Bug #8883 “cyrus-sasl2: Local privilege escalation on setuid env...” : Bugs : cyrus-sasl2 package : Ubuntu

Revision history for this message

Debian Bug Importer (debzilla) wrote on 2004-10-08:

#1

Automatically imported from Debian bug report #275431 http://bugs.debian.org/275431

Revision history for this message

Debian Bug Importer (debzilla) wrote on 2004-10-08:

#2

Message-ID: <email address hidden>
Date: Fri, 8 Oct 2004 01:01:34 -0300
From: Henrique de Moraes Holschuh <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: cyrus-sasl2: Local privilege escalation on setuid environment (CAN-2004-0884)

Package: cyrus-sasl2
Severity: critical
Tags: security sarge sid
Justification: root security hole

See:
  http://security.gentoo.org/glsa/glsa-200410-05.xml
  https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/lib/common.c.diff?r1=1.103&r2=1.104
  http://lwn.net/Articles/105693/

I will upload a NMU (version -1.2) shortly.

-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (990, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.28-pre3-debian5+skas+lmsensors+3c59xvlan
Locale: LANG=pt_BR, LC_CTYPE=pt_BR

--
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh

Revision history for this message

Fabio Massimo Di Nitto (fabbione) wrote on 2004-10-08:

#3

Fixed with cyrus-sasl2_2.1.19-1.1ubuntu1 upload.

Revision history for this message

In Debian Bug tracker #275431, Henrique de Moraes Holschuh (hmh) wrote on 2004-10-08: Fixed in NMU of cyrus-sasl2 2.1.19-1.2

#4

tag 274087 + fixed
tag 275431 + fixed

quit

This message was generated automatically in response to a
non-maintainer upload. The .changes file follows.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Fri, 8 Oct 2004 11:15:39 -0300
Source: cyrus-sasl2
Binary: libsasl2 libsasl2-modules-sql sasl2-bin libsasl2-modules libsasl2-dev libsasl2-modules-gssapi-heimdal libsasl2-modules-kerberos-heimdal
Architecture: source i386
Version: 2.1.19-1.2
Distribution: unstable
Urgency: high
Maintainer: Dima Barsky <email address hidden>
Changed-By: Henrique de Moraes Holschuh <email address hidden>
Description:
libsasl2 - Authentication abstraction library
libsasl2-dev - Development files for authentication abstraction library
libsasl2-modules - Pluggable Authentication Modules for SASL
libsasl2-modules-gssapi-heimdal - Pluggable Authentication Modules for SASL
libsasl2-modules-kerberos-heimdal - Pluggable Authentication Modules for SASL
libsasl2-modules-sql - Pluggable Authentication Modules for SASL
sasl2-bin - Programs for manipulating the SASL users database
Closes: 274087 275431
Changes:
cyrus-sasl2 (2.1.19-1.2) unstable; urgency=high
.
   * NMU, since I am not sure Dima is back yet
   * SECURITY FIX: SASL_PATH environment variable must not be honoured on
     setuid environments, otherwise we have a local privilege escalation
     exploit (CVE: CAN-2004-0884), related advisories: RHSA-2004:546-02;
     GLSA 200410-05
     * upstream CVS: lib/common.c: don't honor SASL_PATH in setuid
       environment. from Gentoo (CVE CAN-2004-0884); (closes: #275431)
   * upstream CVS: plugins/kerberos4.c: document weirdness with openssl DES
   * upstream CVS: plugins/cram.c,plugins/anonymous.c,plugins/login.c,
     plugins/plain.c,plugins/sasldb.c: Fixed several 64 bit portability
     warnings
   * Forward port sasl_set_alloc locking patch from SASL 1.5, to avoid
     problems with the braindead idea of globals SASL has, and with libraries
     that think they can get around mucking with them (hello openldap!)
     (closes: #274087)
Files:
3babd0a1794f1ad1e049315db5abc325 1062 devel important cyrus-sasl2_2.1.19-1.2.dsc
e489181f0ca74cace906efa79a2cbb8c 30654 devel important cyrus-sasl2_2.1.19-1.2.diff.gz
c3509401264b0939e7989fbb6ff67da5 112786 utils important sasl2-bin_2.1.19-1.2_i386.deb
b69a98c3039f0704f859ec28c9b75862 155828 libs important libsasl2-modules_2.1.19-1.2_i386.deb
0eeddbff8fee4a4b283b8c33710e8bc1 50992 libs optional libsasl2-modules-sql_2.1.19-1.2_i386.deb
82fd1fc5f09fb53a7d6a4af85dcb937f 53016 libs optional libsasl2-modules-gssapi-heimdal_2.1.19-1.2_i386.deb
4bbce17451309ff60819a4ea20fda7e9 52696 libs optional libsasl2-modules-kerberos-heimdal_2.1.19-1.2_i386.deb
8125b12a6cabff4e72b38bb04476d3e4 258138 libs important libsasl2_2.1.19-1.2_i386.deb
e825bd4e73049bd70dba004661880a8d 245878 libdevel optional libsasl2-dev_2.1.19-1.2_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBZqX97iXePxzbD+MRAiJTAJ0TZ3h9xRTrDdjoY1ji840VpyQoOACfYFKZ
9R0pq3Zge7GGyTLtboFsKF8=
=P67P
-----END PGP SIGNATURE-----

tag 274087 + fixed
tag 275431 + fixed

quit

This message was generated automatically in response to a
non-maintainer upload.  The .changes file follows.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Fri,  8 Oct 2004 11:15:39 -0300
Source: cyrus-sasl2
Binary: libsasl2 libsasl2-modules-sql sasl2-bin libsasl2-modules libsasl2-dev libsasl2-modules-gssapi-heimdal libsasl2-modules-kerberos-heimdal
Architecture: source i386
Version: 2.1.19-1.2
Distribution: unstable
Urgency: high
Maintainer: Dima Barsky <dima@debian.org>
Changed-By: Henrique de Moraes Holschuh <hmh@debian.org>
Description: 
 libsasl2   - Authentication abstraction library
 libsasl2-dev - Development files for authentication abstraction library
 libsasl2-modules - Pluggable Authentication Modules for SASL
 libsasl2-modules-gssapi-heimdal - Pluggable Authentication Modules for SASL
 libsasl2-modules-kerberos-heimdal - Pluggable Authentication Modules for SASL
 libsasl2-modules-sql - Pluggable Authentication Modules for SASL
 sasl2-bin  - Programs for manipulating the SASL users database
Closes: 274087 275431
Changes: 
 cyrus-sasl2 (2.1.19-1.2) unstable; urgency=high
 .
   * NMU, since I am not sure Dima is back yet
   * SECURITY FIX: SASL_PATH environment variable must not be honoured on
     setuid environments, otherwise we have a local privilege escalation
     exploit (CVE: CAN-2004-0884), related advisories: RHSA-2004:546-02;
     GLSA 200410-05
     * upstream CVS: lib/common.c: don't honor SASL_PATH in setuid
       environment. from Gentoo (CVE CAN-2004-0884); (closes: #275431)
   * upstream CVS: plugins/kerberos4.c: document weirdness with openssl DES
   * upstream CVS: plugins/cram.c,plugins/anonymous.c,plugins/login.c,
     plugins/plain.c,plugins/sasldb.c: Fixed several 64 bit portability
     warnings
   * Forward port sasl_set_alloc locking patch from SASL 1.5, to avoid
     problems with the braindead idea of globals SASL has, and with libraries
     that think they can get around mucking with them (hello openldap!)
     (closes: #274087)
Files: 
 3babd0a1794f1ad1e049315db5abc325 1062 devel important cyrus-sasl2_2.1.19-1.2.dsc
 e489181f0ca74cace906efa79a2cbb8c 30654 devel important cyrus-sasl2_2.1.19-1.2.diff.gz
 c3509401264b0939e7989fbb6ff67da5 112786 utils important sasl2-bin_2.1.19-1.2_i386.deb
 b69a98c3039f0704f859ec28c9b75862 155828 libs important libsasl2-modules_2.1.19-1.2_i386.deb
 0eeddbff8fee4a4b283b8c33710e8bc1 50992 libs optional libsasl2-modules-sql_2.1.19-1.2_i386.deb
 82fd1fc5f09fb53a7d6a4af85dcb937f 53016 libs optional libsasl2-modules-gssapi-heimdal_2.1.19-1.2_i386.deb
 4bbce17451309ff60819a4ea20fda7e9 52696 libs optional libsasl2-modules-kerberos-heimdal_2.1.19-1.2_i386.deb
 8125b12a6cabff4e72b38bb04476d3e4 258138 libs important libsasl2_2.1.19-1.2_i386.deb
 e825bd4e73049bd70dba004661880a8d 245878 libdevel optional libsasl2-dev_2.1.19-1.2_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBZqX97iXePxzbD+MRAiJTAJ0TZ3h9xRTrDdjoY1ji840VpyQoOACfYFKZ
9R0pq3Zge7GGyTLtboFsKF8=
=P67P
-----END PGP SIGNATURE-----

Revision history for this message

Debian Bug Importer (debzilla) wrote on 2004-10-08:

#5

Download full text (3.3 KiB)

Message-Id: <email address hidden>
Date: Fri, 08 Oct 2004 10:47:03 -0400
From: Henrique de Moraes Holschuh <email address hidden>
To: <email address hidden>
Cc: Henrique de Moraes Holschuh <email address hidden>, Dima Barsky <email address hidden>
Subject: Fixed in NMU of cyrus-sasl2 2.1.19-1.2

tag 274087 + fixed
tag 275431 + fixed

quit

This message was generated automatically in response to a
non-maintainer upload. The .changes file follows.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Fri, 8 Oct 2004 11:15:39 -0300
Source: cyrus-sasl2
Binary: libsasl2 libsasl2-modules-sql sasl2-bin libsasl2-modules libsasl2-dev libsasl2-modules-gssapi-heimdal libsasl2-modules-kerberos-heimdal
Architecture: source i386
Version: 2.1.19-1.2
Distribution: unstable
Urgency: high
Maintainer: Dima Barsky <email address hidden>
Changed-By: Henrique de Moraes Holschuh <email address hidden>
Description:
libsasl2 - Authentication abstraction library
libsasl2-dev - Development files for authentication abstraction library
libsasl2-modules - Pluggable Authentication Modules for SASL
libsasl2-modules-gssapi-heimdal - Pluggable Authentication Modules for SASL
libsasl2-modules-kerberos-heimdal - Pluggable Authentication Modules for SASL
libsasl2-modules-sql - Pluggable Authentication Modules for SASL
sasl2-bin - Programs for manipulating the SASL users database
Closes: 274087 275431
Changes:
cyrus-sasl2 (2.1.19-1.2) unstable; urgency=high
.
   * NMU, since I am not sure Dima is back yet
   * SECURITY FIX: SASL_PATH environment variable must not be honoured on
     setuid environments, otherwise we have a local privilege escalation
     exploit (CVE: CAN-2004-0884), related advisories: RHSA-2004:546-02;
     GLSA 200410-05
     * upstream CVS: lib/common.c: don't honor SASL_PATH in setuid
       environment. from Gentoo (CVE CAN-2004-0884); (closes: #275431)
   * upstream CVS: plugins/kerberos4.c: document weirdness with openssl DES
   * upstream CVS: plugins/cram.c,plugins/anonymous.c,plugins/login.c,
     plugins/plain.c,plugins/sasldb.c: Fixed several 64 bit portability
     warnings
   * Forward port sasl_set_alloc locking patch from SASL 1.5, to avoid
     problems with the braindead idea of globals SASL has, and with libraries
     that think they can get around mucking with them (hello openldap!)
     (closes: #274087)
Files:
3babd0a1794f1ad1e049315db5abc325 1062 devel important cyrus-sasl2_2.1.19-1.2.dsc
e489181f0ca74cace906efa79a2cbb8c 30654 devel important cyrus-sasl2_2.1.19-1.2.diff.gz
c3509401264b0939e7989fbb6ff67da5 112786 utils important sasl2-bin_2.1.19-1.2_i386.deb
b69a98c3039f0704f859ec28c9b75862 155828 libs important libsasl2-modules_2.1.19-1.2_i386.deb
0eeddbff8fee4a4b283b8c33710e8bc1 50992 libs optional libsasl2-modules-sql_2.1.19-1.2_i386.deb
82fd1fc5f09fb53a7d6a4af85dcb937f 53016 libs optional libsasl2-modules-gssapi-heimdal_2.1.19-1.2_i386.deb
4bbce17451309ff60819a4ea20fda7e9 52696 libs optional libsasl2-modules-kerberos-heimdal_2.1.19-1.2_i386.deb
8125b12a6cabff4e72b38bb04476d3e4 258138 libs important libsasl2_2.1.19-1.2_i386.deb
e825bd4e73049bd70dba004661880a8d 245878 libdevel optional libsasl2-dev_2.1.19-1.2_i...

