Updated: cyrus-sasl-2.1.27-1

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Updated: cyrus-sasl-2.1.27-1

David Rothenberger
A new release of cyrus-sasl and related packages is available.

SECURITY:
=========
This release includes a patch for CVE-2019-19906: Off-by-one in
_sasl_add_string function.

DESCRIPTION:
============
SASL is the Simple Authentication and Security Layer, a method for
adding authentication support to connection-based protocols. To use
SASL, a protocol includes a command for identifying and
authenticating a user to a server and for optionally negotiating
protection of subsequent protocol interactions. If its use is
negotiated, a security layer is inserted between the protocol and
the connection.

See http://cyrusimap.org/ for more information.

QUESTIONS:
==========
If you want to make a point or ask a question the Cygwin mailing list is
the appropriate place.

--
David Rothenberger  ----  [hidden email]