[ MDVA-2011:002 ] cyrus-sasl

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Advisory                                   MDVA-2011:002
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : cyrus-sasl
 Date    : January 18, 2011
 Affected: 2009.0, 2010.0, Corporate 4.0, Enterprise Server 5.0
 _______________________________________________________________________

 Problem Description:

 The saslauth daemon (cyrus-sasl) could crash under heavy load.
 
 Packages for 2009.0 are provided as of the Extended Maintenance
 Program. Please visit this link to learn more:
 http://store.mandriva.com/product_info.php?cPath=149&products_id=490
 
 The updated packages has been patched to address this problem.
 _______________________________________________________________________

 References:

 https://qa.mandriva.com/45897
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2009.0:
 ea90075a19e69ac9cfe25d209e5f5ed0  2009.0/i586/cyrus-sasl-2.1.22-29.2mdv2009.0.i586.rpm
 1da977ee1cc2a215d93f7ff1e5762b33  2009.0/i586/libsasl2-2.1.22-29.2mdv2009.0.i586.rpm
 f202f696de88f0fcaca9d7351afbb0a1  2009.0/i586/libsasl2-devel-2.1.22-29.2mdv2009.0.i586.rpm
 68353ccc5715c111fffabeb2f75ff32e  2009.0/i586/libsasl2-plug-anonymous-2.1.22-29.2mdv2009.0.i586.rpm
 5b7370fe88817b735daf3848b17b3ec2  2009.0/i586/libsasl2-plug-crammd5-2.1.22-29.2mdv2009.0.i586.rpm
 74475bb263e1471127de5bf06648869a  2009.0/i586/libsasl2-plug-digestmd5-2.1.22-29.2mdv2009.0.i586.rpm
 2a7f9ee9e51245d322423e9b69e81f9d  2009.0/i586/libsasl2-plug-gssapi-2.1.22-29.2mdv2009.0.i586.rpm
 5c114cb5b97dcb47ef5729db45b92202  2009.0/i586/libsasl2-plug-ldapdb-2.1.22-29.2mdv2009.0.i586.rpm
 2e8badec2d2bb07d979d8981580d101a  2009.0/i586/libsasl2-plug-login-2.1.22-29.2mdv2009.0.i586.rpm
 f044069d271c622b295bfb4adb2e0e09  2009.0/i586/libsasl2-plug-ntlm-2.1.22-29.2mdv2009.0.i586.rpm
 95a7a209569798c085b005680dc2bcb8  2009.0/i586/libsasl2-plug-otp-2.1.22-29.2mdv2009.0.i586.rpm
 686154ce29b11aff42437ca74419c9ef  2009.0/i586/libsasl2-plug-plain-2.1.22-29.2mdv2009.0.i586.rpm
 4ba26b49c755d0750ddfa3f91b440390  2009.0/i586/libsasl2-plug-sasldb-2.1.22-29.2mdv2009.0.i586.rpm
 02e23b91bc9da9bc76ca665f68daa0c2  2009.0/i586/libsasl2-plug-sql-2.1.22-29.2mdv2009.0.i586.rpm 
 d155854c8cb3b1a26855db3707a739aa  2009.0/SRPMS/cyrus-sasl-2.1.22-29.2mdv2009.0.src.rpm

