UbuntuUpdates.org

Package "libsasl2-modules-ldap"

Name: libsasl2-modules-ldap

Description:

Cyrus SASL - pluggable authentication modules (LDAP)
Latest version: 2.1.26.dfsg1-14ubuntu0.2
Release: xenial (16.04)
Level: updates
Repository: universe
Head package: cyrus-sasl2
Homepage: http://www.cyrusimap.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libsasl2-modules-ldap"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libsasl2-modules-ldap" in Xenial

Repository Area Version
base universe 2.1.26.dfsg1-14build1
security universe 2.1.26.dfsg1-14ubuntu0.2

Changelog

Version: 2.1.26.dfsg1-14ubuntu0.2 2020-01-28 16:06:23 UTC

  cyrus-sasl2 (2.1.26.dfsg1-14ubuntu0.2) xenial-security; urgency=medium

  * SECURITY UPDATE: Off-by-one
    - debian/patches/CVE-2019-19906.patch: fix in _sasl_add_string function
    - CVE-2019-19906
  * Thanks Debian for the patch provide that (Closes: #947043)

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 27 Jan 2020 16:24:29 -0300
Source diff to previous version
CVE-2019-19906 cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP pa

Version: 2.1.26.dfsg1-14ubuntu0.1 2018-11-19 15:06:40 UTC

  cyrus-sasl2 (2.1.26.dfsg1-14ubuntu0.1) xenial; urgency=medium

  * d/p/dont_hang_when_imap_closes.patch: Don't hang when IMAP
    server closes connection. (LP: #997217)

 -- Andreas Hasenack <email address hidden> Wed, 24 Oct 2018 14:51:00 -0300
997217 salsauthd maxes cpu


About   -   Send Feedback to @ubuntu_updates