasl2-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libsasl2-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.27+dfsg-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792928909.json"}},{"package":{"name":"libsasl2-modules","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libsasl2-modules?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.27+dfsg-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792928909.json"}},{"package":{"name":"libsasl2-modules-db","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libsasl2-modules-db?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.27+dfsg-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792928909.json"}},{"package":{"name":"libsasl2-modules-gssapi-heimdal","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libsasl2-modules-gssapi-heimdal?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.27+dfsg-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792928909.json"}},{"package":{"name":"libsasl2-modules-gssapi-mit","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libsasl2-modules-gssapi-mit?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.27+dfsg-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792928909.json"}},{"package":{"name":"libsasl2-modules-ldap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libsasl2-modules-ldap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.27+dfsg-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792928909.json"}},{"package":{"name":"libsasl2-modules-otp","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libsasl2-modules-otp?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.27+dfsg-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792928909.json"}},{"package":{"name":"libsasl2-modules-sql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libsasl2-modules-sql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.27+dfsg-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792928909.json"}},{"package":{"name":"sasl2-bin","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/sasl2-bin?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.27+dfsg-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792928909.json"}}],"schema_version":"1.9.0"}