Message-Id: <E1CFw1P-0003Hb-00@newraff.debian.org>
Date: Fri, 08 Oct 2004 10:47:03 -0400
From: Henrique de Moraes Holschuh <hmh@debian.org>
To: control@bugs.debian.org
Cc: Henrique de Moraes Holschuh <hmh@debian.org>, Dima Barsky <dima@debian.org>
Subject: Fixed in NMU of cyrus-sasl2 2.1.19-1.2

tag 274087 + fixed
tag 275431 + fixed

quit

This message was generated automatically in response to a
non-maintainer upload.  The .changes file follows.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Fri,  8 Oct 2004 11:15:39 -0300
Source: cyrus-sasl2
Binary: libsasl2 libsasl2-modules-sql sasl2-bin libsasl2-modules libsasl2-dev libsasl2-modules-gssapi-heimdal libsasl2-modules-kerberos-heimdal
Architecture: source i386
Version: 2.1.19-1.2
Distribution: unstable
Urgency: high
Maintainer: Dima Barsky <dima@debian.org>
Changed-By: Henrique de Moraes Holschuh <hmh@debian.org>
Description: 
 libsasl2   - Authentication abstraction library
 libsasl2-dev - Development files for authentication abstraction library
 libsasl2-modules - Pluggable Authentication Modules for SASL
 libsasl2-modules-gssapi-heimdal - Pluggable Authentication Modules for SASL
 libsasl2-modules-kerberos-heimdal - Pluggable Authentication Modules for SASL
 libsasl2-modules-sql - Pluggable Authentication Modules for SASL
 sasl2-bin  - Programs for manipulating the SASL users database
Closes: 274087 275431
Changes: 
 cyrus-sasl2 (2.1.19-1.2) unstable; urgency=high
 .
   * NMU, since I am not sure Dima is back yet
   * SECURITY FIX: SASL_PATH environment variable must not be honoured on
     setuid environments, otherwise we have a local privilege escalation
     exploit (CVE: CAN-2004-0884), related advisories: RHSA-2004:546-02;
     GLSA 200410-05
     * upstream CVS: lib/common.c: don't honor SASL_PATH in setuid
       environment. from Gentoo (CVE CAN-2004-0884); (closes: #275431)
   * upstream CVS: plugins/kerberos4.c: document weirdness with openssl DES
   * upstream CVS: plugins/cram.c,plugins/anonymous.c,plugins/login.c,
     plugins/plain.c,plugins/sasldb.c: Fixed several 64 bit portability
     warnings
   * Forward port sasl_set_alloc locking patch from SASL 1.5, to avoid
     problems with the braindead idea of globals SASL has, and with libraries
     that think they can get around mucking with them (hello openldap!)
     (closes: #274087)
Files: 
 3babd0a1794f1ad1e049315db5abc325 1062 devel important cyrus-sasl2_2.1.19-1.2.dsc
 e489181f0ca74cace906efa79a2cbb8c 30654 devel important cyrus-sasl2_2.1.19-1.2.diff.gz
 c3509401264b0939e7989fbb6ff67da5 112786 utils important sasl2-bin_2.1.19-1.2_i386.deb
 b69a98c3039f0704f859ec28c9b75862 155828 libs important libsasl2-modules_2.1.19-1.2_i386.deb
 0eeddbff8fee4a4b283b8c33710e8bc1 50992 libs optional libsasl2-modules-sql_2.1.19-1.2_i386.deb
 82fd1fc5f09fb53a7d6a4af85dcb937f 53016 libs optional libsasl2-modules-gssapi-heimdal_2.1.19-1.2_i386.deb
 4bbce17451309ff60819a4ea20fda7e9 52696 libs optional libsasl2-modules-kerberos-heimdal_2.1.19-1.2_i386.deb
 8125b12a6cabff4e72b38bb04476d3e4 258138 libs important libsasl2_2.1.19-1.2_i386.deb
 e825bd4e73049bd70dba004661880a8d 245878 libdevel optional libsasl2-dev_2.1.19-1.2_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBZqX97iXePxzbD+MRAiJTAJ0TZ3h9xRTrDdjoY1ji840VpyQoOACfYFKZ
9R0pq3Zge7GGyTLtboFsKF8=
=P67P
-----END PGP SIGNATURE-----

Revision history for this message

In Debian Bug tracker #275431, Sam Hartman (hartmans) wrote on 2005-12-17: Debian Kerberosish: r2292 - in cyrus-sasl2-mit: . debian/current debian/current/debian debian/current/debian/patches debian/current/p

#6

Download full text (30.3 KiB)

tags 332703 pending
tags 285605 pending
tags 276637 pending
tags 275431 pending
tags 274087 pending
tags 245818 pending
tags 248333 pending
tags 256808 pending
tags 202836 pending
tags 262339 pending
tags 242184 pending
tags 259503 pending
tags 259658 pending
tags 254818 pending
tags 253894 pending
tags 254454 pending
tags 254818 pending
tags 240714 pending
tags 232086 pending
tags 212615 pending
tags 213521 pending
tags 223253 pending
tags 202354 pending
tags 217538 pending
tags 213510 pending
tags 212945 pending
tags 212318 pending
tags 211958 pending
tags 215862 pending
tags 213510 pending
tags 212945 pending
tags 212318 pending
tags 202876 pending
tags 203096 pending
tags 202838 pending
tags 202642 pending
tags 202569 pending
tags 201893 pending
tags 192502 pending
tags 197070 pending
tags 193958 pending
tags 188716 pending
tags 166702 pending
tags 190673 pending
tags 177426 pending
tags 179810 pending
tags 178987 pending
tags 172453 pending
tags 170740 pending
tags 167858 pending
tags 167855 pending
tags 171938 pending
tags 170495 pending
tags 167876 pending
tags 166538 pending
tags 166810 pending
tags 163845 pending
tags 163042 pending
tags 164393 pending
tags 162927 pending
tags 154153 pending
tags 146543 pending
tags 156286 pending
tags 158296 pending
tags 155025 pending
tags 154965 pending
tags 151798 pending
tags 153127 pending
tags 146229 pending
tags 151796 pending
tags 146791 pending
tags 151567 pending
tags 133458 pending
tags 148693 pending
tags 131792 pending
tags 150957 pending
tags 144200 pending
tags 146982 pending
tags 147484 pending
tags 146790 pending
tags 131791 pending
tags 131792 pending
thanks

Author: hartmans
Date: 2005-12-16 21:10:04 -0500 (Fri, 16 Dec 2005)
New Revision: 2292

Added:
   cyrus-sasl2-mit/debian/current/cyrus-sasl-2.1.19.tar.gz
   cyrus-sasl2-mit/debian/current/debian/
   cyrus-sasl2-mit/debian/current/debian/13_libdb42_autotools.diff
   cyrus-sasl2-mit/debian/current/debian/README.Debian
   cyrus-sasl2-mit/debian/current/debian/changelog
   cyrus-sasl2-mit/debian/current/debian/control
   cyrus-sasl2-mit/debian/current/debian/copyright
   cyrus-sasl2-mit/debian/current/debian/libsasl2-dev.files
   cyrus-sasl2-mit/debian/current/debian/libsasl2-modules-gssapi-heimdal.files
   cyrus-sasl2-mit/debian/current/debian/libsasl2-modules-kerberos-heimdal.files
   cyrus-sasl2-mit/debian/current/debian/libsasl2-modules-sql.files
   cyrus-sasl2-mit/debian/current/debian/libsasl2-modules.files
   cyrus-sasl2-mit/debian/current/debian/libsasl2.files
   cyrus-sasl2-mit/debian/current/debian/patches/
   cyrus-sasl2-mit/debian/current/debian/patches/00_strict-aliasing.diff
   cyrus-sasl2-mit/debian/current/debian/patches/01_maintainer_mode.diff
   cyrus-sasl2-mit/debian/current/debian/patches/02_versioned_symbols.diff
   cyrus-sasl2-mit/debian/current/debian/patches/03_saslauthd_mdoc.diff
   cyrus-sasl2-mit/debian/current/debian/patches/04_missing_man_pages.diff
   cyrus-sasl2-mit/debian/current/debian/patches/05_dbconverter.diff
   cyrus-sasl2-mit/debian/current/debian/patches/06_testsuite.diff
   cyrus-sasl2-mit/debian/current/debian/patches/08_mutex.diff
   cyrus-sasl2-mit/debian/current/debian/patches/09_postgr...

tags 332703 pending
tags 285605 pending
tags 276637 pending
tags 275431 pending
tags 274087 pending
tags 245818 pending
tags 248333 pending
tags 256808 pending
tags 202836 pending
tags 262339 pending
tags 242184 pending
tags 259503 pending
tags 259658 pending
tags 254818 pending
tags 253894 pending
tags 254454 pending
tags 254818 pending
tags 240714 pending
tags 232086 pending
tags 212615 pending
tags 213521 pending
tags 223253 pending
tags 202354 pending
tags 217538 pending
tags 213510 pending
tags 212945 pending
tags 212318 pending
tags 211958 pending
tags 215862 pending
tags 213510 pending
tags 212945 pending
tags 212318 pending
tags 202876 pending
tags 203096 pending
tags 202838 pending
tags 202642 pending
tags 202569 pending
tags 201893 pending
tags 192502 pending
tags 197070 pending
tags 193958 pending
tags 188716 pending
tags 166702 pending
tags 190673 pending
tags 177426 pending
tags 179810 pending
tags 178987 pending
tags 172453 pending
tags 170740 pending
tags 167858 pending
tags 167855 pending
tags 171938 pending
tags 170495 pending
tags 167876 pending
tags 166538 pending
tags 166810 pending
tags 163845 pending
tags 163042 pending
tags 164393 pending
tags 162927 pending
tags 154153 pending
tags 146543 pending
tags 156286 pending
tags 158296 pending
tags 155025 pending
tags 154965 pending
tags 151798 pending
tags 153127 pending
tags 146229 pending
tags 151796 pending
tags 146791 pending
tags 151567 pending
tags 133458 pending
tags 148693 pending
tags 131792 pending
tags 150957 pending
tags 144200 pending
tags 146982 pending
tags 147484 pending
tags 146790 pending
tags 131791 pending
tags 131792 pending
thanks

Author: hartmans
Date: 2005-12-16 21:10:04 -0500 (Fri, 16 Dec 2005)
New Revision: 2292

Added:
   cyrus-sasl2-mit/debian/current/cyrus-sasl-2.1.19.tar.gz
   cyrus-sasl2-mit/debian/current/debian/
   cyrus-sasl2-mit/debian/current/debian/13_libdb42_autotools.diff
   cyrus-sasl2-mit/debian/current/debian/README.Debian
   cyrus-sasl2-mit/debian/current/debian/changelog
   cyrus-sasl2-mit/debian/current/debian/control
   cyrus-sasl2-mit/debian/current/debian/copyright
   cyrus-sasl2-mit/debian/current/debian/libsasl2-dev.files
   cyrus-sasl2-mit/debian/current/debian/libsasl2-modules-gssapi-heimdal.files
   cyrus-sasl2-mit/debian/current/debian/libsasl2-modules-kerberos-heimdal.files
   cyrus-sasl2-mit/debian/current/debian/libsasl2-modules-sql.files
   cyrus-sasl2-mit/debian/current/debian/libsasl2-modules.files
   cyrus-sasl2-mit/debian/current/debian/libsasl2.files
   cyrus-sasl2-mit/debian/current/debian/patches/
   cyrus-sasl2-mit/debian/current/debian/patches/00_strict-aliasing.diff
   cyrus-sasl2-mit/debian/current/debian/patches/01_maintainer_mode.diff
   cyrus-sasl2-mit/debian/current/debian/patches/02_versioned_symbols.diff
   cyrus-sasl2-mit/debian/current/debian/patches/03_saslauthd_mdoc.diff
   cyrus-sasl2-mit/debian/current/debian/patches/04_missing_man_pages.diff
   cyrus-sasl2-mit/debian/current/debian/patches/05_dbconverter.diff
   cyrus-sasl2-mit/debian/current/debian/patches/06_testsuite.diff
   cyrus-sasl2-mit/debian/current/debian/patches/08_mutex.diff
   cyrus-sasl2-mit/debian/current/debian/patches/09_postgres_header.diff
   cyrus-sasl2-mit/debian/current/debian/patches/10_fix_sasldb.al.diff
   cyrus-sasl2-mit/debian/current/debian/patches/11_remove_rpath.diff
   cyrus-sasl2-mit/debian/current/debian/patches/12_pr245818.diff
   cyrus-sasl2-mit/debian/current/debian/patches/13_libdb42_autotools.diff
   cyrus-sasl2-mit/debian/current/debian/patches/14_manpages_section.diff
   cyrus-sasl2-mit/debian/current/debian/patches/15_lock_sasl_set_alloc.diff
   cyrus-sasl2-mit/debian/current/debian/patches/20_2368_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/debian/patches/20_2369_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/debian/patches/20_2370_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/debian/patches/20_2371_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/debian/patches/20_2372_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/debian/patches/20_2373_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/debian/patches/21_237x_1_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/debian/patches/21_237x_2_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/debian/patches/21_237x_3_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/debian/patches/22_237x_3_sasl_upstream_cvs-FIX.diff
   cyrus-sasl2-mit/debian/current/debian/patches/23_gcc40_static.diff
   cyrus-sasl2-mit/debian/current/debian/patches/24_openssl098.diff
   cyrus-sasl2-mit/debian/current/debian/rules
   cyrus-sasl2-mit/debian/current/debian/sasl2-bin.default
   cyrus-sasl2-mit/debian/current/debian/sasl2-bin.files
   cyrus-sasl2-mit/debian/current/debian/sasl2-bin.init
   cyrus-sasl2-mit/debian/current/debian/sasl2-bin.postinst
   cyrus-sasl2-mit/debian/current/p/
   cyrus-sasl2-mit/debian/current/p/02_versioned_symbols.diff
   cyrus-sasl2-mit/debian/current/p/05_dbconverter.diff
   cyrus-sasl2-mit/debian/current/p/06_testsuite.diff
   cyrus-sasl2-mit/debian/current/p/11_remove_rpath.diff
Modified:
   cyrus-sasl2-mit/
Log:
 r2299@luminous:  hartmans | 2005-12-16 21:04:32 -0500
 Import 2.1.19-1.7 debian sources

