Home page logo
/

bugtraq logo Bugtraq mailing list archives

[USN-790-1] Cyrus SASL vulnerability
From: Kees Cook <kees () ubuntu com>
Date: Wed, 24 Jun 2009 11:28:43 -0700

===========================================================
Ubuntu Security Notice USN-790-1              June 24, 2009
cyrus-sasl2 vulnerability
CVE-2009-0688
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libsasl2                        2.1.19.dfsg1-0.1ubuntu3.1

Ubuntu 8.04 LTS:
  libsasl2-2                      2.1.22.dfsg1-18ubuntu2.1

Ubuntu 8.10:
  libsasl2-2                      2.1.22.dfsg1-21ubuntu2.1

Ubuntu 9.04:
  libsasl2-2                      2.1.22.dfsg1-23ubuntu3.1

After a standard system upgrade you need to restart services using SASL
to effect the necessary changes.

Details follow:

James Ralston discovered that the Cyrus SASL base64 encoding function
could be used unsafely.  If a remote attacker sent a specially crafted
request to a service that used SASL, it could lead to a loss of privacy,
or crash the application, resulting in a denial of service.


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.19.dfsg1-0.1ubuntu3.1.diff.gz
      Size/MD5:    34029 ced82b02dc369c1d14d462fb317524be
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.19.dfsg1-0.1ubuntu3.1.dsc
      Size/MD5:     1052 130d027825b3c9d5c000a42500e7b398
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.19.dfsg1.orig.tar.gz
      Size/MD5:  1576960 f2fa0ce4d8b3dc37ca71fb5b5d57cd8b

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.19.dfsg1-0.1ubuntu3.1_amd64.deb
      Size/MD5:   252862 6a39fb30e08336e9d03118ee810eab83
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.19.dfsg1-0.1ubuntu3.1_amd64.deb
      Size/MD5:    54314 04270bb1048b663d6fc4d61d2a404fbb
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.19.dfsg1-0.1ubuntu3.1_amd64.deb
      Size/MD5:   171688 090e005a0c00aaac298da703370245b5
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0.1ubuntu3.1_amd64.deb
      Size/MD5:   266374 a0c5f3d0007a20089e4994db8c90506d
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.19.dfsg1-0.1ubuntu3.1_amd64.deb
      Size/MD5:   120292 b18d26ffaeeba5bef064b471071ff860
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-heimdal_2.1.19.dfsg1-0.1ubuntu3.1_amd64.deb
      Size/MD5:    56126 30496ab10997ffb6104dc3da0aaf9f9c

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb
      Size/MD5:   233560 451f18b954541a1e557d8187e1274c22
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb
      Size/MD5:    51250 82c23ab86f7e8fc49797856418dc0575
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb
      Size/MD5:   148728 0e19ba29ba05a8665106a156dd341dce
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb
      Size/MD5:   258408 97f14a1f1d622a8c526a921a8dfde513
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb
      Size/MD5:   110208 cfa6edfc84dae56e3ce6cb3b4d9e8a1a
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-heimdal_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb
      Size/MD5:    52828 69881f682c453dc16e9d3aab6a877342

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.19.dfsg1-0.1ubuntu3.1_powerpc.deb
      Size/MD5:   257542 28c919ab30cadcc8dac3c6a2f0892b1b
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.19.dfsg1-0.1ubuntu3.1_powerpc.deb
      Size/MD5:    57044 cdb4786bc15c1a72f57bb19f9d4321b6
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.19.dfsg1-0.1ubuntu3.1_powerpc.deb
      Size/MD5:   195324 be9eae3722aa36f4116d9396691e1307
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0.1ubuntu3.1_powerpc.deb
      Size/MD5:   270506 2053a375fdd9c85995578fba7ab19960
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.19.dfsg1-0.1ubuntu3.1_powerpc.deb
      Size/MD5:   126326 d3e617b7f300acba439891aa3c557930
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-heimdal_2.1.19.dfsg1-0.1ubuntu3.1_powerpc.deb
      Size/MD5:    57702 120b68bbda5d4f7b877d2da2974deff8

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.19.dfsg1-0.1ubuntu3.1_sparc.deb
      Size/MD5:   240950 3eec7545918f35351581bbea2e3cb951
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.19.dfsg1-0.1ubuntu3.1_sparc.deb
      Size/MD5:    50778 9a6ff0f6b6341fa19ee6860df80dac2b
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.19.dfsg1-0.1ubuntu3.1_sparc.deb
      Size/MD5:   145570 7a4592450d2d586e8a690791f7e754e6
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0.1ubuntu3.1_sparc.deb
      Size/MD5:   258200 b7daea529ff1b69b5096eff082cb6cbf
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.19.dfsg1-0.1ubuntu3.1_sparc.deb
      Size/MD5:   112408 28c8fe3ba67642a7331eb6a3a310452e
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-heimdal_2.1.19.dfsg1-0.1ubuntu3.1_sparc.deb
      Size/MD5:    50652 4ebf778245d25fcf68debb800bd4259e