 Mandriva Linux 2009.0/X86_64:
 b05f439a0478231d4ea3eb2a3228a2ac  2009.0/x86_64/cyrus-sasl-2.1.22-29.2mdv2009.0.x86_64.rpm
 b2bf4fc1264e7b6fdf354aa74b2c9886  2009.0/x86_64/lib64sasl2-2.1.22-29.2mdv2009.0.x86_64.rpm
 db192dcc726473257e2fcaecf75b3bd1  2009.0/x86_64/lib64sasl2-devel-2.1.22-29.2mdv2009.0.x86_64.rpm
 254024bfabd95facecd94aaacfd96790  2009.0/x86_64/lib64sasl2-plug-anonymous-2.1.22-29.2mdv2009.0.x86_64.rpm
 e0d7e6f2df2d50e57ab0f14605709993  2009.0/x86_64/lib64sasl2-plug-crammd5-2.1.22-29.2mdv2009.0.x86_64.rpm
 ac5b02ec6168f5d100becf9c8e33c1e5  2009.0/x86_64/lib64sasl2-plug-digestmd5-2.1.22-29.2mdv2009.0.x86_64.rpm
 97539f1994c2f7fde4fe20c808e7a9e9  2009.0/x86_64/lib64sasl2-plug-gssapi-2.1.22-29.2mdv2009.0.x86_64.rpm
 1e51edd5c851bf7f3447c7d9ead3fc28  2009.0/x86_64/lib64sasl2-plug-ldapdb-2.1.22-29.2mdv2009.0.x86_64.rpm
 688c1f7030c8ed5d3a90551e839d1304  2009.0/x86_64/lib64sasl2-plug-login-2.1.22-29.2mdv2009.0.x86_64.rpm
 9f9c02a6c281aa5ce211d7d207ef5923  2009.0/x86_64/lib64sasl2-plug-ntlm-2.1.22-29.2mdv2009.0.x86_64.rpm
 f8486a1771dc634145d464a55c217b03  2009.0/x86_64/lib64sasl2-plug-otp-2.1.22-29.2mdv2009.0.x86_64.rpm
 a684cbb864ec1b382e12537b7189f38a  2009.0/x86_64/lib64sasl2-plug-plain-2.1.22-29.2mdv2009.0.x86_64.rpm
 f0a10eff0b2e1f965f28d23272e01543  2009.0/x86_64/lib64sasl2-plug-sasldb-2.1.22-29.2mdv2009.0.x86_64.rpm
 e3cf2b91782dff7e73468e7fb6bf6e43  2009.0/x86_64/lib64sasl2-plug-sql-2.1.22-29.2mdv2009.0.x86_64.rpm 
 d155854c8cb3b1a26855db3707a739aa  2009.0/SRPMS/cyrus-sasl-2.1.22-29.2mdv2009.0.src.rpm

 Mandriva Linux 2010.0:
 0da636ed63437ef6d26737d7ef5d8abb  2010.0/i586/cyrus-sasl-2.1.23-1.1mdv2010.0.i586.rpm
 7d9cacb931cb1ade32f3ba4c1a19a3f1  2010.0/i586/libsasl2-2.1.23-1.1mdv2010.0.i586.rpm
 4686be94755209f8abc723d797d20e61  2010.0/i586/libsasl2-devel-2.1.23-1.1mdv2010.0.i586.rpm
 c867fbe6bb2c02213f55fd609c2b8372  2010.0/i586/libsasl2-plug-anonymous-2.1.23-1.1mdv2010.0.i586.rpm
 b1e7cb6555be911e90658f10947cf869  2010.0/i586/libsasl2-plug-crammd5-2.1.23-1.1mdv2010.0.i586.rpm
 db6b8cba05d7628cf4443d52608c2f78  2010.0/i586/libsasl2-plug-digestmd5-2.1.23-1.1mdv2010.0.i586.rpm
 14c58e39ed10f3eb7c0d09163c011e75  2010.0/i586/libsasl2-plug-gssapi-2.1.23-1.1mdv2010.0.i586.rpm
 9fc11b5eac3b7c861ec59a2fb0bb631d  2010.0/i586/libsasl2-plug-ldapdb-2.1.23-1.1mdv2010.0.i586.rpm
 acf165ba5b1d558317dee338af1cb964  2010.0/i586/libsasl2-plug-login-2.1.23-1.1mdv2010.0.i586.rpm
 5b77515c0b3c6e699513eeaf4a95b783  2010.0/i586/libsasl2-plug-ntlm-2.1.23-1.1mdv2010.0.i586.rpm
 1e51a1b733b6f1bd93e4df83069a9d62  2010.0/i586/libsasl2-plug-otp-2.1.23-1.1mdv2010.0.i586.rpm
 b3e7d43881597457580a88aa072f2db7  2010.0/i586/libsasl2-plug-plain-2.1.23-1.1mdv2010.0.i586.rpm
 cd0dd243afe358792df641dba97a6023  2010.0/i586/libsasl2-plug-sasldb-2.1.23-1.1mdv2010.0.i586.rpm
 1ff3c80894bbc9b92ed5f9ca0e11c0e4  2010.0/i586/libsasl2-plug-sql-2.1.23-1.1mdv2010.0.i586.rpm 
 0fc3b07f0c526ca88dcc32d7d719f46b  2010.0/SRPMS/cyrus-sasl-2.1.23-1.1mdv2010.0.src.rpm