Property changes on: cyrus-sasl2-mit
___________________________________________________________________
Name: svk:merge
   - 70122675-b502-0410-88ba-d8d3b677d9fd:/cs2:2298
   + 70122675-b502-0410-88ba-d8d3b677d9fd:/cs2:2299

Added: cyrus-sasl2-mit/debian/current/cyrus-sasl-2.1.19.tar.gz
===================================================================
(Binary files differ)

Property changes on: cyrus-sasl2-mit/debian/current/cyrus-sasl-2.1.19.tar.gz
___________________________________________________________________
Name: svn:mime-type
   + application/x-gzip

Added: cyrus-sasl2-mit/debian/current/debian/13_libdb42_autotools.diff
===================================================================
--- cyrus-sasl2-mit/debian/current/debian/13_libdb42_autotools.diff	2005-12-17 02:10:03 UTC (rev 2291)
+++ cyrus-sasl2-mit/debian/current/debian/13_libdb42_autotools.diff	2005-12-17 02:10:04 UTC (rev 2292)
@@ -0,0 +1,22 @@
+diff -Nru3 ./cyrus-sasl-2.1.18/cmulocal/berkdb.m4 ../build-tree.new/cyrus-sasl-2.1.18/cmulocal/berkdb.m4
+--- ./cyrus-sasl-2.1.18/cmulocal/berkdb.m4	2004-02-14 21:13:03.000000000 +0000
++++ ../build-tree.new/cyrus-sasl-2.1.18/cmulocal/berkdb.m4	2004-07-04 12:42:28.000000000 +0100
+@@ -211,11 +211,13 @@
+ 	    BDB_LIBADD=""
+ 	fi
+ 
+-        for dbname in db-4.2 db4.2 db42 db-4.1 db4.1 db41 db-4.0 db4.0 db-4 db40 db4 db-3.3 db3.3 db33 db-3.2 db3.2 db32 db-3.1 db3.1 db31 db-3 db30 db3 db
+-          do
+-            AC_CHECK_LIB($dbname, db_create, BDB_LIBADD="$BDB_LIBADD -l$dbname";
+-              dblib="berkeley"; break, dblib="no")
+-          done
++#        for dbname in db-4.2 db4.2 db42 db-4.1 db4.1 db41 db-4.0 db4.0 db-4 db40 db4 db-3.3 db3.3 db33 db-3.2 db3.2 db32 db-3.1 db3.1 db31 db-3 db30 db3 db
++#          do
++#            AC_CHECK_LIB($dbname, db_create, BDB_LIBADD="$BDB_LIBADD -l$dbname";
++#              dblib="berkeley"; break, dblib="no")
++#          done
++        BDB_LIBADD="$BDB_LIBADD -ldb-4.2";
++	dblib="berkeley";
+         if test "$dblib" = "no"; then
+           AC_CHECK_LIB(db, db_open, BDB_LIBADD="$BDB_LIBADD -ldb";
+             dblib="berkeley"; dbname=db,

Property changes on: cyrus-sasl2-mit/debian/current/debian/13_libdb42_autotools.diff
___________________________________________________________________
Name: svn:mime-type
   + text/x-patch

Added: cyrus-sasl2-mit/debian/current/debian/README.Debian
===================================================================
--- cyrus-sasl2-mit/debian/current/debian/README.Debian	2005-12-17 02:10:03 UTC (rev 2291)
+++ cyrus-sasl2-mit/debian/current/debian/README.Debian	2005-12-17 02:10:04 UTC (rev 2292)
@@ -0,0 +1,26 @@
+==================================================================
+
+IMPORTANT:
+You MUST install one of the libsasl2-modules* packages for SASL to
+work.  Otherwise postfix-tls won't speak TLS, Cyrus IMAPd won't 
+ever allow any users to login, and other SASL apps will malfuntion
+in weird ways and there will be even more pain and sorrow in the 
+world (yours).
+
+==================================================================
+
+SASL2 uses /dev/random, which can block on a machine with too many
+connections. If you are going to use it on a busy machine, consider
+installing an entropy gathering card.
+
+Use dpkg-statoverride to change the permission and the ownership 
+of /var/run/saslauthd and /etc/sasldb2. 
+
+The following RFC documents used to included into the libsasl2 package
+
+rfc1321.txt rfc1939.txt rfc2104.txt rfc2195.txt rfc2222.txt
+rfc2243.txt rfc2245.txt rfc2289.txt rfc2444.txt rfc2595.txt
+rfc2831.txt rfc2945.txt rfc3174.txt
+
+They are not part of any cyrus-sasl package any more, you can find
+them in doc-rfc-std or doc-rfc-std-proposed Debian packages.

