Skip to content
OpenAdvisories
Medium ELSA-2020-4497 1 CVE

Moderate: cyrus-sasl security, bug fix, and enhancement update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Ecosystem: Oracle Linux

Summary

[2.1.27-5]
- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734

[2.1.27-4]
- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133

[2.1.27-3]
- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054

[2.1.27-2]
- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 8 cyrus-sasl 0:2.1.27-5.el8
Oracle Linux · 8 cyrus-sasl-devel 0:2.1.27-5.el8
Oracle Linux · 8 cyrus-sasl-gs2 0:2.1.27-5.el8
Oracle Linux · 8 cyrus-sasl-gssapi 0:2.1.27-5.el8
Oracle Linux · 8 cyrus-sasl-ldap 0:2.1.27-5.el8
Oracle Linux · 8 cyrus-sasl-lib 0:2.1.27-5.el8
Oracle Linux · 8 cyrus-sasl-md5 0:2.1.27-5.el8
Oracle Linux · 8 cyrus-sasl-ntlm 0:2.1.27-5.el8
Oracle Linux · 8 cyrus-sasl-plain 0:2.1.27-5.el8
Oracle Linux · 8 cyrus-sasl-scram 0:2.1.27-5.el8
Oracle Linux · 8 cyrus-sasl-sql 0:2.1.27-5.el8

Vulnerabilities 1