Information on source package cyrus-sasl2

Available versions

ReleaseVersion
bullseye2.1.27+dfsg-2.1+deb11u1
bookworm2.1.28+dfsg-10
trixie2.1.28+dfsg1-8
sid2.1.28+dfsg1-8

Resolved issues

BugDescription
TEMP-0465561-A017B1minor cyrus sasl DoS
CVE-2022-24407In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does ...
CVE-2020-8032A Insecure Temporary File vulnerability in the packaging of cyrus-sasl ...
CVE-2019-19906cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading ...
CVE-2013-4122Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a ...
CVE-2009-0688Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 ...
CVE-2006-1721digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer ...
CVE-2005-0373Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as ...
CVE-2004-0884The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and ea ...
CVE-2002-1347Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allo ...

Security announcements

DSA / DLADescription
DLA-2931-1cyrus-sasl2 - security update
DSA-5087-1cyrus-sasl2 - security update
DSA-4591-1cyrus-sasl2 - security update
DLA-2044-1cyrus-sasl2 - security update
DSA-3368-1cyrus-sasl2 - security update
DSA-1807-1cyrus-sasl2 cyrus-sasl2-heimdal - arbitrary code execution
DSA-1042-1cyrus-sasl2 - programming error

Search for package or bug name: Reporting problems