Added: cyrus-sasl2-mit/debian/current/debian/changelog
===================================================================
--- cyrus-sasl2-mit/debian/current/debian/changelog	2005-12-17 02:10:03 UTC (rev 2291)
+++ cyrus-sasl2-mit/debian/current/debian/changelog	2005-12-17 02:10:04 UTC (rev 2292)
@@ -0,0 +1,431 @@
+cyrus-sasl2 (2.1.19-1.7) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * fix FTBFS in plugins/ntlm.c with patch 24. Closes: #332703
+
+ -- Andreas Barth <aba@not.so.argh.org>  Sat,  5 Nov 2005 20:07:50 +0100
+
+cyrus-sasl2 (2.1.19-1.6) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Medium-urgency upload for RC bugfixes.
+  * Drop the extern declaration of a static variable global_callbacks,
+    allowing the package to build with gcc-4.0 (closes: #285605).
+  * Build-Depend on libpq-dev instead of on postgresql-dev, as the
+    latter package name is obsolete.  (Ref: #315177)
+
+ -- Steve Langasek <vorlon@debian.org>  Wed, 24 Aug 2005 17:41:57 -0700
+
+cyrus-sasl2 (2.1.19-1.5) unstable; urgency=emergency
+
+  * NMU
+  * Clean-up 2.1.19-1.4 NMU:
+    + Since we were using an upstream CVS patch, add another patch
+      fixing it instead of changing the (bad) upstream CVS patch;
+      Sent this new patch upstream
+    + Set *path to NULL, not to 0
+  * Add Build-Conflicts: autoconf2.13, automake1.4
+  * We want something easy to merge/further fix in sarge, so this cleanup
+    is a good idea
+
+ -- Henrique de Moraes Holschuh <hmh@debian.org>  Sat, 16 Oct 2004 17:50:19 -0300
+
+cyrus-sasl2 (2.1.19-1.4) unstable; urgency=low
+
+  * NMU
+  * fix the security fix: Initialize *path with 0.
+    Closes: #276637.
+
+ -- Andreas Barth <aba@debian.org>  Fri, 15 Oct 2004 20:26:41 +0200
+ 
+cyrus-sasl2 (2.1.19-1.3) unstable; urgency=high
+
+  * NMU
+  * Fix minor issue with -1.2 in patch 15, to squash a compiler
+    warning (just in case it becomes more than a warning in some arch):
+    add missing "int" to extern declaration
+
+ -- Henrique de Moraes Holschuh <hmh@debian.org>  Fri,  8 Oct 2004 13:06:28 -0300
+
+cyrus-sasl2 (2.1.19-1.2) unstable; urgency=high
+
+  * NMU, since I am not sure Dima is back yet
+  * SECURITY FIX: SASL_PATH environment variable must not be honoured on
+    setuid environments, otherwise we have a local privilege escalation
+    exploit (CVE: CAN-2004-0884), related advisories: RHSA-2004:546-02;
+    GLSA 200410-05
+    * upstream CVS: lib/common.c: don't honor SASL_PATH in setuid
+      environment. from Gentoo (CVE CAN-2004-0884); (closes: #275431)
+  * upstream CVS: plugins/kerberos4.c: document weirdness with openssl DES
+  * upstream CVS: plugins/cram.c,plugins/anonymous.c,plugins/login.c,
+    plugins/plain.c,plugins/sasldb.c: Fixed several 64 bit portability
+    warnings
+  * Forward port sasl_set_alloc locking patch from SASL 1.5, to avoid
+    problems with the braindead idea of globals SASL has, and with libraries
+    that think they can get around mucking with them (hello openldap!)
+    (closes: #274087)
+
+ -- Henrique de Moraes Holschuh <hmh@debian.org>  Fri,  8 Oct 2004 11:15:39 -0300
+
+cyrus-sasl2 (2.1.19-1.1) unstable; urgency=medium
+
+  * NMU with permission from the maintainer
+  * Release Manager:
+    SASL 2.1.18 (currently in sarge) is very unusable.  Please accept
+    this upload for sarge.  The main reasons justifying this are:
+    * Security fixes from upstream: at least one buffer overflow
+      was plugged in 2.1.19, and the code was made more secure, which may
+      have plugged other latent security bugs.
+    * Essential feature: 2.1.18 has a very bad regression in that saslauthd
+      cannot support realms embedded inside the username as previous
+      versions did.  However, that regression is exactly how it should be
+      behaving since day one, never mind that too many setups are hopeless
+      with the realm information out-of-band.  2.1.19 adds a "-r" option to
+      saslauthd which restores the former behaviour.  Both behaviours are
+      needed, depending on the SASL mechs being used (one sends the realm
+      out-of-band, the other in-band).  Users have complained loudly about
+      this issue, not only in Debian, but in the SASL and Cyrus IMAP
+      mailinglists as well.  For way too many people and setups, "-r" is
+      essential
+    * Essential bug fixes: Digest-MD5 and GSSAPI are quite broken in
+      2.1.18, and extensive fixes were applied on them in 2.1.19.  In fact,
+      2.1.18 GSSAPI does _not_ work completely right against Heimdall and
+      MIT kerberos.
+    * ABI version issue: the 2.1.19-1 Debian package was uploaded to
+      _unstable_ before the freeze.  Maybe because of that, the maintainer
+      did upgrade the shlibs dependency to 2.1.19 (I have confirmed that to be
+      required for SASL modules, so it appears to be really required).
+      Packages built in _unstable_ since them are being held back due to
+      this issue.  The best fix for packages that use libsasl2 *is* getting
+      this new version into sarge, due to all other fixes.
+  * Bugs closed in 2.1.19-1, but not ackwnoleged before:
+    * Fix FTBFS in hppa, due to broken libtool usage, thanks to Steve Langasek
+      for the patch (closes: #245818)
+    * 2.1.19 supports saslauthd "-r" option (closes: #248333, #256808)
+  * Changes in this NMU:
+    * upstream CVS: plugins/digestmd5.c: Fix handling of client realm callback
+    * upstream CVS: plugins/gssapi.c: Memory management cleanup
+    * upstream CVS: configure.in, plugins/gssapi.c: Wrap all GSS calls
+      in mutexes when required by the implementation (closes: #202836)
+      THIS PATCH PROBABLY SHOULD BE SET TO DISABLED BY DEFAULT WHEN MIT 
+      KERBEROS 1.3.5 ENTERS UNSTABLE
+      (see https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2255)
+    * Libtool is refreshed at every build, so this upload closes: #262339
+    * debian/control: build-depend on debhelper (>= 4)
+    * debian/control: build-depend on libtool (>= 1.5.6) instead of (>=
+      1.5.2-1)
+    * Fix initscript to return status 0 if stop called when daemon is
+      already stopped (closes: #242184)
+
+ -- Henrique de Moraes Holschuh <hmh@debian.org>  Sat, 14 Aug 2004 13:04:38 -0300
+
+cyrus-sasl2 (2.1.19-1) unstable; urgency=medium
+
+  * New upstream version (Closes: #259503, #259658)
+  * Acknowledge the last NMU (closes: #254818)
+  * Build against libdb4.2 (closes: #253894)
+  * Fixed the path to saslauthd.conf in the saslauthd 
+    man page (Closes: #254454)
+  
+ -- Dima Barsky <dima@debian.org>  Sun,  4 Jul 2004 20:38:53 +0100
+
+cyrus-sasl2 (2.1.18-4.1) unstable; urgency=low
+
+  * NMU.
+  * Fix FTBFS, non-PIC in shared lib (closes: #254818).
+
+ -- Matthias Klose <doko@debian.org>  Fri, 21 May 2004 08:02:44 +0200
+
+cyrus-sasl2 (2.1.18-4) unstable; urgency=medium
+
+  * Added the build dependency on libtool
+
+ -- Dima Barsky <dima@debian.org>  Mon, 19 Apr 2004 13:46:23 +0100
+
+cyrus-sasl2 (2.1.18-3) unstable; urgency=medium
+
+  * Update config.{sub,guess} at the build time
+  * Added conflict with old MIT kerberos packages (Closes: #240714)
+
+ -- Dima Barsky <dima@debian.org>  Sun, 18 Apr 2004 18:02:48 +0100
+
+cyrus-sasl2 (2.1.18-2) unstable; urgency=low
+
+  * Renamed libsasl2-modules-mysql to libsasl2-modules-sql
+  * Reduced some packages' priority to optional, only the core remain important.
+  * Enabled KRB4 (should've done it in 2.1.18-1).
+
+ -- Dima Barsky <dima@debian.org>  Sun, 21 Mar 2004 01:07:40 +0000
+
+cyrus-sasl2 (2.1.18-1) unstable; urgency=low
+
+  * New upstream release (Closes: #232086)
+  * Revised Build-Depends list (Closes: #212615)
+  * Fixed typo in debian/control, thanks to hmh@debian.org (Closes: #213521)
+  * Fixed mutex handling (Closes: #223253)
+  * Use single -a for several mechanisms in /etc/init.d/saslauthd
+    (Closes: #202354)
+  * Fixed sasltestsuite (Closes: #217538)
+
+ -- Dima Barsky <dima@debian.org>  Sat, 13 Mar 2004 16:16:26 +0000
+
+cyrus-sasl2 (2.1.15-6) unstable; urgency=low
+
+  * Acknowledging the last two NMUs (Closes: #213510, #212945, #212318, #211958)
+  * Added -fno-strict-aliasing flag (Closes: #215862)
+
+ -- Dima Barsky <dima@debian.org>  Sun, 26 Oct 2003 01:26:53 +0100
+
+cyrus-sasl2 (2.1.15-5.2) unstable; urgency=low
+
+  * NMU
+  * Eeek, kill acinclude.m4 (what the FUCK is it doing there anyway?!)
+    so as to correctly update the libtool environment (Closes: #213510)
+  * While at it fix some stuff in the control file:
+    + Section: libs for libsasl2-* since SASL runtime environment is NOT
+      a devel suite
+  * Document rather bluntly the extreme need for sasl modules for this
+    lib to actually work in README.Debian
+
+ -- Henrique de Moraes Holschuh <hmh@debian.org>  Tue, 30 Sep 2003 21:14:56 -0300
+
+cyrus-sasl2 (2.1.15-5.1) unstable; urgency=low
+
+  * NMU
+  * Rebuild, to get correct heimdal dependencies.  Also add comerr-dev to
+    build-dependency list (Closes: #212945)
+  * Build-depend on libtool1.4 (Closes: #212318)
+
+ -- Henrique de Moraes Holschuh <hmh@debian.org>  Tue, 30 Sep 2003 13:56:28 -0300
+
+cyrus-sasl2 (2.1.15-5) unstable; urgency=low
+
+  * Set priority to "important" (Closes: #202876)
+  * Run aclocal,autoconf,automake, and autoheader in saslauthd
+    directory as well as the top one (Closes: #203096)
+  * Registered a conflict between *-heimdal packages and *-mit ones
+    (Closes: #202838)
+  * Grabbed doc/components.html from the SASL CVS (Closes: #202642)
+ -- Dima Barsky <dima@debian.org>  Thu, 31 Jul 2003 21:17:09 +0100
+
+cyrus-sasl2 (2.1.15-4) unstable; urgency=low
+
+  * Removed build dependency on libopenafs-dev, it was only required for
+    SASL1. SASL2 can take the DES library from libssl-dev (Closes: #202569).
+
+ -- Dima Barsky <dima@debian.org>  Wed, 23 Jul 2003 12:50:59 +0100
+
+cyrus-sasl2 (2.1.15-3) unstable; urgency=low
+
+  * Added build dependency on groff-base
+
+ -- Dima Barsky <dima@debian.org>  Mon, 21 Jul 2003 12:39:50 +0100
+
+cyrus-sasl2 (2.1.15-2) unstable; urgency=low
+
+  * Added build dependency on dbs and libopenafs-dev
+
+ -- Dima Barsky <dima@debian.org>  Mon, 21 Jul 2003 11:43:38 +0100
+
+cyrus-sasl2 (2.1.15-1) unstable; urgency=low
+
+  * New upstream release
+  * Added LDAP_SASLAUTHD doc file to sasl2-bin (Closes: #201893)
+  * Added build dependency on automake1.4 and autoconf2.13
+
+ -- Dima Barsky <dima@debian.org>  Tue, 15 Jul 2003 21:39:08 +0100
+
+cyrus-sasl2 (2.1.14-1) unstable; urgency=low
+
+  * New upstream release
+  * Changed the build system to dbs.
+  * THe GSSAPI segfault has been fixed upstream (Closes: #192502)
+  * Fixed a typo in the sasl2-bin description (Closes: #197070, #193958)
+  * Made a separate package for the MYSQL plugin (Closes: #188716, #166702, #190673)
+  * Moved libsasldb plugin into the libsasl2 package.
+
+ -- Dima Barsky <dima@debian.org>  Mon, 14 Jul 2003 07:04:47 +0100
+
+cyrus-sasl2 (2.1.12-1) unstable; urgency=low
+
+  * New upstream release
+  * Changed variable 'c' in testsuite.c:2871 from char to int
+    (Closes: #177426)
+  * Recompiled with the latest heimdal libraries (Closes: #179810)
+  * Removed RFC documents from libsasl2 (Closes: #178987)
+
+ -- Dima Barsky <dima@debian.org>  Sat, 15 Mar 2003 22:29:25 +0000
+
+cyrus-sasl2 (2.1.10-1) unstable; urgency=low
+
+  * New upstream release (Closes: #172453)
+  * Included sasldbconverter2 (Closes: #170740)
+  * Removed duplicate "--with-ldap" from debian/rules (Closes: #167858)
+  * Added "--sysconfdir=/etc" to debian/rules (Closes: #167855)
+  * Changed libsasl2 -> libsasl2-modules dependency from Suggests to
+    Recommends (Closes: #171938)
+  * Added "--enable-alwaystrue" to debian/rules (Closes: #170495)
+  * Included testsaslauthd (Closes: #167876)
+  * Included sasltestsuite (Closes: #166538)
+
+ -- Dima Barsky <dima@debian.org>  Mon, 23 Dec 2002 16:07:31 +0000
+
+cyrus-sasl2 (2.1.9-5) unstable; urgency=low
+
+  * Updated libtool files inside saslauthd/config/ (Closes: #166810)
+  * Enabled NTLM module
+  * Enabled LDAP support for saslauthd
+
+ -- Dima Barsky <dima@debian.org>  Mon, 28 Oct 2002 21:12:56 +0000
+
+cyrus-sasl2 (2.1.9-4) unstable; urgency=low
+
+  * Enabled DO_DLOPEN unconditionally in configure.in
+
+ -- Dima Barsky <dima@debian.org>  Mon, 28 Oct 2002 00:20:55 +0000
+
+cyrus-sasl2 (2.1.9-3) unstable; urgency=low
+
+  * Added AM_MAINTAINER_MODE to configure.in 
+
+ -- Dima Barsky <dima@debian.org>  Sat, 26 Oct 2002 01:46:13 +0100
+
+cyrus-sasl2 (2.1.9-2) unstable; urgency=low
+
+  * Added dbconverter-2 as /usr/sbin/sasldbconverter-2
+  * Added build dependency on zlib1g-dev
+
+ -- Dima Barsky <dima@debian.org>  Fri, 25 Oct 2002 22:28:30 +0100
+
+cyrus-sasl2 (2.1.9-1) unstable; urgency=low
+
+  * New upstream release
+  * shlibs now refers to the current version (Closes: #163845)
+  * sasl2-bin now uses dpkg-statoverride to manage permissions of 
+    /var/run/saslauthd and /etc/sasldb2 (Closes: #163042, #164393)
+
+ -- Dima Barsky <dima@debian.org>  Mon, 21 Oct 2002 22:01:01 +0100
+
+cyrus-sasl2 (2.1.7-3) unstable; urgency=low
+
+  * Added shlibs file (Closes: #162927)
+
+ -- Dima Barsky <dima@debian.org>  Tue,  1 Oct 2002 17:44:36 +0100
+
+cyrus-sasl2 (2.1.7-2) unstable; urgency=low
+
+  * Build with versioned symbols
+  * Another split: KERBEROS mechanism is now in a separate module (Closes: #154153)
+  * README.Debian has been updated a while ago, we can 
+    close bug 146543 now. (Closes: #146543)
+
+ -- Dima Barsky <dima@debian.org>  Mon, 30 Sep 2002 17:23:12 +0100
+
+cyrus-sasl2 (2.1.7-1) unstable; urgency=low
+
+  * New upstream version (Closes: #156286, #158296)
+  * Enabled ldap and mysql (Closes: #155025, #154965)
+  * /etc/sasldb2 and /var/run/saslauthd now belong to the group "sasl" 
+    and are group-readable (Closes: #151798)
+
+ -- Dima Barsky <dima@debian.org>  Thu, 25 Sep 2002 15:51:12 +0100
+
+cyrus-sasl2 (2.1.6-1) unstable; urgency=low
+
+  * New upstream version
+  * Make sure autoheader is not invoked at the build stage (Closes: #153127)
+
+ -- Dima Barsky <dima@debian.org>  Wed, 17 Jul 2002 12:19:29 +0100
+
+cyrus-sasl2 (2.1.5-7) unstable; urgency=low
+
+  * Separated heimdal-dependent plugins into the 
+    libsasl2-modules-gssapi-heimdal package
+  * Updated libtool to the latest version (Closes: #146229)
+  * Changed permissions on /var/run/saslauthd to 711 (Closes: #151796)
+
+ -- Dima Barsky <dima@debian.org>  Thu,  4 Jul 2002 09:24:42 +0100
+
+cyrus-sasl2 (2.1.5-6) unstable; urgency=low
+
+  * Removed build dependency on automake
+
+ -- Dima Barsky <dima@debian.org>  Wed,  3 Jul 2002 09:51:47 +0100
+
+cyrus-sasl2 (2.1.5-5) unstable; urgency=low
+
+  * Added a few packages to the Build-Depends list
+
+ -- Dima Barsky <dima@debian.org>  Tue,  2 Jul 2002 16:22:57 +0100
+
+cyrus-sasl2 (2.1.5-4) unstable; urgency=low
+
+  * Enabled DES, KERBEROS, and GSSAPI
+  * Merged all modules into the package libsasl2-modules
+
+ -- Dima Barsky <dima@debian.org>  Tue,  2 Jul 2002 13:10:10 +0100
+
+cyrus-sasl2 (2.1.5-3) unstable; urgency=low
+
+  * Enabled sasldb in saslauthd (Closes: 146791)
+
+ -- Dima Barsky <dima@debian.org>  Tue,  2 Jul 2002 11:50:03 +0100
+
+cyrus-sasl2 (2.1.5-2) unstable; urgency=low
+
+  * Preserve /usr/lib/sasl2/*.la (Closes: #151567)
+
+ -- Dima Barsky <dima@debian.org>  Mon,  1 Jul 2002 19:24:21 +0100
+
+cyrus-sasl2 (2.1.5-1) unstable; urgency=low
+
+  * New upstream version (Closes: #133458, #148693, #131792, #150957)
+  * Added explicit rule for building libsasl2.a (Closes: #144200)
+  * Added a warning about /dev/random to README.Debian (Closes: #146982)
+  * /var/run/saslauthd/mux is now world-readable (Closes: #147484)
+  * Modified sasl2-bin.default to make it clear that MECHANISMS is a 
+    space separated lists, so it should be quoted if there is more 
+    than one item in it (Closes: #146790)
+
+ -- Dima Barsky <dima@debian.org>  Sun, 30 Jun 2002 01:19:16 +0100
+
+cyrus-sasl2 (2.1.2-2) unstable; urgency=low
+
+  * Fixed saslauthd man page (Closes: #131791)
+
+ -- Dima Barsky <dima@debian.org>  Wed, 27 Mar 2002 15:27:39 +0000
+
+cyrus-sasl2 (2.1.2-1) unstable; urgency=low
+
+  * New upstream version
+  * Changed --without-gssapi to --disable-gssapi
+  * Closes: #131792
+  
+ -- Dima Barsky <dima@debian.org>  Tue, 26 Mar 2002 22:29:12 +0000
+
+cyrus-sasl2 (2.1.1-0.2) unstable; urgency=low
+
+  * Fix a naming problem with the init script.
+  * Fix problems with the init script itself.
+
+ -- Michael Alan Dorman <mdorman@debian.org>  Sun, 17 Mar 2002 15:44:45 -0500
+
+cyrus-sasl2 (2.1.1-0.1) unstable; urgency=low
+
+  * New upstream version
+  * Total rewrite of debian/rules, fold everything into nice, standard debhelper usage
+  * Functionality to auto-start saslauthd, which configury through /etc/default/saslauthd
+
+ -- Michael Alan Dorman <mdorman@debian.org>  Sun, 17 Mar 2002 15:09:55 -0500
+
+cyrus-sasl2 (2.1.0-2) unstable; urgency=low
+
+  * Added build dependency on libopie-dev
+
+ -- Dima Barsky <dima@debian.org>  Sun, 27 Jan 2002 20:07:15 +0000
+
+cyrus-sasl2 (2.1.0-1) unstable; urgency=low
+
+  * Initial release of cyrus-sasl2
+
+ -- Dima Barsky <dima@debian.org>  Sun, 20 Jan 2002 14:36:45 +0000