 Mandriva Linux 2010.0/X86_64:
 ee1f77825abc916753cb74b15fdc93ab  2010.0/x86_64/cyrus-sasl-2.1.23-1.1mdv2010.0.x86_64.rpm
 3cdc0b7900d065418b908497e54cf588  2010.0/x86_64/lib64sasl2-2.1.23-1.1mdv2010.0.x86_64.rpm
 044ac06ff4e26cbbd282fde56c4e9422  2010.0/x86_64/lib64sasl2-devel-2.1.23-1.1mdv2010.0.x86_64.rpm
 84495be08d556c0b27e610b2a7003507  2010.0/x86_64/lib64sasl2-plug-anonymous-2.1.23-1.1mdv2010.0.x86_64.rpm
 4339c6e3a8acab9e0069185e2ccfebe1  2010.0/x86_64/lib64sasl2-plug-crammd5-2.1.23-1.1mdv2010.0.x86_64.rpm
 a7df87dd07a65893b92dba21fd1ef6b3  2010.0/x86_64/lib64sasl2-plug-digestmd5-2.1.23-1.1mdv2010.0.x86_64.rpm
 f2e1a2086f1cf838445bc74e34a0513d  2010.0/x86_64/lib64sasl2-plug-gssapi-2.1.23-1.1mdv2010.0.x86_64.rpm
 a9b154f463e112d3edb03129c925a15b  2010.0/x86_64/lib64sasl2-plug-ldapdb-2.1.23-1.1mdv2010.0.x86_64.rpm
 2871bda8e0fb0418efb3f09d47778543  2010.0/x86_64/lib64sasl2-plug-login-2.1.23-1.1mdv2010.0.x86_64.rpm
 3e002cbf6357c923015a92901db6b9c8  2010.0/x86_64/lib64sasl2-plug-ntlm-2.1.23-1.1mdv2010.0.x86_64.rpm
 246550292fa95a4423cd7ada56d7d347  2010.0/x86_64/lib64sasl2-plug-otp-2.1.23-1.1mdv2010.0.x86_64.rpm
 123b37a8c01620c143b84187df61e11f  2010.0/x86_64/lib64sasl2-plug-plain-2.1.23-1.1mdv2010.0.x86_64.rpm
 5b759579127706264789c794509f6721  2010.0/x86_64/lib64sasl2-plug-sasldb-2.1.23-1.1mdv2010.0.x86_64.rpm
 e767d9c8442602720efe8730d4df6fdd  2010.0/x86_64/lib64sasl2-plug-sql-2.1.23-1.1mdv2010.0.x86_64.rpm 
 0fc3b07f0c526ca88dcc32d7d719f46b  2010.0/SRPMS/cyrus-sasl-2.1.23-1.1mdv2010.0.src.rpm

 Corporate 4.0:
 e6ba4bf0b995b15a5c435d7cef31a68d  corporate/4.0/i586/cyrus-sasl-2.1.22-11.3.20060mlcs4.i586.rpm
 32e8f72e23dcc3af49ffc9a440549212  corporate/4.0/i586/libsasl2-2.1.22-11.3.20060mlcs4.i586.rpm
 c6d768fb96b4f0f56a3e6d161e9c6288  corporate/4.0/i586/libsasl2-devel-2.1.22-11.3.20060mlcs4.i586.rpm
 5a2a8e1fce9d9ef384ebc4c7a0778034  corporate/4.0/i586/libsasl2-plug-anonymous-2.1.22-11.3.20060mlcs4.i586.rpm
 b1cf43cd8f9ea77eab613bf0d1d7c0e2  corporate/4.0/i586/libsasl2-plug-crammd5-2.1.22-11.3.20060mlcs4.i586.rpm
 83558511dd88a3250e93e0205fa8c064  corporate/4.0/i586/libsasl2-plug-digestmd5-2.1.22-11.3.20060mlcs4.i586.rpm
 4b18dde188bc7f83ebb21f0f2bd64de2  corporate/4.0/i586/libsasl2-plug-gssapi-2.1.22-11.3.20060mlcs4.i586.rpm
 57483cdb1419a9cb11dd35642ec12d8a  corporate/4.0/i586/libsasl2-plug-ldapdb-2.1.22-11.3.20060mlcs4.i586.rpm
 a66f67f340a1c3eb1677cfd6f69b98d0  corporate/4.0/i586/libsasl2-plug-login-2.1.22-11.3.20060mlcs4.i586.rpm
 6c2654526d3b9bfe79cc4677e9369349  corporate/4.0/i586/libsasl2-plug-ntlm-2.1.22-11.3.20060mlcs4.i586.rpm
 f5c062bbdadbd3b14f76ca28f8f8f737  corporate/4.0/i586/libsasl2-plug-otp-2.1.22-11.3.20060mlcs4.i586.rpm
 e91f634e801fb488b0e07fd84d938fa5  corporate/4.0/i586/libsasl2-plug-plain-2.1.22-11.3.20060mlcs4.i586.rpm
 361bbe0129c7c424a6512cf91ef9e6ae  corporate/4.0/i586/libsasl2-plug-sasldb-2.1.22-11.3.20060mlcs4.i586.rpm
 2a5bf51998cf250dc05a6a47fc0219a5  corporate/4.0/i586/libsasl2-plug-sql-2.1.22-11.3.20060mlcs4.i586.rpm 
 4dbbb5ebd8a3b1c9b1753b0bbee013dc  corporate/4.0/SRPMS/cyrus-sasl-2.1.22-11.3.20060mlcs4.src.rpm

 Corporate 4.0/X86_64:
 3823cc6674c0ba54f2bd64f36af3551a  corporate/4.0/x86_64/cyrus-sasl-2.1.22-11.3.20060mlcs4.x86_64.rpm
 79ce4b23c129a207ef70de05eb101b85  corporate/4.0/x86_64/lib64sasl2-2.1.22-11.3.20060mlcs4.x86_64.rpm
 1f77744ade5d6a47351d5fddffbf6000  corporate/4.0/x86_64/lib64sasl2-devel-2.1.22-11.3.20060mlcs4.x86_64.rpm
 5cad3e2d383fc3186da89e6ac619a694  corporate/4.0/x86_64/lib64sasl2-plug-anonymous-2.1.22-11.3.20060mlcs4.x86_64.rpm
 d46bda5d937396496ee2d1b6a7f2cc27  corporate/4.0/x86_64/lib64sasl2-plug-crammd5-2.1.22-11.3.20060mlcs4.x86_64.rpm
 ed042528f25b46bb9b1c3ac4650ea531  corporate/4.0/x86_64/lib64sasl2-plug-digestmd5-2.1.22-11.3.20060mlcs4.x86_64.rpm
 e3564836fda22950c1a3a3eafba2d379  corporate/4.0/x86_64/lib64sasl2-plug-gssapi-2.1.22-11.3.20060mlcs4.x86_64.rpm
 2c18c931769a956ccae44e95108efdc8  corporate/4.0/x86_64/lib64sasl2-plug-ldapdb-2.1.22-11.3.20060mlcs4.x86_64.rpm
 0e41db91c38abd506e9fda32f595b3af  corporate/4.0/x86_64/lib64sasl2-plug-login-2.1.22-11.3.20060mlcs4.x86_64.rpm
 89c4638b554aea8745dc688405bb1358  corporate/4.0/x86_64/lib64sasl2-plug-ntlm-2.1.22-11.3.20060mlcs4.x86_64.rpm
 7f92e761a3a737273db56442e4edcbf0  corporate/4.0/x86_64/lib64sasl2-plug-otp-2.1.22-11.3.20060mlcs4.x86_64.rpm
 edb598297c57e492ae2bcfb865ce4f5b  corporate/4.0/x86_64/lib64sasl2-plug-plain-2.1.22-11.3.20060mlcs4.x86_64.rpm
 64b74551a092f8ee49c53d864a7acbe6  corporate/4.0/x86_64/lib64sasl2-plug-sasldb-2.1.22-11.3.20060mlcs4.x86_64.rpm
 c1206ca0564dc28883c36f33f933b36d  corporate/4.0/x86_64/lib64sasl2-plug-sql-2.1.22-11.3.20060mlcs4.x86_64.rpm 
 4dbbb5ebd8a3b1c9b1753b0bbee013dc  corporate/4.0/SRPMS/cyrus-sasl-2.1.22-11.3.20060mlcs4.src.rpm

