Accepted cyrus-sasl2 2.1.28+dfsg-10+deb12u1 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 17:03:02 +0200
Source: cyrus-sasl2
Architecture: source
Version: 2.1.28+dfsg-10+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Cyrus Team <team+cyrus@tracker.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Changes:
 cyrus-sasl2 (2.1.28+dfsg-10+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2026-107161 + test
     heap-based buffer overflow due to not recomputing a buffer size
     in the DIGEST-MD5 plugin
     (based on the patch by Bastian Germann for trixie-pu)
Checksums-Sha1:
 4602f48152c33d44ae1c10e21dddc9779fa4a56d 3670 cyrus-sasl2_2.1.28+dfsg-10+deb12u1.dsc
 8b00d7de5bcbcab525463f12e23c4b813ebed244 797472 cyrus-sasl2_2.1.28+dfsg.orig.tar.xz
 a8d9eb37d38c36cc63ad2d5d4063a1e18dde1952 99600 cyrus-sasl2_2.1.28+dfsg-10+deb12u1.debian.tar.xz
 d850806701d8916fb7a552e2446d680f8f5b79ee 17291 cyrus-sasl2_2.1.28+dfsg-10+deb12u1_amd64.buildinfo
Checksums-Sha256:
 088990ef19c88abfbf66321eba0d0c3566ee2a5ce135e165eff5b6c2716a2ff0 3670 cyrus-sasl2_2.1.28+dfsg-10+deb12u1.dsc
 a15886d7da5958bd27f35b7c871dd872f6dc5b9917c9b6b15e3de014c7dab3d9 797472 cyrus-sasl2_2.1.28+dfsg.orig.tar.xz
 390fa9435dc9e7de7c4fe18423cf04b5c2e54050ef0fd344972dab50980fb8b4 99600 cyrus-sasl2_2.1.28+dfsg-10+deb12u1.debian.tar.xz
 f025a41875da2f2456785abf854830f31c18fe049a7257062326e65b35e6c705 17291 cyrus-sasl2_2.1.28+dfsg-10+deb12u1_amd64.buildinfo
Files:
 e750cad6eaba793685f88ae97999f6d9 3670 libs optional cyrus-sasl2_2.1.28+dfsg-10+deb12u1.dsc
 7d9a1f3f8dbc2731eed6e8e177a927be 797472 libs optional cyrus-sasl2_2.1.28+dfsg.orig.tar.xz
 f475b8e6215f9202e24296115ba55df7 99600 libs optional cyrus-sasl2_2.1.28+dfsg-10+deb12u1.debian.tar.xz
 9319f36ae9aadeb4151d2ae7de83afac 17291 libs optional cyrus-sasl2_2.1.28+dfsg-10+deb12u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=dIxM
-----END PGP SIGNATURE-----