Added: cyrus-sasl2-mit/debian/current/debian/control
===================================================================
--- cyrus-sasl2-mit/debian/current/debian/control	2005-12-17 02:10:03 UTC (rev 2291)
+++ cyrus-sasl2-mit/debian/current/debian/control	2005-12-17 02:10:04 UTC (rev 2292)
@@ -0,0 +1,103 @@
+Source: cyrus-sasl2
+Build-Depends: autotools-dev, debhelper (>= 4), libpam0g-dev, zlib1g-dev, libdb4.2-dev (>= 3.2.9-14), libopie-dev (>= 2.32-8), chrpath, heimdal-dev (>= 0.4e-16), libssl-dev (>= 0.9.6d-1), kerberos4kth-dev (>= 1.1-11), libmysqlclient10-dev (>= 3.23.52), libpq-dev, libldap2-dev (>= 2.1.21), automake1.7 (>= 1.7.9), autoconf (>=2.57), dbs, groff-base, comerr-dev, libtool (>= 1.5.6)
+Build-Conflicts: autoconf2.13, automake1.4
+Section: devel
+Priority: important
+Maintainer: Dima Barsky <dima@debian.org>
+Standards-Version: 3.6.1
+
+Package: sasl2-bin
+Architecture: any
+Section: utils
+Depends: ${shlibs:Depends}, base-passwd (>= 3.4.2)
+Description: Programs for manipulating the SASL users database
+ This is the Cyrus SASL API implementation, version 2. See package
+ libsasl2 and RFC 2222 for more information. 
+ .
+ This package contains common binary files for plugin modules.
+
+Package: libsasl2-modules
+Architecture: any
+Section: libs
+Replaces: libsasl2-digestmd5-plain, libsasl2-modules-plain
+Conflicts: libsasl2-digestmd5-plain, libsasl2-modules-plain
+Depends: libsasl2 (= ${Source-Version}), ${shlibs:Depends}
+Description: Pluggable Authentication Modules for SASL
+ This is the Cyrus SASL API implementation, version 2. See package
+ libsasl2 and RFC 2222 for more information. 
+ .
+ This package provides the following SASL modules: LOGIN, PLAIN, ANONYMOUS,  
+ OTP, CRAM-MD5, and DIGEST-MD5 (with DES support).
+
+Package: libsasl2-modules-sql
+Architecture: any
+Priority: optional
+Section: libs
+Conflicts: libsasl2-modules (<< 2.1.14-1)
+Replaces: libsasl2-modules-mysql
+Depends: libsasl2 (= ${Source-Version}), ${shlibs:Depends}
+Description: Pluggable Authentication Modules for SASL
+ This is the Cyrus SASL API implementation, version 2. See package
+ libsasl2 and RFC 2222 for more information.
+ .
+ This package provides the SQL plugin, which supports MySQL and PostgreSQL.
+
+Package: libsasl2-modules-gssapi-heimdal
+Architecture: any
+Priority: optional
+Section: libs
+Replaces: libsasl2-modules-plain (<= 2.1.5-6)
+Conflicts: libsasl2-modules-plain (<= 2.1.5-6), libsasl2-gssapi-mit
+Depends: libsasl2 (= ${Source-Version}), ${shlibs:Depends}
+Description: Pluggable Authentication Modules for SASL
+ This is the Cyrus SASL API implementation, version 2. See package
+ libsasl2 and RFC 2222 for more information. 
+ .
+ This package provides the GSSAPI plugin, compiled with the Heimdal library.
+
+Package: libsasl2-modules-kerberos-heimdal
+Architecture: any
+Priority: optional
+Section: libs
+Replaces: libsasl2-modules-plain (<= 2.1.5-6)
+Conflicts: libsasl2-modules-plain (<= 2.1.5-6), libsasl2-modules (<= 2.1.7-1), libsasl2-krb4-mit
+Depends: libsasl2 (= ${Source-Version}), ${shlibs:Depends}
+Description: Pluggable Authentication Modules for SASL
+ This is the Cyrus SASL API implementation, version 2. See package
+ libsasl2 and RFC 2222 for more information. 
+ .
+ This package provides the KERBEROS plugin, compiled with the Heimdal library.
+
+Package: libsasl2
+Architecture: any
+Section: libs
+Depends: ${shlibs:Depends}
+Conflicts: libsasl2-gssapi-mit (<< 2.1.18), libsasl2-krb4-mit (<< 2.1.18)
+Recommends: libsasl2-modules (= ${Source-Version})
+Description: Authentication abstraction library
+ SASL is the Simple Authentication and Security Layer, a method for
+ adding authentication support to connection-based protocols. To use
+ SASL, a protocol includes a command for identifying and
+ authenticating a user to a server and for optionally negotiating
+ protection of subsequent protocol interactions. If its use is
+ negotiated, a security layer is inserted between the protocol and the
+ connection. See RFC 2222 for more information.
+ .
+ This is the Cyrus SASL API implementation, version 2.
+ .
+ Any of: ANONYMOUS, CRAM-MD5, DIGEST-MD5, GSSAPI (MIT Kerberos 5 or Heimdal
+ Kerberos 5), KERBEROS_V4, OTP, PLAIN, or LOGIN can be used. This package
+ is unusable without the SASL plugins. Most likely you will need to install
+ the libsasl2-modules package.
+
+Package: libsasl2-dev
+Architecture: any
+Priority: optional
+Section: libdevel
+Depends: libsasl2 (= ${Source-Version}), libc6-dev
+Conflicts: libsasl-dev
+Description: Development files for authentication abstraction library
+ This is the Cyrus SASL API implementation, version 2. See package
+ libsasl2 and RFC 2222 for more information. 
+ .
+ You need this package if you want to compile programs with SASL support

Revision history for this message

In Debian Bug tracker #275431, Sam Hartman (hartmans) wrote on 2005-12-17: Debian Kerberosish: r2296 - in cyrus-sasl2-mit: . debian debian/current debian/current/cyrus-sasl2-mit debian/current/cyrus-sasl2-mit/debian debian/current/cyrus-sasl2-mit/debian/patches debian/current/cyrus-sasl2-mit/p

#7

Download full text (31.4 KiB)

tags 332703 pending
tags 285605 pending
tags 276637 pending
tags 275431 pending
tags 274087 pending
tags 245818 pending
tags 248333 pending
tags 256808 pending
tags 202836 pending
tags 262339 pending
tags 242184 pending
tags 259503 pending
tags 259658 pending
tags 254818 pending
tags 253894 pending
tags 254454 pending
tags 254818 pending
tags 240714 pending
tags 232086 pending
tags 212615 pending
tags 213521 pending
tags 223253 pending
tags 202354 pending
tags 217538 pending
tags 213510 pending
tags 212945 pending
tags 212318 pending
tags 211958 pending
tags 215862 pending
tags 213510 pending
tags 212945 pending
tags 212318 pending
tags 202876 pending
tags 203096 pending
tags 202838 pending
tags 202642 pending
tags 202569 pending
tags 201893 pending
tags 192502 pending
tags 197070 pending
tags 193958 pending
tags 188716 pending
tags 166702 pending
tags 190673 pending
tags 177426 pending
tags 179810 pending
tags 178987 pending
tags 172453 pending
tags 170740 pending
tags 167858 pending
tags 167855 pending
tags 171938 pending
tags 170495 pending
tags 167876 pending
tags 166538 pending
tags 166810 pending
tags 163845 pending
tags 163042 pending
tags 164393 pending
tags 162927 pending
tags 154153 pending
tags 146543 pending
tags 156286 pending
tags 158296 pending
tags 155025 pending
tags 154965 pending
tags 151798 pending
tags 153127 pending
tags 146229 pending
tags 151796 pending
tags 146791 pending
tags 151567 pending
tags 133458 pending
tags 148693 pending
tags 131792 pending
tags 150957 pending
tags 144200 pending
tags 146982 pending
tags 147484 pending
tags 146790 pending
tags 131791 pending
tags 131792 pending
thanks

Author: hartmans
Date: 2005-12-16 21:10:49 -0500 (Fri, 16 Dec 2005)
New Revision: 2296

Added:
   cyrus-sasl2-mit/debian/current/
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/cyrus-sasl-2.1.19.tar.gz
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/13_libdb42_autotools.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/README.Debian
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/changelog
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/control
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/copyright
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/libsasl2-dev.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/libsasl2-modules-gssapi-heimdal.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/libsasl2-modules-kerberos-heimdal.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/libsasl2-modules-sql.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/libsasl2-modules.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/libsasl2.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/00_strict-aliasing.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/01_maintainer_mode.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/02_versioned_symbols.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-...

tags 332703 pending
tags 285605 pending
tags 276637 pending
tags 275431 pending
tags 274087 pending
tags 245818 pending
tags 248333 pending
tags 256808 pending
tags 202836 pending
tags 262339 pending
tags 242184 pending
tags 259503 pending
tags 259658 pending
tags 254818 pending
tags 253894 pending
tags 254454 pending
tags 254818 pending
tags 240714 pending
tags 232086 pending
tags 212615 pending
tags 213521 pending
tags 223253 pending
tags 202354 pending
tags 217538 pending
tags 213510 pending
tags 212945 pending
tags 212318 pending
tags 211958 pending
tags 215862 pending
tags 213510 pending
tags 212945 pending
tags 212318 pending
tags 202876 pending
tags 203096 pending
tags 202838 pending
tags 202642 pending
tags 202569 pending
tags 201893 pending
tags 192502 pending
tags 197070 pending
tags 193958 pending
tags 188716 pending
tags 166702 pending
tags 190673 pending
tags 177426 pending
tags 179810 pending
tags 178987 pending
tags 172453 pending
tags 170740 pending
tags 167858 pending
tags 167855 pending
tags 171938 pending
tags 170495 pending
tags 167876 pending
tags 166538 pending
tags 166810 pending
tags 163845 pending
tags 163042 pending
tags 164393 pending
tags 162927 pending
tags 154153 pending
tags 146543 pending
tags 156286 pending
tags 158296 pending
tags 155025 pending
tags 154965 pending
tags 151798 pending
tags 153127 pending
tags 146229 pending
tags 151796 pending
tags 146791 pending
tags 151567 pending
tags 133458 pending
tags 148693 pending
tags 131792 pending
tags 150957 pending
tags 144200 pending
tags 146982 pending
tags 147484 pending
tags 146790 pending
tags 131791 pending
tags 131792 pending
thanks

Author: hartmans
Date: 2005-12-16 21:10:49 -0500 (Fri, 16 Dec 2005)
New Revision: 2296

Added:
   cyrus-sasl2-mit/debian/current/
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/cyrus-sasl-2.1.19.tar.gz
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/13_libdb42_autotools.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/README.Debian
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/changelog
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/control
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/copyright
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/libsasl2-dev.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/libsasl2-modules-gssapi-heimdal.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/libsasl2-modules-kerberos-heimdal.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/libsasl2-modules-sql.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/libsasl2-modules.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/libsasl2.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/00_strict-aliasing.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/01_maintainer_mode.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/02_versioned_symbols.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/03_saslauthd_mdoc.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/04_missing_man_pages.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/05_dbconverter.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/06_testsuite.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/08_mutexdiff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/09_postgres_header.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/10_fix_sasldb.al.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/11_remove_rpath.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/12_pr245818.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/13_libdb42_autotools.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/14_manpages_section.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/15_lock_sasl_set_alloc.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/20_2368_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/20_2369_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/20_2370_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/20_2371_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/20_2372_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/20_2373_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/21_237x_1_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/21_237x_2_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/21_237x_3_sasl_upstream_cvs.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/22_237x_3_sasl_upstream_cvs-FIX.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/23_gcc40_static.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/patches/24_openssl098.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/rules
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/sasl2-bin.default
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/sasl2-bin.files
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/sasl2-bin.init
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/sasl2-bin.postinst
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/p/
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/p/02_versioned_symbols.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/p/05_dbconverter.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/p/06_testsuite.diff
   cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/p/11_remove_rpath.diff
Modified:
   cyrus-sasl2-mit/
Log:
 r2303@luminous:  hartmans | 2005-12-16 21:09:25 -0500
 Set up directory structure

Property changes on: cyrus-sasl2-mit
___________________________________________________________________
Name: svk:merge
   - 70122675-b502-0410-88ba-d8d3b677d9fd:/cs2:2302
   + 70122675-b502-0410-88ba-d8d3b677d9fd:/cs2:2303

Added: cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/cyrus-sasl-2.1.19.tar.gz
===================================================================
(Binary files differ)

Property changes on: cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/cyrus-sasl-2.1.19.tar.gz
___________________________________________________________________
Name: svn:mime-type
   + application/x-gzip

Added: cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/13_libdb42_autotools.diff
===================================================================
--- cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/13_libdb42_autotools.diff	2005-12-17 02:10:48 UTC (rev 2295)
+++ cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/13_libdb42_autotools.diff	2005-12-17 02:10:49 UTC (rev 2296)
@@ -0,0 +1,22 @@
+diff -Nru3 ./cyrus-sasl-2.1.18/cmulocal/berkdb.m4 ../build-tree.new/cyrus-sasl-2.1.18/cmulocal/berkdb.m4
+--- ./cyrus-sasl-2.1.18/cmulocal/berkdb.m4	2004-02-14 21:13:03.000000000 +0000
++++ ../build-tree.new/cyrus-sasl-2.1.18/cmulocal/berkdb.m4	2004-07-04 12:42:28.000000000 +0100
+@@ -211,11 +211,13 @@
+ 	    BDB_LIBADD=""
+ 	fi
+ 
+-        for dbname in db-4.2 db4.2 db42 db-4.1 db4.1 db41 db-4.0 db4.0 db-4 db40 db4 db-3.3 db3.3 db33 db-3.2 db3.2 db32 db-3.1 db3.1 db31 db-3 db30 db3 db
+-          do
+-            AC_CHECK_LIB($dbname, db_create, BDB_LIBADD="$BDB_LIBADD -l$dbname";
+-              dblib="berkeley"; break, dblib="no")
+-          done
++#        for dbname in db-4.2 db4.2 db42 db-4.1 db4.1 db41 db-4.0 db4.0 db-4 db40 db4 db-3.3 db3.3 db33 db-3.2 db3.2 db32 db-3.1 db3.1 db31 db-3 db30 db3 db
++#          do
++#            AC_CHECK_LIB($dbname, db_create, BDB_LIBADD="$BDB_LIBADD -l$dbname";
++#              dblib="berkeley"; break, dblib="no")
++#          done
++        BDB_LIBADD="$BDB_LIBADD -ldb-4.2";
++	dblib="berkeley";
+         if test "$dblib" = "no"; then
+           AC_CHECK_LIB(db, db_open, BDB_LIBADD="$BDB_LIBADD -ldb";
+             dblib="berkeley"; dbname=db,

Property changes on: cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/13_libdb42_autotools.diff
___________________________________________________________________
Name: svn:mime-type
   + text/x-patch

Added: cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/README.Debian
===================================================================
--- cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/README.Debian	2005-12-17 02:10:48 UTC (rev 2295)
+++ cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/README.Debian	2005-12-17 02:10:49 UTC (rev 2296)
@@ -0,0 +1,26 @@
+==================================================================
+
+IMPORTANT:
+You MUST install one of the libsasl2-modules* packages for SASL to
+work.  Otherwise postfix-tls won't speak TLS, Cyrus IMAPd won't 
+ever allow any users to login, and other SASL apps will malfuntion
+in weird ways and there will be even more pain and sorrow in the 
+world (yours).
+
+==================================================================
+
+SASL2 uses /dev/random, which can block on a machine with too many
+connections. If you are going to use it on a busy machine, consider
+installing an entropy gathering card.
+
+Use dpkg-statoverride to change the permission and the ownership 
+of /var/run/saslauthd and /etc/sasldb2. 
+
+The following RFC documents used to included into the libsasl2 package
+
+rfc1321.txt rfc1939.txt rfc2104.txt rfc2195.txt rfc2222.txt
+rfc2243.txt rfc2245.txt rfc2289.txt rfc2444.txt rfc2595.txt
+rfc2831.txt rfc2945.txt rfc3174.txt
+
+They are not part of any cyrus-sasl package any more, you can find
+them in doc-rfc-std or doc-rfc-std-proposed Debian packages.

