Technical Description

Fedora has released updated packages to address a vulnerability identified in Cyrus-SASL. This flaw could be exploited by remote attackers to crash applications linked against the vulnerable library. For additional information, see : VUPEN/ADV-2006-1306

Affected Products

Fedora Core 4

Solution

Upgrade the affected packages :

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

300a391df8ef3ed01c3d930bbd8992af80a24a5d SRPMS/cyrus-sasl-2.1.20-6.src.rpm
ae29062ae36281c58bc77df6796a75bab5e1564c ppc/cyrus-sasl-2.1.20-6.ppc.rpm
00d8872c1e9c05e02728d07b1837273fe4d91fec ppc/cyrus-sasl-devel-2.1.20-6.ppc.rpm
0b3d9e7b91939e3e1d9efebf94830d174feab73f ppc/cyrus-sasl-gssapi-2.1.20-6.ppc.rpm
4a0b9ba3d007b7c256061e1dac570721626173e1 ppc/cyrus-sasl-plain-2.1.20-6.ppc.rpm
1e645b2d9d88609c7582cd7757ab6ace7290acc2 ppc/cyrus-sasl-md5-2.1.20-6.ppc.rpm
022c234d85d077e1592c9d63bdcdceef5602bacb ppc/cyrus-sasl-ntlm-2.1.20-6.ppc.rpm
5c5220731335248e2bbb156eb34d339e52aeda0a ppc/cyrus-sasl-sql-2.1.20-6.ppc.rpm
84468cde3141548964f260c1f8c9c117a1925e39 ppc/debug/cyrus-sasl-debuginfo-2.1.20-6.ppc.rpm
b5d12f5ca395bcb0a671e9c2d06c4c824a17f296 x86_64/cyrus-sasl-2.1.20-6.x86_64.rpm
f72d21020e90d8750ec56cdd40ecbbba60d7ff9b x86_64/cyrus-sasl-devel-2.1.20-6.x86_64.rpm
64a2b032fd9a44b8938e735e096ebe71426268a8 x86_64/cyrus-sasl-gssapi-2.1.20-6.x86_64.rpm
6686959043b44986287deda63da87aefcbccd594 x86_64/cyrus-sasl-plain-2.1.20-6.x86_64.rpm
3873fb181eee05e9ca041a28697af0a2c7755564 x86_64/cyrus-sasl-md5-2.1.20-6.x86_64.rpm
afd1e3c8721f86ea5404a632d827058b6fdc2589 x86_64/cyrus-sasl-ntlm-2.1.20-6.x86_64.rpm
75cafe4c5bcb69e42d4248739e2b91c1c3342e90 x86_64/cyrus-sasl-sql-2.1.20-6.x86_64.rpm
9eb024f7973bf7239362c857baed419299f149c3 x86_64/debug/cyrus-sasl-debuginfo-2.1.20-6.x86_64.rpm
62856330d3293bee87015a51da9b8c820385f91d i386/cyrus-sasl-2.1.20-6.i386.rpm
eac481e95c4975fad38c56a81222dec3d0b29135 i386/cyrus-sasl-devel-2.1.20-6.i386.rpm
75af87f7b6342795fea3e02f98cf87a1a1572bd0 i386/cyrus-sasl-gssapi-2.1.20-6.i386.rpm
d5909b7f6be21dc07fa1df918accf5c6fea85458 i386/cyrus-sasl-plain-2.1.20-6.i386.rpm
952e9b5772643a798c4449bc8be97cbaca9aace1 i386/cyrus-sasl-md5-2.1.20-6.i386.rpm
a91ac7685c7f80c028906be5963b48c564ef5927 i386/cyrus-sasl-ntlm-2.1.20-6.i386.rpm
d57aa2bb3d7662cb37f1b0abf968946638c0ac53 i386/cyrus-sasl-sql-2.1.20-6.i386.rpm
7b92aa6172f8fe87e2607e77e607578e0a679470 i386/debug/cyrus-sasl-debuginfo-2.1.20-6.i386.rpm

References

http://www.vupen.com/english/advisories/2006/1722
https://www.redhat.com/archives/fedora-package-announce/2006-May/msg00042.html

ChangeLog

2006-05-09 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.