CVE-2026-56968 on CTRL-OS 26.05

Aliases: CVE-2026-56968

Packages: gsasl

Status: Plausible

Advisory Information

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

Updates

2026-07-23 22:17 CEST

Metadata changes:

• Status for package gsasl: “Plausible”

2026-07-22 16:25 CEST

Metadata changes:

• Status for package gsasl: “New”