Added: cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/changelog
===================================================================
--- cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/changelog	2005-12-17 02:10:48 UTC (rev 2295)
+++ cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/changelog	2005-12-17 02:10:49 UTC (rev 2296)
@@ -0,0 +1,431 @@
+cyrus-sasl2 (2.1.19-1.7) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * fix FTBFS in plugins/ntlm.c with patch 24. Closes: #332703
+
+ -- Andreas Barth <aba@not.so.argh.org>  Sat,  5 Nov 2005 20:07:50 +0100
+
+cyrus-sasl2 (2.1.19-1.6) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Medium-urgency upload for RC bugfixes.
+  * Drop the extern declaration of a static variable global_callbacks,
+    allowing the package to build with gcc-4.0 (closes: #285605).
+  * Build-Depend on libpq-dev instead of on postgresql-dev, as the
+    latter package name is obsolete.  (Ref: #315177)
+
+ -- Steve Langasek <vorlon@debian.org>  Wed, 24 Aug 2005 17:41:57 -0700
+
+cyrus-sasl2 (2.1.19-1.5) unstable; urgency=emergency
+
+  * NMU
+  * Clean-up 2.1.19-1.4 NMU:
+    + Since we were using an upstream CVS patch, add another patch
+      fixing it instead of changing the (bad) upstream CVS patch;
+      Sent this new patch upstream
+    + Set *path to NULL, not to 0
+  * Add Build-Conflicts: autoconf2.13, automake1.4
+  * We want something easy to merge/further fix in sarge, so this cleanup
+    is a good idea
+
+ -- Henrique de Moraes Holschuh <hmh@debian.org>  Sat, 16 Oct 2004 17:50:19 -0300
+
+cyrus-sasl2 (2.1.19-1.4) unstable; urgency=low
+
+  * NMU
+  * fix the security fix: Initialize *path with 0.
+    Closes: #276637.
+
+ -- Andreas Barth <aba@debian.org>  Fri, 15 Oct 2004 20:26:41 +0200
+ 
+cyrus-sasl2 (2.1.19-1.3) unstable; urgency=high
+
+  * NMU
+  * Fix minor issue with -1.2 in patch 15, to squash a compiler
+    warning (just in case it becomes more than a warning in some arch):
+    add missing "int" to extern declaration
+
+ -- Henrique de Moraes Holschuh <hmh@debian.org>  Fri,  8 Oct 2004 13:06:28 -0300
+
+cyrus-sasl2 (2.1.19-1.2) unstable; urgency=high
+
+  * NMU, since I am not sure Dima is back yet
+  * SECURITY FIX: SASL_PATH environment variable must not be honoured on
+    setuid environments, otherwise we have a local privilege escalation
+    exploit (CVE: CAN-2004-0884), related advisories: RHSA-2004:546-02;
+    GLSA 200410-05
+    * upstream CVS: lib/common.c: don't honor SASL_PATH in setuid
+      environment. from Gentoo (CVE CAN-2004-0884); (closes: #275431)
+  * upstream CVS: plugins/kerberos4.c: document weirdness with openssl DES
+  * upstream CVS: plugins/cram.c,plugins/anonymous.c,plugins/login.c,
+    plugins/plain.c,plugins/sasldb.c: Fixed several 64 bit portability
+    warnings
+  * Forward port sasl_set_alloc locking patch from SASL 1.5, to avoid
+    problems with the braindead idea of globals SASL has, and with libraries
+    that think they can get around mucking with them (hello openldap!)
+    (closes: #274087)
+
+ -- Henrique de Moraes Holschuh <hmh@debian.org>  Fri,  8 Oct 2004 11:15:39 -0300
+
+cyrus-sasl2 (2.1.19-1.1) unstable; urgency=medium
+
+  * NMU with permission from the maintainer
+  * Release Manager:
+    SASL 2.1.18 (currently in sarge) is very unusable.  Please accept
+    this upload for sarge.  The main reasons justifying this are:
+    * Security fixes from upstream: at least one buffer overflow
+      was plugged in 2.1.19, and the code was made more secure, which may
+      have plugged other latent security bugs.
+    * Essential feature: 2.1.18 has a very bad regression in that saslauthd
+      cannot support realms embedded inside the username as previous
+      versions did.  However, that regression is exactly how it should be
+      behaving since day one, never mind that too many setups are hopeless
+      with the realm information out-of-band.  2.1.19 adds a "-r" option to
+      saslauthd which restores the former behaviour.  Both behaviours are
+      needed, depending on the SASL mechs being used (one sends the realm
+      out-of-band, the other in-band).  Users have complained loudly about
+      this issue, not only in Debian, but in the SASL and Cyrus IMAP
+      mailinglists as well.  For way too many people and setups, "-r" is
+      essential
+    * Essential bug fixes: Digest-MD5 and GSSAPI are quite broken in
+      2.1.18, and extensive fixes were applied on them in 2.1.19.  In fact,
+      2.1.18 GSSAPI does _not_ work completely right against Heimdall and
+      MIT kerberos.
+    * ABI version issue: the 2.1.19-1 Debian package was uploaded to
+      _unstable_ before the freeze.  Maybe because of that, the maintainer
+      did upgrade the shlibs dependency to 2.1.19 (I have confirmed that to be
+      required for SASL modules, so it appears to be really required).
+      Packages built in _unstable_ since them are being held back due to
+      this issue.  The best fix for packages that use libsasl2 *is* getting
+      this new version into sarge, due to all other fixes.
+  * Bugs closed in 2.1.19-1, but not ackwnoleged before:
+    * Fix FTBFS in hppa, due to broken libtool usage, thanks to Steve Langasek
+      for the patch (closes: #245818)
+    * 2.1.19 supports saslauthd "-r" option (closes: #248333, #256808)
+  * Changes in this NMU:
+    * upstream CVS: plugins/digestmd5.c: Fix handling of client realm callback
+    * upstream CVS: plugins/gssapi.c: Memory management cleanup
+    * upstream CVS: configure.in, plugins/gssapi.c: Wrap all GSS calls
+      in mutexes when required by the implementation (closes: #202836)
+      THIS PATCH PROBABLY SHOULD BE SET TO DISABLED BY DEFAULT WHEN MIT 
+      KERBEROS 1.3.5 ENTERS UNSTABLE
+      (see https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2255)
+    * Libtool is refreshed at every build, so this upload closes: #262339
+    * debian/control: build-depend on debhelper (>= 4)
+    * debian/control: build-depend on libtool (>= 1.5.6) instead of (>=
+      1.5.2-1)
+    * Fix initscript to return status 0 if stop called when daemon is
+      already stopped (closes: #242184)
+
+ -- Henrique de Moraes Holschuh <hmh@debian.org>  Sat, 14 Aug 2004 13:04:38 -0300
+
+cyrus-sasl2 (2.1.19-1) unstable; urgency=medium
+
+  * New upstream version (Closes: #259503, #259658)
+  * Acknowledge the last NMU (closes: #254818)
+  * Build against libdb4.2 (closes: #253894)
+  * Fixed the path to saslauthd.conf in the saslauthd 
+    man page (Closes: #254454)
+  
+ -- Dima Barsky <dima@debian.org>  Sun,  4 Jul 2004 20:38:53 +0100
+
+cyrus-sasl2 (2.1.18-4.1) unstable; urgency=low
+
+  * NMU.
+  * Fix FTBFS, non-PIC in shared lib (closes: #254818).
+
+ -- Matthias Klose <doko@debian.org>  Fri, 21 May 2004 08:02:44 +0200
+
+cyrus-sasl2 (2.1.18-4) unstable; urgency=medium
+
+  * Added the build dependency on libtool
+
+ -- Dima Barsky <dima@debian.org>  Mon, 19 Apr 2004 13:46:23 +0100
+
+cyrus-sasl2 (2.1.18-3) unstable; urgency=medium
+
+  * Update config.{sub,guess} at the build time
+  * Added conflict with old MIT kerberos packages (Closes: #240714)
+
+ -- Dima Barsky <dima@debian.org>  Sun, 18 Apr 2004 18:02:48 +0100
+
+cyrus-sasl2 (2.1.18-2) unstable; urgency=low
+
+  * Renamed libsasl2-modules-mysql to libsasl2-modules-sql
+  * Reduced some packages' priority to optional, only the core remain important.
+  * Enabled KRB4 (should've done it in 2.1.18-1).
+
+ -- Dima Barsky <dima@debian.org>  Sun, 21 Mar 2004 01:07:40 +0000
+
+cyrus-sasl2 (2.1.18-1) unstable; urgency=low
+
+  * New upstream release (Closes: #232086)
+  * Revised Build-Depends list (Closes: #212615)
+  * Fixed typo in debian/control, thanks to hmh@debian.org (Closes: #213521)
+  * Fixed mutex handling (Closes: #223253)
+  * Use single -a for several mechanisms in /etc/init.d/saslauthd
+    (Closes: #202354)
+  * Fixed sasltestsuite (Closes: #217538)
+
+ -- Dima Barsky <dima@debian.org>  Sat, 13 Mar 2004 16:16:26 +0000
+
+cyrus-sasl2 (2.1.15-6) unstable; urgency=low
+
+  * Acknowledging the last two NMUs (Closes: #213510, #212945, #212318, #211958)
+  * Added -fno-strict-aliasing flag (Closes: #215862)
+
+ -- Dima Barsky <dima@debian.org>  Sun, 26 Oct 2003 01:26:53 +0100
+
+cyrus-sasl2 (2.1.15-5.2) unstable; urgency=low
+
+  * NMU
+  * Eeek, kill acinclude.m4 (what the FUCK is it doing there anyway?!)
+    so as to correctly update the libtool environment (Closes: #213510)
+  * While at it fix some stuff in the control file:
+    + Section: libs for libsasl2-* since SASL runtime environment is NOT
+      a devel suite
+  * Document rather bluntly the extreme need for sasl modules for this
+    lib to actually work in README.Debian
+
+ -- Henrique de Moraes Holschuh <hmh@debian.org>  Tue, 30 Sep 2003 21:14:56 -0300
+
+cyrus-sasl2 (2.1.15-5.1) unstable; urgency=low
+
+  * NMU
+  * Rebuild, to get correct heimdal dependencies.  Also add comerr-dev to
+    build-dependency list (Closes: #212945)
+  * Build-depend on libtool1.4 (Closes: #212318)
+
+ -- Henrique de Moraes Holschuh <hmh@debian.org>  Tue, 30 Sep 2003 13:56:28 -0300
+
+cyrus-sasl2 (2.1.15-5) unstable; urgency=low
+
+  * Set priority to "important" (Closes: #202876)
+  * Run aclocal,autoconf,automake, and autoheader in saslauthd
+    directory as well as the top one (Closes: #203096)
+  * Registered a conflict between *-heimdal packages and *-mit ones
+    (Closes: #202838)
+  * Grabbed doc/components.html from the SASL CVS (Closes: #202642)
+ -- Dima Barsky <dima@debian.org>  Thu, 31 Jul 2003 21:17:09 +0100
+
+cyrus-sasl2 (2.1.15-4) unstable; urgency=low
+
+  * Removed build dependency on libopenafs-dev, it was only required for
+    SASL1. SASL2 can take the DES library from libssl-dev (Closes: #202569).
+
+ -- Dima Barsky <dima@debian.org>  Wed, 23 Jul 2003 12:50:59 +0100
+
+cyrus-sasl2 (2.1.15-3) unstable; urgency=low
+
+  * Added build dependency on groff-base
+
+ -- Dima Barsky <dima@debian.org>  Mon, 21 Jul 2003 12:39:50 +0100
+
+cyrus-sasl2 (2.1.15-2) unstable; urgency=low
+
+  * Added build dependency on dbs and libopenafs-dev
+
+ -- Dima Barsky <dima@debian.org>  Mon, 21 Jul 2003 11:43:38 +0100
+
+cyrus-sasl2 (2.1.15-1) unstable; urgency=low
+
+  * New upstream release
+  * Added LDAP_SASLAUTHD doc file to sasl2-bin (Closes: #201893)
+  * Added build dependency on automake1.4 and autoconf2.13
+
+ -- Dima Barsky <dima@debian.org>  Tue, 15 Jul 2003 21:39:08 +0100
+
+cyrus-sasl2 (2.1.14-1) unstable; urgency=low
+
+  * New upstream release
+  * Changed the build system to dbs.
+  * THe GSSAPI segfault has been fixed upstream (Closes: #192502)
+  * Fixed a typo in the sasl2-bin description (Closes: #197070, #193958)
+  * Made a separate package for the MYSQL plugin (Closes: #188716, #166702, #190673)
+  * Moved libsasldb plugin into the libsasl2 package.
+
+ -- Dima Barsky <dima@debian.org>  Mon, 14 Jul 2003 07:04:47 +0100
+
+cyrus-sasl2 (2.1.12-1) unstable; urgency=low
+
+  * New upstream release
+  * Changed variable 'c' in testsuite.c:2871 from char to int
+    (Closes: #177426)
+  * Recompiled with the latest heimdal libraries (Closes: #179810)
+  * Removed RFC documents from libsasl2 (Closes: #178987)
+
+ -- Dima Barsky <dima@debian.org>  Sat, 15 Mar 2003 22:29:25 +0000
+
+cyrus-sasl2 (2.1.10-1) unstable; urgency=low
+
+  * New upstream release (Closes: #172453)
+  * Included sasldbconverter2 (Closes: #170740)
+  * Removed duplicate "--with-ldap" from debian/rules (Closes: #167858)
+  * Added "--sysconfdir=/etc" to debian/rules (Closes: #167855)
+  * Changed libsasl2 -> libsasl2-modules dependency from Suggests to
+    Recommends (Closes: #171938)
+  * Added "--enable-alwaystrue" to debian/rules (Closes: #170495)
+  * Included testsaslauthd (Closes: #167876)
+  * Included sasltestsuite (Closes: #166538)
+
+ -- Dima Barsky <dima@debian.org>  Mon, 23 Dec 2002 16:07:31 +0000
+
+cyrus-sasl2 (2.1.9-5) unstable; urgency=low
+
+  * Updated libtool files inside saslauthd/config/ (Closes: #166810)
+  * Enabled NTLM module
+  * Enabled LDAP support for saslauthd
+
+ -- Dima Barsky <dima@debian.org>  Mon, 28 Oct 2002 21:12:56 +0000
+
+cyrus-sasl2 (2.1.9-4) unstable; urgency=low
+
+  * Enabled DO_DLOPEN unconditionally in configure.in
+
+ -- Dima Barsky <dima@debian.org>  Mon, 28 Oct 2002 00:20:55 +0000
+
+cyrus-sasl2 (2.1.9-3) unstable; urgency=low
+
+  * Added AM_MAINTAINER_MODE to configure.in 
+
+ -- Dima Barsky <dima@debian.org>  Sat, 26 Oct 2002 01:46:13 +0100
+
+cyrus-sasl2 (2.1.9-2) unstable; urgency=low
+
+  * Added dbconverter-2 as /usr/sbin/sasldbconverter-2
+  * Added build dependency on zlib1g-dev
+
+ -- Dima Barsky <dima@debian.org>  Fri, 25 Oct 2002 22:28:30 +0100
+
+cyrus-sasl2 (2.1.9-1) unstable; urgency=low
+
+  * New upstream release
+  * shlibs now refers to the current version (Closes: #163845)
+  * sasl2-bin now uses dpkg-statoverride to manage permissions of 
+    /var/run/saslauthd and /etc/sasldb2 (Closes: #163042, #164393)
+
+ -- Dima Barsky <dima@debian.org>  Mon, 21 Oct 2002 22:01:01 +0100
+
+cyrus-sasl2 (2.1.7-3) unstable; urgency=low
+
+  * Added shlibs file (Closes: #162927)
+
+ -- Dima Barsky <dima@debian.org>  Tue,  1 Oct 2002 17:44:36 +0100
+
+cyrus-sasl2 (2.1.7-2) unstable; urgency=low
+
+  * Build with versioned symbols
+  * Another split: KERBEROS mechanism is now in a separate module (Closes: #154153)
+  * README.Debian has been updated a while ago, we can 
+    close bug 146543 now. (Closes: #146543)
+
+ -- Dima Barsky <dima@debian.org>  Mon, 30 Sep 2002 17:23:12 +0100
+
+cyrus-sasl2 (2.1.7-1) unstable; urgency=low
+
+  * New upstream version (Closes: #156286, #158296)
+  * Enabled ldap and mysql (Closes: #155025, #154965)
+  * /etc/sasldb2 and /var/run/saslauthd now belong to the group "sasl" 
+    and are group-readable (Closes: #151798)
+
+ -- Dima Barsky <dima@debian.org>  Thu, 25 Sep 2002 15:51:12 +0100
+
+cyrus-sasl2 (2.1.6-1) unstable; urgency=low
+
+  * New upstream version
+  * Make sure autoheader is not invoked at the build stage (Closes: #153127)
+
+ -- Dima Barsky <dima@debian.org>  Wed, 17 Jul 2002 12:19:29 +0100
+
+cyrus-sasl2 (2.1.5-7) unstable; urgency=low
+
+  * Separated heimdal-dependent plugins into the 
+    libsasl2-modules-gssapi-heimdal package
+  * Updated libtool to the latest version (Closes: #146229)
+  * Changed permissions on /var/run/saslauthd to 711 (Closes: #151796)
+
+ -- Dima Barsky <dima@debian.org>  Thu,  4 Jul 2002 09:24:42 +0100
+
+cyrus-sasl2 (2.1.5-6) unstable; urgency=low
+
+  * Removed build dependency on automake
+
+ -- Dima Barsky <dima@debian.org>  Wed,  3 Jul 2002 09:51:47 +0100
+
+cyrus-sasl2 (2.1.5-5) unstable; urgency=low
+
+  * Added a few packages to the Build-Depends list
+
+ -- Dima Barsky <dima@debian.org>  Tue,  2 Jul 2002 16:22:57 +0100
+
+cyrus-sasl2 (2.1.5-4) unstable; urgency=low
+
+  * Enabled DES, KERBEROS, and GSSAPI
+  * Merged all modules into the package libsasl2-modules
+
+ -- Dima Barsky <dima@debian.org>  Tue,  2 Jul 2002 13:10:10 +0100
+
+cyrus-sasl2 (2.1.5-3) unstable; urgency=low
+
+  * Enabled sasldb in saslauthd (Closes: 146791)
+
+ -- Dima Barsky <dima@debian.org>  Tue,  2 Jul 2002 11:50:03 +0100
+
+cyrus-sasl2 (2.1.5-2) unstable; urgency=low
+
+  * Preserve /usr/lib/sasl2/*.la (Closes: #151567)
+
+ -- Dima Barsky <dima@debian.org>  Mon,  1 Jul 2002 19:24:21 +0100
+
+cyrus-sasl2 (2.1.5-1) unstable; urgency=low
+
+  * New upstream version (Closes: #133458, #148693, #131792, #150957)
+  * Added explicit rule for building libsasl2.a (Closes: #144200)
+  * Added a warning about /dev/random to README.Debian (Closes: #146982)
+  * /var/run/saslauthd/mux is now world-readable (Closes: #147484)
+  * Modified sasl2-bin.default to make it clear that MECHANISMS is a 
+    space separated lists, so it should be quoted if there is more 
+    than one item in it (Closes: #146790)
+
+ -- Dima Barsky <dima@debian.org>  Sun, 30 Jun 2002 01:19:16 +0100
+
+cyrus-sasl2 (2.1.2-2) unstable; urgency=low
+
+  * Fixed saslauthd man page (Closes: #131791)
+
+ -- Dima Barsky <dima@debian.org>  Wed, 27 Mar 2002 15:27:39 +0000
+
+cyrus-sasl2 (2.1.2-1) unstable; urgency=low
+
+  * New upstream version
+  * Changed --without-gssapi to --disable-gssapi
+  * Closes: #131792
+  
+ -- Dima Barsky <dima@debian.org>  Tue, 26 Mar 2002 22:29:12 +0000
+
+cyrus-sasl2 (2.1.1-0.2) unstable; urgency=low
+
+  * Fix a naming problem with the init script.
+  * Fix problems with the init script itself.
+
+ -- Michael Alan Dorman <mdorman@debian.org>  Sun, 17 Mar 2002 15:44:45 -0500
+
+cyrus-sasl2 (2.1.1-0.1) unstable; urgency=low
+
+  * New upstream version
+  * Total rewrite of debian/rules, fold everything into nice, standard debhelper usage
+  * Functionality to auto-start saslauthd, which configury through /etc/default/saslauthd
+
+ -- Michael Alan Dorman <mdorman@debian.org>  Sun, 17 Mar 2002 15:09:55 -0500
+
+cyrus-sasl2 (2.1.0-2) unstable; urgency=low
+
+  * Added build dependency on libopie-dev
+
+ -- Dima Barsky <dima@debian.org>  Sun, 27 Jan 2002 20:07:15 +0000
+
+cyrus-sasl2 (2.1.0-1) unstable; urgency=low
+
+  * Initial release of cyrus-sasl2
+
+ -- Dima Barsky <dima@debian.org>  Sun, 20 Jan 2002 14:36:45 +0000

