UbuntuUpdates.org

Package "libauthen-sasl-perl"

Name: libauthen-sasl-perl

Description:

Authen::SASL - SASL Authentication framework
Latest version: 2.2000-1ubuntu0.1
Release: resolute (26.04)
Level: security
Repository: main
Homepage: https://metacpan.org/release/Authen-SASL

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libauthen-sasl-perl"

All arch deb package
APT INSTALL

Other versions of "libauthen-sasl-perl" in Resolute

Repository Area Version
base main 2.2000-1

Changelog

Version: 2.2000-1ubuntu0.1 2026-09-30 18:07:25 UTC

libauthen-sasl-perl (2.2000-1ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: authentication replay / session hijacking
    - debian/patches/CVE-2026-86219.patch: verify the client-supplied nonce
      in server_step against the nonce issued in the digest-challenge,
      rejecting captured responses replayed against a later session
      (RFC 2831 section 2.1.2).
    - CVE-2026-86219

 -- Allen Huang Mon, 28 Sep 2026 13:37:27 +0100
CVE-2026-86219 Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step. server_


About   -   Send Feedback to @ubuntu_updates