Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21303-1

Опубликовано: 10 июл. 2026
Источник: suse-cvrf

Описание

Security update for gsasl

This update for gsasl fixes the following issue

  • CVE-2026-56968: improper sanitization of a short challenge in _gsasl_ntlm_client_step of the NTLM client can lead to memory disclosure (bsc#1268885).

Список пакетов

openSUSE Leap 16.0
gsasl-2.2.1-160000.4.1
gsasl-devel-2.2.1-160000.4.1
gsasl-lang-2.2.1-160000.4.1
libgsasl18-2.2.1-160000.4.1

Ссылки

Описание

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

Затронутые продукты
openSUSE Leap 16.0:gsasl-2.2.1-160000.4.1
openSUSE Leap 16.0:gsasl-devel-2.2.1-160000.4.1
openSUSE Leap 16.0:gsasl-lang-2.2.1-160000.4.1
openSUSE Leap 16.0:libgsasl18-2.2.1-160000.4.1
Ссылки
Уязвимость openSUSE-SU-2026:21303-1