-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1807-1 security@debian.org http://www.debian.org/security/ Nico Golde June 1st, 2009 http://www.debian.org/security/faq - -------------------------------------------------------------------------- Package : cyrus-sasl2, cyrus-sasl2-heimdal Vulnerability : buffer overflow Problem type : remote Debian-specific: no Debian bug : 528749 CERT advisory : VU#238019 CVE ID : CVE-2009-0688 James Ralston discovered that the sasl_encode64() function of cyrus-sasl2, a free library implementing the Simple Authentication and Security Layer, suffers from a missing null termination in certain situations. This causes several buffer overflows in situations where cyrus-sasl2 itself requires the string to be null terminated which can lead to denial of service or arbitrary code execution. Important notice (Quoting from US-CERT): While this patch will fix currently vulnerable code, it can cause non-vulnerable existing code to break. Here's a function prototype from include/saslutil.h to clarify my explanation: /* base64 encode * in -- input data * inlen -- input data length * out -- output buffer (will be NUL terminated) * outmax -- max size of output buffer * result: * outlen -- gets actual length of output buffer (optional) * * Returns SASL_OK on success, SASL_BUFOVER if result won't fit */ LIBSASL_API int sasl_encode64(const char *in, unsigned inlen, char *out, unsigned outmax, unsigned *outlen); Assume a scenario where calling code has been written in such a way that it calculates the exact size required for base64 encoding in advance, then allocates a buffer of that exact size, passing a pointer to the buffer into sasl_encode64() as *out. As long as this code does not anticipate that the buffer is NUL-terminated (does not call any string-handling functions like strlen(), for example) the code will work and it will not be vulnerable. Once this patch is applied, that same code will break because sasl_encode64() will begin to return SASL_BUFOVER. For the oldstable distribution (etch), this problem will be fixed soon. For the stable distribution (lenny), this problem has been fixed in version 2.1.22.dfsg1-23+lenny1 of cyrus-sasl2 and cyrus-sasl2-heimdal. For the testing distribution (squeeze), this problem will be fixed soon. For the unstable distribution (sid), this problem has been fixed in version 2.1.23.dfsg1-1 of cyrus-sasl2 and cyrus-sasl2-heimdal. We recommend that you upgrade your cyrus-sasl2/cyrus-sasl2-heimdal packages. Upgrade instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 5.0 alias lenny - -------------------------------- Debian (stable) - --------------- Stable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc. Source archives: http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal_2.1.22.dfsg1-23+lenny1.dsc Size/MD5 checksum: 1775 510a3befa02a034758711c4bf329082e http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2_2.1.22.dfsg1-23+lenny1.diff.gz Size/MD5 checksum: 76458 85b876ee4b8d33a804f1164d727a5281 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2_2.1.22.dfsg1-23+lenny1.dsc Size/MD5 checksum: 1930 6939422cb0ce3455ce5a1a494692fd68 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2_2.1.22.dfsg1.orig.tar.gz Size/MD5 checksum: 1370731 f196299b2c07f822c8c56db71b7dc7db http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal_2.1.22.dfsg1.orig.tar.gz Size/MD5 checksum: 1370731 f196299b2c07f822c8c56db71b7dc7db http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal_2.1.22.dfsg1-23+lenny1.diff.gz Size/MD5 checksum: 27834 dae4de4ce221e8d5f9ca9fbc8376f1ba Architecture independent packages: http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-doc_2.1.22.dfsg1-23+lenny1_all.deb Size/MD5 checksum: 104228 c5b2a9dac2683208cbc7fe0aeaf9e276 alpha architecture (DEC Alpha) http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_alpha.deb Size/MD5 checksum: 84954 9d18b6afabcdb581ba692b0de7abc489 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_alpha.deb Size/MD5 checksum: 603214 764f256abbe3cfc91a4c0392d79a8262 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23+lenny1_alpha.deb Size/MD5 checksum: 123794 e2d71664b9f4dbf586366a1ed21e8c23 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_alpha.deb Size/MD5 checksum: 76294 4e15f169d2b45fa179cdf4a919ab4316 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23+lenny1_alpha.deb Size/MD5 checksum: 198230 2b8a7bf7981b5f5d999a0a5d671ea401 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_alpha.deb Size/MD5 checksum: 75114 0da83acb9fbf8b7dc51989cd2c1f3e78 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_alpha.deb Size/MD5 checksum: 61754 6291c4405e6cbd3507737f866d6a53ee http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23+lenny1_alpha.deb Size/MD5 checksum: 165322 72628edb29a049c66a31d3ec9678ad89 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_alpha.deb Size/MD5 checksum: 77222 d68fe70130dd0e59ae91a98d6718d6d7 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23+lenny1_alpha.deb Size/MD5 checksum: 319558 9c80d311d0c16df5f368708e5a32c6e0 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_alpha.deb Size/MD5 checksum: 69300 2c83c31dac6f051c8a9879effd293aa8 amd64 architecture (AMD x86_64 (AMD64)) http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_amd64.deb Size/MD5 checksum: 78176 04d539c8841bd7d1307d74cd2c0189f9 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23+lenny1_amd64.deb Size/MD5 checksum: 114804 110e9007dc74123976337a86e856eaf0 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_amd64.deb Size/MD5 checksum: 68878 7db9847a4723d6826f7920ae1993906e http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_amd64.deb Size/MD5 checksum: 69052 84be4bf75f96bae025d2b92735670dfc http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_amd64.deb Size/MD5 checksum: 67958 d47d4ee189346d1bdf4b00be9cc8dcfb http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_amd64.deb Size/MD5 checksum: 58050 ea914b6bf177e468c156fe61bd869d41 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23+lenny1_amd64.deb