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.22.dfsg1-18ubuntu2.1.diff.gz
      Size/MD5:   502724 1b572c467acc36e7d7be3703c71fd6a8
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.22.dfsg1-18ubuntu2.1.dsc
      Size/MD5:     1546 0c2ec0faf4a0313f667802cd7d6dd525
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.22.dfsg1.orig.tar.gz
      Size/MD5:  1370731 f196299b2c07f822c8c56db71b7dc7db

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2-doc_2.1.22.dfsg1-18ubuntu2.1_all.deb
      Size/MD5:   103298 ac2b14ed735a85b2ea5d805f432dbef4
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2_2.1.22.dfsg1-18ubuntu2.1_all.deb
      Size/MD5:    45222 0ac10998f9a6271e736e222b51f44edb

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-18ubuntu2.1_amd64.deb
      Size/MD5:   607106 0e786e449c9c4f352f72d1d3da5babcd
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-18ubuntu2.1_amd64.deb
      Size/MD5:   110786 2a2bf3ac98edc6c681b76592614663a3
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-18ubuntu2.1_amd64.deb
      Size/MD5:   276996 16a974923f244972a4f03ebe1983f3dd
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-18ubuntu2.1_amd64.deb
      Size/MD5:    67902 3ea88f575be9fa91120068d3c6aad8eb
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-18ubuntu2.1_amd64.deb
      Size/MD5:   160210 02a736d2a9d98937fc2091c30d709233
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-18ubuntu2.1_amd64.deb
      Size/MD5:   155144 c835ecd820db644b6b00660277fbaa9a
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-18ubuntu2.1_amd64.deb
      Size/MD5:    69496 8b782b8016d690b82edb6f4298f41d62
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-18ubuntu2.1_amd64.deb
      Size/MD5:    58664 d6b27d108dbe29ac31618dd3e3b2cadb
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-18ubuntu2.1_amd64.deb
      Size/MD5:    78628 98e4844da6535f5fba71bfe10f51eb37

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-18ubuntu2.1_i386.deb
      Size/MD5:   573982 fb3db9ccdd32904356234dbfac75cc32
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-18ubuntu2.1_i386.deb
      Size/MD5:   104996 84a7c5330c853bef8bd729addde7f9c8
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-18ubuntu2.1_i386.deb
      Size/MD5:   261598 6b69e0117accd5b67b8b7ac32b98113b
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-18ubuntu2.1_i386.deb
      Size/MD5:    65460 4ad91fff8b2dda6a7c906bd75d474b9c
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-18ubuntu2.1_i386.deb
      Size/MD5:   149846 1f6458d8d379c7bfef5d33bf699aec2d
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-18ubuntu2.1_i386.deb
      Size/MD5:   147052 ed0f0801dd389446bece5042473913c7
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-18ubuntu2.1_i386.deb
      Size/MD5:    66688 f2057a00384f5a458df50e3f73d5bbef
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-18ubuntu2.1_i386.deb
      Size/MD5:    58312 27ba6075adb584821548f40a7d370323
    http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-18ubuntu2.1_i386.deb
      Size/MD5:    76920 0094a703cd5ef2908ee5476937b35e3b

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
      Size/MD5:   580856 2fb20ef1d54e99d9348e77361c9b5d23
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
      Size/MD5:   103528 96b510c67fbbdc231df9ca325cd1e5a0
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
      Size/MD5:   260996 d6d9df656575dc311d662f59043d9a74
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
      Size/MD5:    65096 52ce482855dda6156e7405043affe86a
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
      Size/MD5:   145750 8cafa75c91005b1636eb2015988ba9e2
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
      Size/MD5:   145494 e173971a1159a365b631fb4ac5239b5b
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
      Size/MD5:    66638 d03d8648598fdf52c2cea909a7d709e7
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
      Size/MD5:    58270 b57fe417c8977bcf916e450fd9fc3d7b
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
      Size/MD5:    76036 ab8e08db33aeed48780634633ae99031

