Back Linuxsecurity

Ubuntu 26.04 LTS gsasl Important DoS Crash Advisory USN-8356

Linuxsecurity •LinuxSecurity Advisories • June 1, 2026

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS Summary: GNU SASL could be made to crash if it received specially crafted input. Software Description: - gsasl: Simple Authentication and Security Layer framework Details: It was discovered that GNU SASL did not properly handle certain DIGEST-MD5 tokens. An attacker could possibly use this issue to cause GNU SASL to crash, resulting in a denial of service.

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS gsasl 2.2.2-4ubuntu1.1 libgsasl18 2.2.2-4ubuntu1.1 Ubuntu 25.10 gsasl 2.2.2-2ubuntu1.1 libgsasl18 2.2.2-2ubuntu1.1 Ubuntu 24.04 LTS gsasl 2.2.1-1willsync1ubuntu0.1 libgsasl18 2.2.1-1willsync1ubuntu0.1 In general, a standard system update will make all the necessary changes.

Ubuntu Security Notice USN-8356-1

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical GNU SASL Vulnerability Causes Denial of Service Risk A vulnerability in GNU SASL has been identified that affects multiple Ubuntu releases, including 26.04 LTS, 25.10, and 24.04 LTS. The issue arises from improper handling of DIGEST-MD5 tokens, which could allow attackers to craft inputs that cause the service to crash, leading to a denial of service. Users are advised to update their systems to the latest package versions to mitigate this risk. The affected packages include gsasl and libgsasl18. A standard system update will apply the necessary changes. The vulnerability has been assigned the identifier USN-8356-1. No active exploitation has been reported at this time, but the potential for denial of service remains a concern. 2 sources 57

Extracted Entities

Ubuntu 26.04 LTS gsasl Important DoS Crash Advisory USN-8356

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Platforms (1)