UbuntuUpdates.org

Package "sasl2-bin"

Name: sasl2-bin

Description:

Cyrus SASL - administration programs for SASL users database
Latest version: 2.1.25.dfsg1-3ubuntu0.2
Release: precise (12.04)
Level: security
Repository: main
Head package: cyrus-sasl2
Homepage: http://www.cyrusimap.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "sasl2-bin"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "sasl2-bin" in Precise

Repository Area Version
base main 2.1.25.dfsg1-3
updates main 2.1.25.dfsg1-3ubuntu0.2

Changelog

Version: 2.1.25.dfsg1-3ubuntu0.2 2021-05-03 14:07:21 UTC

  cyrus-sasl2 (2.1.25.dfsg1-3ubuntu0.2) precise-security; urgency=medium

  * SECURITY UPDATE: Off-by-one
    - debian/patches/CVE-2019-19906.patch: fix in _sasl_add_string function
    - CVE-2019-19906
  * Thanks Debian for the patch provide that (Closes: #947043)

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 27 Jan 2020 16:13:19 -0300
947043 cyrus-sasl2: CVE-2019-19906: Off-by-one in _sasl_add_string function
CVE-2019-19906 cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP pa


About   -   Send Feedback to @ubuntu_updates