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-18ubuntu2.1_powerpc.deb
      Size/MD5:   623996 1b85ae276c8f63ab0b8c56622da03f71
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-18ubuntu2.1_powerpc.deb
      Size/MD5:   119026 15a5f740cca229b86f8a29e3ec026cbf
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-18ubuntu2.1_powerpc.deb
      Size/MD5:   283854 4d082aee1b12fc68122e8a44575b22a4
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-18ubuntu2.1_powerpc.deb
      Size/MD5:    72520 8a16b8e3b9311e4a37690c150cc673fe
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-18ubuntu2.1_powerpc.deb
      Size/MD5:   185074 b45a22c35bafb704c80bb566623c49c0
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-18ubuntu2.1_powerpc.deb
      Size/MD5:   169764 ac0425b54135391be81c3262a1fc40ba
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-18ubuntu2.1_powerpc.deb
      Size/MD5:    73070 ad14e09a4ea73322715a34fc317f5aab
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-18ubuntu2.1_powerpc.deb
      Size/MD5:    62356 2855926258d8d87b0922a575339eb25e
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-18ubuntu2.1_powerpc.deb
      Size/MD5:    80920 2ec1967b4d7ba1add113a1312a8ac8d2

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-18ubuntu2.1_sparc.deb
      Size/MD5:   541880 97aa4fa8d47c05171385b2dbc1273259
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-18ubuntu2.1_sparc.deb
      Size/MD5:   103802 522a2719c5ba168baddd61ecf09fb5bf
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-18ubuntu2.1_sparc.deb
      Size/MD5:   264744 748bc769cbb8707b152665643bcdd313
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-18ubuntu2.1_sparc.deb
      Size/MD5:    65102 2f19f0d93135a62306342387644859f2
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-18ubuntu2.1_sparc.deb
      Size/MD5:   139442 fc950499b6ed0b76e0fd3a241ce2d00b
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-18ubuntu2.1_sparc.deb
      Size/MD5:   148508 7b3377f8a4374107d67d41210d9aff4e
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-18ubuntu2.1_sparc.deb
      Size/MD5:    66050 bef4ffa6734c5a24b5765a51ed9ec5a2
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-18ubuntu2.1_sparc.deb
      Size/MD5:    56662 0b57ca416286ecffb1bf3ac7c7029f39
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-18ubuntu2.1_sparc.deb
      Size/MD5:    73930 215b27bfb65e9211015857a12d05f6bd

Updated packages for Ubuntu 8.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.22.dfsg1-21ubuntu2.1.diff.gz
      Size/MD5:    78183 1a2c69a2b16e8ca0da9c801c9545dadf
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.22.dfsg1-21ubuntu2.1.dsc
      Size/MD5:     2002 b63f74a69f65d786aed0f18cbfc7226b
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.22.dfsg1.orig.tar.gz
      Size/MD5:  1370731 f196299b2c07f822c8c56db71b7dc7db

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2-doc_2.1.22.dfsg1-21ubuntu2.1_all.deb
      Size/MD5:   104006 f68ec3472f9775d6dfb30adb5283db9b

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-21ubuntu2.1_amd64.deb
      Size/MD5:   639480 0b37c6b6fe89767d0d3c9d810ee90dac
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-21ubuntu2.1_amd64.deb
      Size/MD5:   116698 f9e02c5f9997a85e0fcbb5567cd7394b
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-21ubuntu2.1_amd64.deb
      Size/MD5:   279656 4b14fe9d58cb7c6966ef701885617cfa
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-21ubuntu2.1_amd64.deb
      Size/MD5:    69326 c9840f1f1f885eb0e78e8fcd907a061c
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-21ubuntu2.1_amd64.deb
      Size/MD5:   166604 ad3783c3e03cae25d615cb136620262a
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-21ubuntu2.1_amd64.deb
      Size/MD5:   158478 0917235229c9dc62d9f648a8886e5ebb
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-21ubuntu2.1_amd64.deb
      Size/MD5:    70930 e2c6de1e28308929e211d0775463371e
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-21ubuntu2.1_amd64.deb
      Size/MD5:    60046 2656487eeb27e44d6de1e29123995b7a
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-21ubuntu2.1_amd64.deb
      Size/MD5:    79786 c2bd93ae4f0c12bf89d07ab5fcab9388