Added: cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/control
===================================================================
--- cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/control	2005-12-17 02:10:48 UTC (rev 2295)
+++ cyrus-sasl2-mit/debian/current/cyrus-sasl2-mit/debian/control	2005-12-17 02:10:49 UTC (rev 2296)
@@ -0,0 +1,103 @@
+Source: cyrus-sasl2
+Build-Depends: autotools-dev, debhelper (>= 4), libpam0g-dev, zlib1g-dev, libdb4.2-dev (>= 3.2.9-14), libopie-dev (>= 2.32-8), chrpath, heimdal-dev (>= 0.4e-16), libssl-dev (>= 0.9.6d-1), kerberos4kth-dev (>= 1.1-11), libmysqlclient10-dev (>= 3.23.52), libpq-dev, libldap2-dev (>= 2.1.21), automake1.7 (>= 1.7.9), autoconf (>=2.57), dbs, groff-base, comerr-dev, libtool (>= 1.5.6)
+Build-Conflicts: autoconf2.13, automake1.4
+Section: devel
+Priority: important
+Maintainer: Dima Barsky <dima@debian.org>
+Standards-Version: 3.6.1
+
+Package: sasl2-bin
+Architecture: any
+Section: utils
+Depends: ${shlibs:Depends}, base-passwd (>= 3.4.2)
+Description: Programs for manipulating the SASL users database
+ This is the Cyrus SASL API implementation, version 2. See package
+ libsasl2 and RFC 2222 for more information. 
+ .
+ This package contains common binary files for plugin modules.
+
+Package: libsasl2-modules
+Architecture: any
+Section: libs
+Replaces: libsasl2-digestmd5-plain, libsasl2-modules-plain
+Conflicts: libsasl2-digestmd5-plain, libsasl2-modules-plain
+Depends: libsasl2 (= ${Source-Version}), ${shlibs:Depends}
+Description: Pluggable Authentication Modules for SASL
+ This is the Cyrus SASL API implementation, version 2. See package
+ libsasl2 and RFC 2222 for more information. 
+ .
+ This package provides the following SASL modules: LOGIN, PLAIN, ANONYMOUS,  
+ OTP, CRAM-MD5, and DIGEST-MD5 (with DES support).
+
+Package: libsasl2-modules-sql
+Architecture: any
+Priority: optional
+Section: libs
+Conflicts: libsasl2-modules (<< 2.1.14-1)
+Replaces: libsasl2-modules-mysql
+Depends: libsasl2 (= ${Source-Version}), ${shlibs:Depends}
+Description: Pluggable Authentication Modules for SASL
+ This is the Cyrus SASL API implementation, version 2. See package
+ libsasl2 and RFC 2222 for more information.
+ .
+ This package provides the SQL plugin, which supports MySQL and PostgreSQL.
+
+Package: libsasl2-modules-gssapi-heimdal
+Architecture: any
+Priority: optional
+Section: libs
+Replaces: libsasl2-modules-plain (<= 2.1.5-6)
+Conflicts: libsasl2-modules-plain (<= 2.1.5-6), libsasl2-gssapi-mit
+Depends: libsasl2 (= ${Source-Version}), ${shlibs:Depends}
+Description: Pluggable Authentication Modules for SASL
+ This is the Cyrus SASL API implementation, version 2. See package
+ libsasl2 and RFC 2222 for more information. 
+ .
+ This package provides the GSSAPI plugin, compiled with the Heimdal library.
+
+Package: libsasl2-modules-kerberos-heimdal
+Architecture: any
+Priority: optional
+Section: libs
+Replaces: libsasl2-modules-plain (<= 2.1.5-6)
+Conflicts: libsasl2-modules-plain (<= 2.1.5-6), libsasl2-modules (<= 2.1.7-1), libsasl2-krb4-mit
+Depends: libsasl2 (= ${Source-Version}), ${shlibs:Depends}
+Description: Pluggable Authentication Modules for SASL
+ This is the Cyrus SASL API implementation, version 2. See package
+ libsasl2 and RFC 2222 for more information. 
+ .
+ This package provides the KERBEROS plugin, compiled with the Heimdal library.
+
+Package: libsasl2
+Architecture: any
+Section: libs
+Depends: ${shlibs:Depends}
+Conflicts: libsasl2-gssapi-mit (<< 2.1.18), libsasl2-krb4-mit (<< 2.1.18)
+Recommends: libsasl2-modules (= ${Source-Version})
+Description: Authentication abstraction library
+ SASL is the Simple Authentication and Security Layer, a method for
+ adding authentication support to connection-based protocols. To use
+ SASL, a protocol includes a command for identifying and
+ authenticating a user to a server and for optionally negotiating
+ protection of subsequent protocol interactions. If its use is
+ negotiated, a security layer is inserted between the protocol and the
+ connection. See RFC 2222 for more information.
+ .
+ This is the Cyrus SASL API implementation, version 2.
+ .
+ Any of: ANONYMOUS, CRAM-MD5, DIGEST-MD5, GSSAPI (MIT Kerberos 5 or Heimdal
+ Kerberos 5), KERBEROS_V4, OTP, PLAIN, or LOGIN can be used. This package
+ is unusable without the SASL plugins. Most likely you will need to install
+ the libsasl2-modules package.
+
+Package: libsasl2-dev
+Architecture: any
+Priority: optional
+Section: libdevel
+Depends: libsasl2 (= ${Source-Version}), libc6-dev
+Conflicts: libsasl-dev
+Description: Development files for authentication abstraction library
+ This is the Cyrus SASL API implementation, version 2. See package
+ libsasl2 and RFC 2222 for more information. 
+ .
+ You need this package if you want to compile programs with SASL support

