[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: Cyrus SASL 2.1.23 Released
I've updated cyrus-sasl to 2.1.23 in pkgsrc-HEAD.
On release announcement:
> I'd like to announce the release of Cyrus SASL 2.1.23 on
> ftp.andrew.cmu.edu. This version includes a fix for a potential buffer
> overflow in sasl_encode64() (see http://www.kb.cert.org/vuls/id/238019),
> otherwise it is identical to 2.1.22. Please note that while this fixes
> vulnerable code, non-vulnerable code may break if the buffer passed to
> sasl_encode64() is the exact size of the encoded data and doesn't
> include space for the trailing NUL.
If it broke pkgsrc's packages, please report to upstream and/or here(or
"Of course I love NetBSD":-)
OBATA Akio / obache%NetBSD.org@localhost
Main Index |
Thread Index |