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-21ubuntu2.1_i386.deb
      Size/MD5:   604740 0196f85f1c6335e12e9727981ea2564d
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-21ubuntu2.1_i386.deb
      Size/MD5:   108080 7bf9e0e79060bc69eb1268c0c7767ea2
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-21ubuntu2.1_i386.deb
      Size/MD5:   263628 427db168670771783b1a8aa11db05533
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-21ubuntu2.1_i386.deb
      Size/MD5:    66776 aab791027471f5678d3d4a10b419577c
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-21ubuntu2.1_i386.deb
      Size/MD5:   159876 97e30c95121ef312027e3d130a5497ad
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-21ubuntu2.1_i386.deb
      Size/MD5:   150030 96879fe4932f4aa67344c8e3f32a4c8e
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-21ubuntu2.1_i386.deb
      Size/MD5:    68572 57c18b19d0129baae3afb350969ed268
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-21ubuntu2.1_i386.deb
      Size/MD5:    59440 4748653dc5bac50608138948215f4277
    http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-21ubuntu2.1_i386.deb
      Size/MD5:    78238 bccc9c757e232df07b1b022aa8ce8e86

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-21ubuntu2.1_lpia.deb
      Size/MD5:   611316 fbc7be68dbbb4f53e340f5a7b71af73a
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-21ubuntu2.1_lpia.deb
      Size/MD5:   106388 1efaa60a12272867c35b9e80118aa974
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-21ubuntu2.1_lpia.deb
      Size/MD5:   262118 d8ca07ac2a68725167a1ae4a4cc7df2c
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-21ubuntu2.1_lpia.deb
      Size/MD5:    66368 64df42304911aecefa1a1731c63d5935
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-21ubuntu2.1_lpia.deb
      Size/MD5:   154490 30906be2aa2e95c68bf853f9ac0b40a5
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-21ubuntu2.1_lpia.deb
      Size/MD5:   148954 d60062ff4285fddb2042db2c6bbf40c5
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-21ubuntu2.1_lpia.deb
      Size/MD5:    67568 006c16e0a5f7490df03867b43bd868e0
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-21ubuntu2.1_lpia.deb
      Size/MD5:    59246 d7c9eb9f5e9caa16d49d711b2a8a4670
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-21ubuntu2.1_lpia.deb
      Size/MD5:    77256 ef23f0b6c850573960835da32c0ea3b1

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
      Size/MD5:   658848 7aa7da6ed42b2a1d71750194109e5949
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
      Size/MD5:   121794 039cd74016443d35bd7c2bf0f02e5073
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
      Size/MD5:   285252 76787f7fbb339cd82d2e71e97c513673
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
      Size/MD5:    73850 03ddb37325db2c734b5aa024cddf4d86
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
      Size/MD5:   189910 f965b02501e6faa97d8f3d47e2a892d2
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
      Size/MD5:   169106 19c003205f1bec2bd1f387dd28001bae
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
      Size/MD5:    73502 49148cc5b78b4008f3cffaf8a7db0269
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
      Size/MD5:    63500 55800344871279ecb2abcab42e48f216
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
      Size/MD5:    81888 ac34803536fedfd263e2367f4b07d472

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
      Size/MD5:   569244 36d403d7c5d5b045a80edeaa20e2335d
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
      Size/MD5:   106808 01f99a8a51010e7ac248d877611a8880
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
      Size/MD5:   265610 7ef285b63e30ade7125efde2dafa207c
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
      Size/MD5:    66234 8bcf5fee96944967de7e283b306490a0
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
      Size/MD5:   148976 b82823bbc082d3d9ad11c53999466aa1
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
      Size/MD5:   151946 057f6c9cc775da3412de53ca5e89fd71
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
      Size/MD5:    66558 004204ec46cd0fa8e52bcb2d5ef78c64
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
      Size/MD5:    57756 9007d526335ec3e92576632ae1494391
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
      Size/MD5:    75104 6b57383675faf9f07aaa8c07893b13b3

Updated packages for Ubuntu 9.04:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.22.dfsg1-23ubuntu3.1.diff.gz
      Size/MD5:    80704 e584b6be876acad9dd6476a71e216b13
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.22.dfsg1-23ubuntu3.1.dsc
      Size/MD5:     2027 de6aacb6a2b97c93f0eb0e6c41f227da
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.22.dfsg1.orig.tar.gz
      Size/MD5:  1370731 f196299b2c07f822c8c56db71b7dc7db

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2-doc_2.1.22.dfsg1-23ubuntu3.1_all.deb
      Size/MD5:   104442 06394f7eed360021a8743002d2ba7d9d