Revision history for this message

In Debian Bug tracker #275431, Adam D. Barratt (debian-bts-adam-barratt) wrote on 2006-10-22: Bugs fixed in NMU, documenting versions

#8

# Hi,
#
# These bugs were fixed in an NMU, but have not been acknowledged by the
# maintainers. With version tracking in the Debian BTS, it is important
# to know which version of a package fixes each bug so that they can be
# tracked for release status, so I'm closing these bugs with the
#relevant version information now

close 271146 2.10c-3.1
close 271221 0.9.14-1.1
close 273411 0.9.14-1.1
close 271673 6:6.0.6.2-1.3
close 271956 1.0-7.1
close 272245 2.04-11.2
close 273043 5.0.13-0.1
close 273338 1.2-4.2
close 273357 0.16.14-1.2
close 271221 0.9.14-1.1
close 273411 0.9.14-1.1
close 273613 1.0.5-1.1
close 273800 1.3-0.1
close 274087 2.1.19-1.2
close 275431 2.1.19-1.2
close 274106 1:19970918-12.2
close 274501 0.99.16-1.1
close 274503 0.99.17-2.1
close 274507 0.4-9.1
close 274955 0.3.35.1
close 275432 1.5.28-6.2
close 276637 2.1.19-1.4
close 276825 3.8.3-4.1
close 276851 0.61-6.1
close 278001 0.99.17-2.2
close 279483 6.1
close 279484 1.1
close 280309 1.5-9.1
close 212905 1.5-9.1
close 235681 1.5-9.1
close 236463 1.5-9.1
close 280337 3.2.0.115-7.1
close 356855 3.2.0.115-7.1
close 281282 0.9.3-2
close 282879 2.04-11.1
close 300174 1.0.0b-4.1
close 283756 0.63-1.2
close 284741 0.1.18-1.2
close 284872 0.70-pre20031121-2.1
close 284925 1.1.2-2.1
close 285058 1.2-7.1
close 347152 0.9.7.1+cvs20050803-1.1
close 285528 2.3.11-1.1
close 322368 2.3.11-1.1
close 285605 2.1.19-1.6
close 285628 0.8.3-1.1
close 285762 0.94-7woody4
close 289464 0.94-7woody4
close 285889 0.98.38-1.1
close 285902 20050625-0.1
close 285918 3.06-9.1
close 288966 3.06-9.1
close 326367 3.06-9.1
close 346671 3.06-9.1
close 286309 1:0.5.0-1.1
close 286633 1:0.5.0-1.1
close 286492 2.5.7-3
close 329499 2.5.7-3
close 287059 2.0.12-1.1
close 287066 2.1.1-3.1
close 314008 2.1.1-3.1
close 327992 2.1.1-3.1
close 287190 1.99.11-1.1
close 287628 0.6-10.1
close 323728 0.6-10.1
close 287629 2.0b3-13.1
close 287639 0.6.2-2.1
close 287677 1.4.8-9.1
close 206905 0.7-7.1
close 221950 0.7-7.1
close 287749 0.7-7.1
close 296526 0.7-7.1
close 317259 0.7-7.1
close 287886 0.4.2+cvs.2004.02.20-1.1
close 336046 0.4.2+cvs.2004.02.20-1.1
close 287891 2.1.8-2.1
close 326106 2.1.8-2.1
close 275651 0.6.0-8.1
close 287923 0.6.0-8.1
close 313937 0.6.0-8.1
close 324839 0.6.0-8.1
close 288158 200300506-1.1
close 288441 1.0.8-1.1
close 336944 1.0.8-1.1
close 288536 0.0.7E6F3-4.1
close 290390 0.0.7E6F3-4.1
close 295080 0.0.7E6F3-4.1
close 318375 0.0.7E6F3-4.1
close 288819 0.1.5.9+cvs.2004.02.07-3.2
close 288834 0.2.1-1.1
close 307036 0.2.1-1.1
close 322985 0.2.1-1.1
close 322993 0.2.1-1.1
close 288925 0.9.5+really0.9.6pre4-1.1

# Hi,
#
# These bugs were fixed in an NMU, but have not been acknowledged by the
# maintainers.  With version tracking in the Debian BTS, it is important
# to know which version of a package fixes each bug so that they can be
# tracked for release status, so I'm closing these bugs with the
#relevant version information now

close 271146 2.10c-3.1
close 271221 0.9.14-1.1
close 273411 0.9.14-1.1
close 271673 6:6.0.6.2-1.3
close 271956 1.0-7.1
close 272245 2.04-11.2
close 273043 5.0.13-0.1
close 273338 1.2-4.2
close 273357 0.16.14-1.2
close 271221 0.9.14-1.1
close 273411 0.9.14-1.1
close 273613 1.0.5-1.1
close 273800 1.3-0.1
close 274087 2.1.19-1.2
close 275431 2.1.19-1.2
close 274106 1:19970918-12.2
close 274501 0.99.16-1.1
close 274503 0.99.17-2.1
close 274507 0.4-9.1
close 274955 0.3.35.1
close 275432 1.5.28-6.2
close 276637 2.1.19-1.4
close 276825 3.8.3-4.1
close 276851 0.61-6.1
close 278001 0.99.17-2.2
close 279483 6.1
close 279484 1.1
close 280309 1.5-9.1
close 212905 1.5-9.1
close 235681 1.5-9.1
close 236463 1.5-9.1
close 280337 3.2.0.115-7.1
close 356855 3.2.0.115-7.1
close 281282 0.9.3-2
close 282879 2.04-11.1
close 300174 1.0.0b-4.1
close 283756 0.63-1.2
close 284741 0.1.18-1.2
close 284872 0.70-pre20031121-2.1
close 284925 1.1.2-2.1
close 285058 1.2-7.1
close 347152 0.9.7.1+cvs20050803-1.1
close 285528 2.3.11-1.1
close 322368 2.3.11-1.1
close 285605 2.1.19-1.6
close 285628 0.8.3-1.1
close 285762 0.94-7woody4
close 289464 0.94-7woody4
close 285889 0.98.38-1.1
close 285902 20050625-0.1
close 285918 3.06-9.1
close 288966 3.06-9.1
close 326367 3.06-9.1
close 346671 3.06-9.1
close 286309 1:0.5.0-1.1
close 286633 1:0.5.0-1.1
close 286492 2.5.7-3
close 329499 2.5.7-3
close 287059 2.0.12-1.1
close 287066 2.1.1-3.1
close 314008 2.1.1-3.1
close 327992 2.1.1-3.1
close 287190 1.99.11-1.1
close 287628 0.6-10.1
close 323728 0.6-10.1
close 287629 2.0b3-13.1
close 287639 0.6.2-2.1
close 287677 1.4.8-9.1
close 206905 0.7-7.1
close 221950 0.7-7.1
close 287749 0.7-7.1
close 296526 0.7-7.1
close 317259 0.7-7.1
close 287886 0.4.2+cvs.2004.02.20-1.1
close 336046 0.4.2+cvs.2004.02.20-1.1
close 287891 2.1.8-2.1
close 326106 2.1.8-2.1
close 275651 0.6.0-8.1
close 287923 0.6.0-8.1
close 313937 0.6.0-8.1
close 324839 0.6.0-8.1
close 288158 200300506-1.1
close 288441 1.0.8-1.1
close 336944 1.0.8-1.1
close 288536 0.0.7E6F3-4.1
close 290390 0.0.7E6F3-4.1
close 295080 0.0.7E6F3-4.1
close 318375 0.0.7E6F3-4.1
close 288819 0.1.5.9+cvs.2004.02.07-3.2
close 288834 0.2.1-1.1
close 307036 0.2.1-1.1
close 322985 0.2.1-1.1
close 322993 0.2.1-1.1
close 288925 0.9.5+really0.9.6pre4-1.1

Bug Watch Updater (bug-watch-updater) on 2006-10-23

Changed in cyrus-sasl2:
status:	Fix Committed → Fix Released

Revision history for this message

In Debian Bug tracker #275431, Fabian Fagerholm (fabbe-debian) wrote on 2006-10-25: Bug#275431: fixed in cyrus-sasl-2.1 2.1.22-0~pre03

#9

Download full text (6.8 KiB)

Source: cyrus-sasl-2.1
Source-Version: 2.1.22-0~pre03

We believe that the bug you reported is fixed in the latest version of
cyrus-sasl-2.1, which is due to be installed in the Debian FTP archive:

cyrus-sasl-2.1-bin_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/cyrus-sasl-2.1-bin_2.1.22-0~pre03_i386.deb
cyrus-sasl-2.1-doc_2.1.22-0~pre03_all.deb
  to pool/main/c/cyrus-sasl-2.1/cyrus-sasl-2.1-doc_2.1.22-0~pre03_all.deb
cyrus-sasl-2.1_2.1.22-0~pre03.diff.gz
  to pool/main/c/cyrus-sasl-2.1/cyrus-sasl-2.1_2.1.22-0~pre03.diff.gz
cyrus-sasl-2.1_2.1.22-0~pre03.dsc
  to pool/main/c/cyrus-sasl-2.1/cyrus-sasl-2.1_2.1.22-0~pre03.dsc
libsasl2-2-dev_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/libsasl2-2-dev_2.1.22-0~pre03_i386.deb
libsasl2-2-modules-gssapi-mit_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/libsasl2-2-modules-gssapi-mit_2.1.22-0~pre03_i386.deb
libsasl2-2-modules-ldap_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/libsasl2-2-modules-ldap_2.1.22-0~pre03_i386.deb
libsasl2-2-modules-otp_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/libsasl2-2-modules-otp_2.1.22-0~pre03_i386.deb
libsasl2-2-modules-sql_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/libsasl2-2-modules-sql_2.1.22-0~pre03_i386.deb
libsasl2-2-modules_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/libsasl2-2-modules_2.1.22-0~pre03_i386.deb
libsasl2-2_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/libsasl2-2_2.1.22-0~pre03_i386.deb
libsasl2-dev_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/libsasl2-dev_2.1.22-0~pre03_i386.deb
libsasl2-modules-gssapi-heimdal_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/libsasl2-modules-gssapi-heimdal_2.1.22-0~pre03_i386.deb
libsasl2-modules-sql_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/libsasl2-modules-sql_2.1.22-0~pre03_i386.deb
libsasl2-modules_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/libsasl2-modules_2.1.22-0~pre03_i386.deb
libsasl2_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/libsasl2_2.1.22-0~pre03_i386.deb
sasl2-bin_2.1.22-0~pre03_i386.deb
  to pool/main/c/cyrus-sasl-2.1/sasl2-bin_2.1.22-0~pre03_i386.deb

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to <email address hidden>,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Fabian Fagerholm <email address hidden> (supplier of updated cyrus-sasl-2.1 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing <email address hidden>)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon, 23 Oct 2006 17:27:18 +0300
Source: cyrus-sasl-2.1
Binary: libsasl2-2 cyrus-sasl-2.1-bin libsasl2 libsasl2-2-dev sasl2-bin libsasl2-2-modules-ldap libsasl2-dev libsasl2-2-modules-gssapi-mit libsasl2-modules-gssapi-heimdal libsasl2-2-modules-otp cyrus-sasl-2.1-doc libsasl2-modules-sql libsasl2-2-modules-sql libsasl2-modules libsasl2-2-modules
Architecture: sour...

Affects		Status	Importance	Assigned to	Milestone
	cyrus-sasl2 (Debian)	Fix Released	Unknown	debbugs #275431
	cyrus-sasl2 (Ubuntu)	Fix Released	High	Fabio Massimo Di Nitto

Ubuntu
cyrus-sasl2 package

cyrus-sasl2: Local privilege escalation on setuid environment (CAN-2004-0884)

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntucyrus-sasl2 package

cyrus-sasl2: Local privilege escalation on setuid environment (CAN-2004-0884)

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
cyrus-sasl2 package