Re: Cyrus SASL 2.1.23 Released

["OBATA Akio" <obache%netbsd.org@localhost>]

I've updated cyrus-sasl to 2.1.23 in pkgsrc-HEAD.

On release announcement:

> I'd like to announce the release of Cyrus SASL 2.1.23 on
> ftp.andrew.cmu.edu.  This version includes a fix for a potential buffer
> overflow in sasl_encode64() (see http://www.kb.cert.org/vuls/id/238019),
> otherwise it is identical to 2.1.22.  Please note that while this fixes
> vulnerable code, non-vulnerable code may break if the buffer passed to
> sasl_encode64() is the exact size of the encoded data and doesn't
> include space for the trailing NUL.

If it broke pkgsrc's packages, please report to upstream and/or here(or 
send-pr).

-- 
"Of course I love NetBSD":-)
OBATA Akio / obache%NetBSD.org@localhost