Ubuntu

“cyrus-sasl2” 2.1.25.dfsg1-6ubuntu0.1 source package in Ubuntu

Changelog

cyrus-sasl2 (2.1.25.dfsg1-6ubuntu0.1) raring-security; urgency=low

  * SECURITY UPDATE: denial of service via invalid salt (LP: #1187001)
    - debian/patches/CVE-2013-4122.patch: properly handle glibc returning
      NULL on an invalid salt in pwcheck/pwcheck_getpwnam.c,
      pwcheck/pwcheck_getspnam.c, saslauthd/auth_getpwent.c,
      saslauthd/auth_shadow.c.
    - CVE-2013-4122
 -- Marc Deslauriers <email address hidden>   Mon, 07 Oct 2013 08:40:56 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2013-10-07
Uploaded to:
Raring
Original maintainer:
Ubuntu Developers
Component:
main
Architectures:
any all
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Raring updates on 2013-10-09 main devel
Raring security on 2013-10-09 main devel

Downloads

File Size MD5 Checksum
cyrus-sasl2_2.1.25.dfsg1.orig.tar.gz 1.4 MiB b65b7c94bbb5ac9c236daf74014dab8a
cyrus-sasl2_2.1.25.dfsg1-6ubuntu0.1.debian.tar.gz 104.3 KiB 7cd51da7cba466bb7ee175b20bba59b5
cyrus-sasl2_2.1.25.dfsg1-6ubuntu0.1.dsc 3.2 KiB 968655e90b0a4aea243f4acd6e267d39

Binary packages built by this source

cyrus-sasl2-dbg: Cyrus SASL - debugging symbols

 This is the Cyrus SASL API implementation, version 2. See package
 libsasl2-2 and RFC 2222 for more information.
 .
 This package contains the debugging symbols for all Cyrus SASL packages.
 The debugging symbols can be useful when investigating crashes in the SASL
 library or tools. You may be asked to install this package if you encounter
 such a crash.

cyrus-sasl2-doc: Cyrus SASL - documentation

 This is the Cyrus SASL API implementation, version 2.1. See package
 libsasl2-2 and RFC 2222 for more information.
 .
 This package contains documentation for system administrators.

cyrus-sasl2-heimdal-dbg: Cyrus SASL - debugging symbols for Heimdal modules

 This is the Cyrus SASL API implementation, version 2. See package
 libsasl2-2 and RFC 2222 for more information.
 .
 This package contains the debugging symbols for the Cyrus SASL Heimdal
 GSSAPI modules package (libsasl2-modules-gssapi-heimdal). The debugging
 symbols can be useful when investigating crashes in the SASL library or
 tools. You may be asked to install this package if you encounter such a
 crash.

cyrus-sasl2-mit-dbg: Cyrus SASL - debugging symbols for MIT modules

 This is the Cyrus SASL API implementation, version 2. See package
 libsasl2-2 and RFC 2222 for more information.
 .
 This package contains the debugging symbols for the Cyrus SASL MIT
 GSSAPI modules package (libsasl2-modules-gssapi-mit). The debugging
 symbols can be useful when investigating crashes in the SASL library or
 tools. You may be asked to install this package if you encounter such a
 crash.

libsasl2-2: Cyrus SASL - authentication abstraction library

 This is the Cyrus SASL API implementation, version 2.1.
 .
 SASL is the Simple Authentication and Security Layer, a method for
 adding authentication support to connection-based protocols. To use
 SASL, a protocol includes a command for identifying and
 authenticating a user to a server and for optionally negotiating
 protection of subsequent protocol interactions. If its use is
 negotiated, a security layer is inserted between the protocol and the
 connection. See RFC 2222 for more information.
 .
 Any of: ANONYMOUS, CRAM-MD5, DIGEST-MD5, GSSAPI (MIT or Heimdal
 Kerberos 5), NTLM, OTP, PLAIN, or LOGIN can be used. If you intend to
 use this package on a server that provides SASL authentication, then
 you must install some of the libsasl2-modules* packages.

libsasl2-dev: Cyrus SASL - development files for authentication abstraction library

 This is the Cyrus SASL API implementation, version 2. See package
 libsasl2-2 and RFC 2222 for more information.
 .
 This package includes development files for compiling programs with SASL
 support. It is needed for development purposes only.

libsasl2-modules: Cyrus SASL - pluggable authentication modules

 This is the Cyrus SASL API implementation, version 2.1. See package
 libsasl2-2 and RFC 2222 for more information.
 .
 This package provides the following SASL modules: LOGIN, PLAIN, ANONYMOUS,
 NTLM, CRAM-MD5, and DIGEST-MD5 (with DES support).

libsasl2-modules-gssapi-heimdal: Pluggable Authentication Modules for SASL (GSSAPI)

 This is the Cyrus SASL API implementation, version 2.1. See package
 libsasl2-2 and RFC 2222 for more information.
 .
 This package provides the GSSAPI plugin, compiled with the Heimdal
 Kerberos 5 library.

libsasl2-modules-gssapi-mit: Cyrus SASL - pluggable authentication modules (GSSAPI)

 This is the Cyrus SASL API implementation, version 2.1. See package
 libsasl2-2 and RFC 2222 for more information.
 .
 This package provides the GSSAPI plugin, compiled with the MIT
 Kerberos 5 library.

libsasl2-modules-ldap: Cyrus SASL - pluggable authentication modules (LDAP)

 This is the Cyrus SASL API implementation, version 2.1. See package
 libsasl2-2 and RFC 2222 for more information.
 .
 This package provides the LDAP plugin, which supports OpenLDAP.

libsasl2-modules-otp: Cyrus SASL - pluggable authentication modules (OTP)

 This is the Cyrus SASL API implementation, version 2.1. See package
 libsasl2-2 and RFC 2222 for more information.
 .
 This package provides the OTP plugin, which supports one time passwords.

libsasl2-modules-sql: Cyrus SASL - pluggable authentication modules (SQL)

 This is the Cyrus SASL API implementation, version 2.1. See package
 libsasl2-2 and RFC 2222 for more information.
 .
 This package provides the SQL plugin, which supports MySQL, PostgreSQL
 and SQLite.

sasl2-bin: Cyrus SASL - administration programs for SASL users database

 This is the Cyrus SASL API implementation, version 2.1. See package
 libsasl2-2 and RFC 2222 for more information.
 .
 This package contains administration programs for the SASL users
 database and common binary files for plugin modules.