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
      Size/MD5:   641204 3b012c7ca20867f5914f47fde1902b59
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
      Size/MD5:   117244 a3d3afb7a2fe04060e988ab0d3b4b558
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
      Size/MD5:   279890 c79beabb2a191d9bab872ebfee4069d6
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
      Size/MD5:    69698 2b7762459ca0a79e35adb36b2a5c562b
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
      Size/MD5:   167000 66b9f5fecd47740fb32508f331b8edae
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
      Size/MD5:   160280 b2b6806e6dbc116d1f0340660af05eb0
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
      Size/MD5:    71284 8abdaad5b6884b10d0c558f8853b0a6b
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
      Size/MD5:    60422 49cab782fcf0a821067b4b24a440adbb
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
      Size/MD5:    79896 3f3daccf5ffa67b5093464586f4c2138

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23ubuntu3.1_i386.deb
      Size/MD5:   606006 505ad57fba0b1d6fb2aba9d39a56d336
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23ubuntu3.1_i386.deb
      Size/MD5:   108596 79ad2cfad515d99636f69164fa5c9f86
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23ubuntu3.1_i386.deb
      Size/MD5:   263920 84ae349b5beea17d271775af73294634
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23ubuntu3.1_i386.deb
      Size/MD5:    67160 ce12e051fefbfaa15515fa327574172d
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23ubuntu3.1_i386.deb
      Size/MD5:   160392 3b992dee02450248d278e5a12b12bd17
    http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23ubuntu3.1_i386.deb
      Size/MD5:   151914 796758ed773bb9892b85ea9fdaa43ed8
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23ubuntu3.1_i386.deb
      Size/MD5:    68942 07f5f456030d17470a48881af065c658
    
http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23ubuntu3.1_i386.deb
      Size/MD5:    59826 4a1d3c24f6d955d21fafc8f887218af5
    http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23ubuntu3.1_i386.deb
      Size/MD5:    78138 b757fd04f960368316dc771318cff83b

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
      Size/MD5:   612552 bb1bc88df5eb097386cc791738a0df9b
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
      Size/MD5:   106912 0125acb7944400f2efc59694d647c13b
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
      Size/MD5:   262526 69ab5c064719c5cc209e3a89420ae5b0
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
      Size/MD5:    66762 134eb17a95e77a3721c8844099d808a4
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
      Size/MD5:   154974 9afd25fcfdf98a94e121312c235fb47d
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
      Size/MD5:   150804 482b69a45289895b95332a2f87c467e4
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
      Size/MD5:    67922 05f13f3679240d71706a089f4d30ca58
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
      Size/MD5:    59614 1185dac4189788e46dd299f26fce4147
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
      Size/MD5:    77518 2387431e32781100272fdca4527f4478

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23ubuntu3.1_powerpc.deb
      Size/MD5:   659020 743bcee86fcb62ee52017141739d3176
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23ubuntu3.1_powerpc.deb
      Size/MD5:   122308 4d6641cf91775324a8956db08271075a
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23ubuntu3.1_powerpc.deb
      Size/MD5:   285700 785588a104e86593f03d9bb82aed6927
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23ubuntu3.1_powerpc.deb
      Size/MD5:    74238 e72519754abe25dc976af0bb2c5e5ca0
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23ubuntu3.1_powerpc.deb
      Size/MD5:   190346 015f75cee695899de401929b001b192c
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23ubuntu3.1_powerpc.deb
      Size/MD5:   171028 682093e7bf604b6fbe4e2e6882c224a3
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23ubuntu3.1_powerpc.deb
      Size/MD5:    73972 9e2ef8b43ab499890db4b3e5e4daa7bc
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23ubuntu3.1_powerpc.deb
      Size/MD5:    63896 d0f8a9d2f79a0368dbf0a85780d3ed70
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23ubuntu3.1_powerpc.deb
      Size/MD5:    83324 b684f98a504b009d0d3fc2fbbbce93b1

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
      Size/MD5:   569718 170649cd513858655fb88b5043a6fdb4
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
      Size/MD5:   107098 e4d332b0455ab66556c8cdb18c652322
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
      Size/MD5:   265916 3871391c5eb0aa0abc6b3a0bedd6ee9a
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
      Size/MD5:    66526 27504eaaffac73eb1c027a8c1c81f475
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
      Size/MD5:   149124 bd20c438df08ea05e586708de51e93e1
    http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
      Size/MD5:   153788 ab9a07f0dcbbcf5f217ba67a672109aa
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
      Size/MD5:    66890 47b2b4ff96391684aa5d9401aaf80ede
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
      Size/MD5:    58112 2a5d4a9913e8c300bb62c915c5eefdbc
    http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
      Size/MD5:    76304 a876a9d0213892b9365b544aaa3e4d4b

Attachment: signature.asc
Description: Digital signature


  By Date           By Thread  

Current thread:
  • [USN-790-1] Cyrus SASL vulnerability Kees Cook (Jun 25)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault