UbuntuUpdates.org

Package "libsasl2-modules-sql"

Name: libsasl2-modules-sql

Description:

Cyrus SASL - pluggable authentication modules (SQL)
Latest version: 2.1.27~101-g0780600+dfsg-3ubuntu2.4
Release: bionic (18.04)
Level: updates
Repository: main
Head package: cyrus-sasl2
Homepage: https://www.cyrusimap.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libsasl2-modules-sql"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libsasl2-modules-sql" in Bionic

Repository Area Version
base main 2.1.27~101-g0780600+dfsg-3ubuntu2
security main 2.1.27~101-g0780600+dfsg-3ubuntu2.4

Changelog

Version: 2.1.27~101-g0780600+dfsg-3ubuntu2.4 2022-02-22 20:06:20 UTC

  cyrus-sasl2 (2.1.27~101-g0780600+dfsg-3ubuntu2.4) bionic-security; urgency=medium

  * SECURITY UPDATE: SQL injection in SQL plugin
    - debian/patches/CVE-2022-24407.patch: escape password for SQL
      insert/update commands in plugins/sql.c.
    - CVE-2022-24407

 -- Marc Deslauriers <email address hidden> Tue, 15 Feb 2022 15:04:08 -0500
Source diff to previous version
CVE-2022-24407 RESERVED

Version: 2.1.27~101-g0780600+dfsg-3ubuntu2.3 2021-01-07 13:06:17 UTC

  cyrus-sasl2 (2.1.27~101-g0780600+dfsg-3ubuntu2.3) bionic; urgency=medium

  * d/p/lp-1906627-01-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch:
    d/p/lp-1906627-02-Drop-unused-parameter-from-gssapi_spnego_ssf.patch:
    - Fix GSS-SPNEGO implementation to be inter-operable with Microsoft
      Active Directory, fixing the source of the recent adcli regression.
      (LP: #1906627)

 -- Matthew Ruffell <email address hidden> Mon, 07 Dec 2020 10:54:47 +1300
Source diff to previous version
1906627 GSS-SPNEGO implementation in cyrus-sasl2 is incompatible with Active Directory, causing recent adcli regression

Version: 2.1.27~101-g0780600+dfsg-3ubuntu2.1 2020-01-28 16:06:24 UTC

  cyrus-sasl2 (2.1.27~101-g0780600+dfsg-3ubuntu2.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Off-by-one
    - debian/patches/CVE-2019-19906.patch: fix in _sasl_add_string function
    - CVE-2019-19906
  * Thanks Debian for the patch provide that (Closes: #947043)

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 27 Jan 2020 16:25:33 -0300
CVE-2019-19906 cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP pa


About   -   Send Feedback to @ubuntu_updates