>Number:         26165
>Category:       pkg
>Synopsis:       security/cyrus-sasl2: maxoutbuf buffer size too small
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Jul 05 12:07:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Jukka Salmi
>Release:        NetBSD 1.6.2_STABLE
>Organization:
>Environment:
System: NetBSD bart.stasoft.ch 1.6.2_STABLE NetBSD 1.6.2_STABLE (GENERIC) #0: Fri May 28 14:57:42 CEST 2004 root@bart.stasoft.ch:/opt/obj/usr/src/sys/arch/i386/compile/GENERIC i386
Architecture: i386
Machine: i386
>Description:
To solve certain problems with GSSAPI authentication (see "How-To-Repeat")
security/cyrus-sasl2 needs to be patched.
>How-To-Repeat:
Install mail/cyrus-imapd22, authenticate with GSSAPI and try to upload a
sieve script larget than 4000 bytes to the sieve daemon. This problem is
described in more detail here[1]. Related problems are [2] and [3].

[1] http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=30450
[2] http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=28175
[3] http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=28936
>Fix:
It's already fixed in ASG CVS. I'll provide the diff in a minute...
>Release-Note:
>Audit-Trail:
>Unformatted: