Accepted cyrus-sasl2 2.1.19.dfsg1-0.1ubuntu2 (source)

[Martin Pitt]

Accepted:
 OK: cyrus-sasl2_2.1.19.dfsg1-0.1ubuntu2.dsc
     -> Component: main Section: devel
 OK: cyrus-sasl2_2.1.19.dfsg1-0.1ubuntu2.diff.gz

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon, 24 Apr 2006 11:58:30 +0200
Source: cyrus-sasl2
Binary: libsasl2 libsasl2-modules-sql sasl2-bin libsasl2-modules libsasl2-dev libsasl2-modules-gssapi-heimdal
Architecture: source
Version: 2.1.19.dfsg1-0.1ubuntu2
Distribution: dapper
Urgency: low
Maintainer: Dima Barsky <dima at debian.org>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description: 
 libsasl2   - Authentication abstraction library
 libsasl2-dev - Development files for authentication abstraction library
 libsasl2-modules - Pluggable Authentication Modules for SASL
 libsasl2-modules-gssapi-heimdal - Pluggable Authentication Modules for SASL
 libsasl2-modules-sql - Pluggable Authentication Modules for SASL
 sasl2-bin  - Programs for manipulating the SASL users database
Changes: 
 cyrus-sasl2 (2.1.19.dfsg1-0.1ubuntu2) dapper; urgency=low
 .
   * SECURITY UPDATE: Remote DoS with crafted realms during DIGEST-MD5
     negotiation.
   * Add debian/patches/27_upstream_cvs_digest-md5-crash.diff:
     - plugins/digestmd5.c: Check that the provided realm is valid to avoid
       crash.
     - Patch taken from upstream CVS, fixed upstream in 2.1.21:
       https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/
       plugins/digestmd5.c.diff?r1=1.173&r2=1.175&f=u
   * CVE-2006-1721
Files: 
 b9ccbc6cf3ff562bb3551c53a3ad10c4 1042 devel important cyrus-sasl2_2.1.19.dfsg1-0.1ubuntu2.dsc
 ddaf5dec59cbf2ab67244ca6df4b508e 33283 devel important cyrus-sasl2_2.1.19.dfsg1-0.1ubuntu2.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFETKGiDecnbV4Fd/IRAgwGAKDb3qHAoZlhADXZTJX51W3WPC4FIgCdF+PJ
ltg0fDkDQ//zV+7zuVhJ+TM=
=Zk59
-----END PGP SIGNATURE-----