-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 19 Dec 2019 22:59:30 +0100 Source: cyrus-sasl2 Architecture: source Version: 2.1.27+dfsg-1+deb10u1 Distribution: buster-security Urgency: high Maintainer: Debian Cyrus Team <team+cyrus@tracker.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 947043 Changes: cyrus-sasl2 (2.1.27+dfsg-1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Off-by-one in _sasl_add_string function (CVE-2019-19906) (Closes: #947043) Checksums-Sha1: c2af544a3fb6d6735dbf11958aaa772a07c8801b 3580 cyrus-sasl2_2.1.27+dfsg-1+deb10u1.dsc 6da3baff1685e96b93b46cdd47e13ecc34a632df 2058596 cyrus-sasl2_2.1.27+dfsg.orig.tar.xz 7535cdb01b04cfa4b2a5d9619aa2e837f0291dc9 99972 cyrus-sasl2_2.1.27+dfsg-1+deb10u1.debian.tar.xz Checksums-Sha256: 4537e3acdf1e009c402110aa47d6f5acef87594b4ad7e13733d3956d85b2d110 3580 cyrus-sasl2_2.1.27+dfsg-1+deb10u1.dsc 108b0c691c423837264f05abb559ea76c3dfdd91246555e8abe87c129a6e37cd 2058596 cyrus-sasl2_2.1.27+dfsg.orig.tar.xz df71d3cd6c623702c5daeab440c91899c8d4e7955cf632e6bd07de3a65cb8538 99972 cyrus-sasl2_2.1.27+dfsg-1+deb10u1.debian.tar.xz Files: 5f4931df32fa8c405220d05c1f26925e 3580 libs standard cyrus-sasl2_2.1.27+dfsg-1+deb10u1.dsc ce30955361d1cdde3c31d0ee742e338d 2058596 libs standard cyrus-sasl2_2.1.27+dfsg.orig.tar.xz ba6707c9b3f82742a8b25d5d95fd6dd3 99972 libs standard cyrus-sasl2_2.1.27+dfsg-1+deb10u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl379AdfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89En3AP/j/ZLqYssVCDeD358qGOdFwPB/m88w/E Mwe1e3kwsXiItNuj7eZqiOVGdb4H2e102mH+h5NxBkruSGinBRSdcY2/4Cg39hKX eXU8bH66O1HlLvsuvbP9PeMZ/3xQ7qktBLfIyAUQippTVcH2voqPj06kvInVsjOq tTeVL12I2s70qUSgzI4C3ziSm4bx4qhRJ6YKoFjIflPXD3wSjItnFpSKTXVtQSvB HNxT9dH55YdJz1U7KViMNvENjkf600izYi2QJLdVLfI+/YCyxDJRJj6JXzZbnCPD Zfjeinxwztd+/U5lsT8/0JfEAEzGUXGaZvAKmYqIO3AKe+d2x0wpfOvgCoDGEgQV mOUU2q6Iz6F9h0dll1nWXqFIcoXnYDO+LgHHVxskW2EJ5jTXfHaOu7bKG/rh18jf dZZ+YYirfhA3YaCvp8URM1buvVL1klCD9hjO+ptScEhOi2EbN+6qVdYUPw9rj771 rrPxOFcx22NN+xjo2Hao8ennGtxKLmwjBTIGbYlNkHGUJ/0ai1t62HUUqLX2wRH5 EqpEtMxLqSgy1+fb0y/+qvnsJbiTJIa0ZriZh7O1igW473FHozT1oZjrJB9b+tQG CLuELxucix+2s51y4D7aarqgEhpTNld5YnA0zaBd8iQgklZoLF59L5joFZDyiOdR 8qpQdx/5KtLO =xA/a -----END PGP SIGNATURE-----