Skip to content
OpenAdvisories
Unscored RHSA-2004:546 1 CVE

Red Hat Security Advisory: cyrus-sasl security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as cyrus-sasl 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::as cyrus-sasl-debuginfo 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::as cyrus-sasl-devel 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::as cyrus-sasl-gssapi 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::as cyrus-sasl-md5 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::as cyrus-sasl-plain 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::desktop cyrus-sasl 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::desktop cyrus-sasl-debuginfo 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::desktop cyrus-sasl-devel 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::desktop cyrus-sasl-gssapi 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::desktop cyrus-sasl-md5 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::desktop cyrus-sasl-plain 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::es cyrus-sasl 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::es cyrus-sasl-debuginfo 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::es cyrus-sasl-devel 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::es cyrus-sasl-gssapi 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::es cyrus-sasl-md5 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::es cyrus-sasl-plain 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::ws cyrus-sasl 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::ws cyrus-sasl-debuginfo 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::ws cyrus-sasl-devel 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::ws cyrus-sasl-gssapi 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::ws cyrus-sasl-md5 0:2.1.15-10
Red Hat · RHEL 3 enterprise_linux:3::ws cyrus-sasl-plain 0:2.1.15-10

Vulnerabilities 1

  • Unscored —
    CVE-2004-0884

    The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to…

    cyrus-sasl2 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/lib/common.c.diff?r1=1.103&r2=1.104
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=134657
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=134979
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_546.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-0884
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617313
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0884
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0884