 Mandriva Enterprise Server 5:
 f38b62ce959ed4ae0ce38bf54f69cbb6  mes5/i586/cyrus-sasl-2.1.22-29.2mdvmes5.1.i586.rpm
 3b1440955c47beef6b8971b82086b483  mes5/i586/libsasl2-2.1.22-29.2mdvmes5.1.i586.rpm
 f57a89da4e2c444d003d21df510fddbb  mes5/i586/libsasl2-devel-2.1.22-29.2mdvmes5.1.i586.rpm
 1e165d9c9f8ef639b0343fc507f21b3f  mes5/i586/libsasl2-plug-anonymous-2.1.22-29.2mdvmes5.1.i586.rpm
 67e77c8e3f6a8afe1840abe61514dfd4  mes5/i586/libsasl2-plug-crammd5-2.1.22-29.2mdvmes5.1.i586.rpm
 54dd5797f4e1793a6c1e186441dfb07b  mes5/i586/libsasl2-plug-digestmd5-2.1.22-29.2mdvmes5.1.i586.rpm
 92efa09a1f0367253ffd65ecd79de1e4  mes5/i586/libsasl2-plug-gssapi-2.1.22-29.2mdvmes5.1.i586.rpm
 cad24b68ec5d705f90d1bc05296169ec  mes5/i586/libsasl2-plug-ldapdb-2.1.22-29.2mdvmes5.1.i586.rpm
 dad847c6ba3236e83ee9aea08d7624f9  mes5/i586/libsasl2-plug-login-2.1.22-29.2mdvmes5.1.i586.rpm
 251540cb020528153aca7576cddea179  mes5/i586/libsasl2-plug-ntlm-2.1.22-29.2mdvmes5.1.i586.rpm
 515921cc991a682e92e3d0c1b6859f11  mes5/i586/libsasl2-plug-otp-2.1.22-29.2mdvmes5.1.i586.rpm
 283a8a7a4047f62b0e0d14764c3bb552  mes5/i586/libsasl2-plug-plain-2.1.22-29.2mdvmes5.1.i586.rpm
 1b9942f4c419362198ddacc2639ee370  mes5/i586/libsasl2-plug-sasldb-2.1.22-29.2mdvmes5.1.i586.rpm
 2f95a8be191279479dc96d8b11ffc975  mes5/i586/libsasl2-plug-sql-2.1.22-29.2mdvmes5.1.i586.rpm 
 1d0d065902af492b6596ba7072e5ae81  mes5/SRPMS/cyrus-sasl-2.1.22-29.2mdvmes5.1.src.rpm

 Mandriva Enterprise Server 5/X86_64:
 8d4290bf41cf77c20fc8b53efe9eb1fa  mes5/x86_64/cyrus-sasl-2.1.22-29.2mdvmes5.1.x86_64.rpm
 7a421e1b61a0c04840f058e12edd8417  mes5/x86_64/lib64sasl2-2.1.22-29.2mdvmes5.1.x86_64.rpm
 6890d566bce62fc8073777133b75d926  mes5/x86_64/lib64sasl2-devel-2.1.22-29.2mdvmes5.1.x86_64.rpm
 5abdb758e6d56b1b8e7c51cf0e146bc8  mes5/x86_64/lib64sasl2-plug-anonymous-2.1.22-29.2mdvmes5.1.x86_64.rpm
 796b120da6df7cb9d7a7a7b3f5e46601  mes5/x86_64/lib64sasl2-plug-crammd5-2.1.22-29.2mdvmes5.1.x86_64.rpm
 7bbbc5371d7e2e7f8277664f8bab2830  mes5/x86_64/lib64sasl2-plug-digestmd5-2.1.22-29.2mdvmes5.1.x86_64.rpm
 103a51453aec84b2f8d9c0872b9e0c42  mes5/x86_64/lib64sasl2-plug-gssapi-2.1.22-29.2mdvmes5.1.x86_64.rpm
 d106297bb49f2b47441a3aaac69a3315  mes5/x86_64/lib64sasl2-plug-ldapdb-2.1.22-29.2mdvmes5.1.x86_64.rpm
 ad83d091faed009a2eebed03fe07023f  mes5/x86_64/lib64sasl2-plug-login-2.1.22-29.2mdvmes5.1.x86_64.rpm
 bd675e4872e358f0fd5c2463314087a0  mes5/x86_64/lib64sasl2-plug-ntlm-2.1.22-29.2mdvmes5.1.x86_64.rpm
 4156791f2af550c7104f683eee3c5556  mes5/x86_64/lib64sasl2-plug-otp-2.1.22-29.2mdvmes5.1.x86_64.rpm
 d90273a552ac17c1a1c3844333f6372e  mes5/x86_64/lib64sasl2-plug-plain-2.1.22-29.2mdvmes5.1.x86_64.rpm
 dfd7a6b8f65573acc0939dd71db8bada  mes5/x86_64/lib64sasl2-plug-sasldb-2.1.22-29.2mdvmes5.1.x86_64.rpm
 53fa85b89f5075bb1288f38186ab840c  mes5/x86_64/lib64sasl2-plug-sql-2.1.22-29.2mdvmes5.1.x86_64.rpm 
 1d0d065902af492b6596ba7072e5ae81  mes5/SRPMS/cyrus-sasl-2.1.22-29.2mdvmes5.1.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFNNcN6mqjQ0CJFipgRAoTpAJoCiPlBQ/0DxPk7Qn7UsExYa3J2DgCg6Zyu
iu2+Vah2nyHxsUVnYQUNspo=
=UilR
-----END PGP SIGNATURE-----

To unsubscribe, send a email to [email protected]
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________