Size/MD5 checksum: 276504 eaa42b2f795f8fe85ebb5f84d529071c http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_amd64.deb Size/MD5 checksum: 609428 91d51cc190a79b50b1b5f96d5d5e6b80 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23+lenny1_amd64.deb Size/MD5 checksum: 156374 48d94aab8c3f98eacebea35824e726e8 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23+lenny1_amd64.deb Size/MD5 checksum: 163456 05b37316e0811ecbfbda111e5628f2b1 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_amd64.deb Size/MD5 checksum: 67342 5633875f4f067e8a92860f80fd57d312 arm architecture (ARM) http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_arm.deb Size/MD5 checksum: 63788 fe7bd8332cbef2c77cf3dbfd377d878d http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23+lenny1_arm.deb Size/MD5 checksum: 265720 fdb983efb59dcba138d20b08d04d9760 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23+lenny1_arm.deb Size/MD5 checksum: 106112 a6b6abccd297cab3e5d0bb8af0c7bdc1 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_arm.deb Size/MD5 checksum: 573898 24f922a08943d1036ef11c292de130c8 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_arm.deb Size/MD5 checksum: 64598 a0e5097fac9b08096848ba18d602a9e6 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_arm.deb Size/MD5 checksum: 67706 423ceff082b95c8d355a46d82e0c8b96 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_arm.deb Size/MD5 checksum: 73592 3d20e751e51ce1001ecdf74e55756458 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_arm.deb Size/MD5 checksum: 65062 3b82a869de27691439188148cd4ce84d http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23+lenny1_arm.deb Size/MD5 checksum: 147070 52d2c37432bea8aae2ba23f8f3c4b90c http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23+lenny1_arm.deb Size/MD5 checksum: 136654 f11faeafb7502f5eb36361f8c877223d http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_arm.deb Size/MD5 checksum: 56716 d2048db8e57059c1c9f2ade3b92ebc1f armel architecture (ARM EABI) http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_armel.deb Size/MD5 checksum: 56706 ccbe00612c14d8cb7c46ceec1a523f93 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_armel.deb Size/MD5 checksum: 67902 c8f859a00df9b06e08e0e3f405fb5b7f http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_armel.deb Size/MD5 checksum: 575992 15d54bf1d6026698c453b8c3995742e3 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_armel.deb Size/MD5 checksum: 74912 47b6aac13a77bdb5fbe7d9c6585d5036 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23+lenny1_armel.deb Size/MD5 checksum: 144840 fa380ab748a1ffe5975b97b78b2c0416 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_armel.deb Size/MD5 checksum: 63884 00ff7248bca7acf9b704baaf90d0689e http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_armel.deb Size/MD5 checksum: 64708 92616d18849b68029919d313679b1c82 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23+lenny1_armel.deb Size/MD5 checksum: 263854 263639282e6004454c5b33c71b9647d4 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23+lenny1_armel.deb Size/MD5 checksum: 104616 a276680084df232510cc4bc617055a18 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23+lenny1_armel.deb Size/MD5 checksum: 143942 57e4a79481797f0c32f60401ee1237de http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_armel.deb Size/MD5 checksum: 63678 2eda7c4085a8f6877ce8061f907b2ad1 hppa architecture (HP PA RISC) http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_hppa.deb Size/MD5 checksum: 80276 d024aad3a3d2d790b0ab5f826af132eb http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_hppa.deb Size/MD5 checksum: 71646 00212830b9715ceda5eb01d1aaa57402 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23+lenny1_hppa.deb Size/MD5 checksum: 159494 fd9c8f622178e39834bcadfef091c736 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_hppa.deb Size/MD5 checksum: 71444 b93c7dae5ae9405b35cd2c41e7253c07 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23+lenny1_hppa.deb Size/MD5 checksum: 172492 207dc3d84027fc346d90d7810e588a64 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23+lenny1_hppa.deb Size/MD5 checksum: 294572 9be25532614ae62163e2b635061fe628 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_hppa.deb Size/MD5 checksum: 61040 25d4df1f36f401f985bf931f46b64781 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_hppa.deb Size/MD5 checksum: 70710 eb2a5d507bf152da6c36322fc70f449c http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_hppa.deb Size/MD5 checksum: 68282 f4e90c409355887a3c1fdae2471e386b http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_hppa.deb Size/MD5 checksum: 588948 4a74364ca6307b066927f26525ff0fdb http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23+lenny1_hppa.deb Size/MD5 checksum: 118338 f0a1c2c0dd52f0a4d26f3abd4d5309ad i386 architecture (Intel ia32) http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_i386.deb Size/MD5 checksum: 57462 5ebb116b052de64d4c7014c1ae14e267 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23+lenny1_i386.deb Size/MD5 checksum: 259252 ae246a06589d3e2779627c6d3a39eb78 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_i386.deb Size/MD5 checksum: 64212 e3f9fe64851978336fe8ef915ec7b826 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_i386.deb Size/MD5 checksum: 67634 8ad13d8d15d19d1dba507e4db3026c54 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23+lenny1_i386.deb Size/MD5 checksum: 145828 dd6dc6e38f07c36d8c0bbdac20f9eee5 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_i386.deb Size/MD5 checksum: 575092 fa8a679ad9aa118404834e3c46a6acbf http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_i386.deb Size/MD5 checksum: 75366 cc8dc458e34dda7c3de4f70279a3105c http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_i386.deb Size/MD5 checksum: 64160 51d92ff406fde2abd21e6080be6bf3a3 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23+lenny1_i386.deb Size/MD5 checksum: 105514 36ce7fca9761b6f4dd8b94fa5a67b396 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23+lenny1_i386.deb Size/MD5 checksum: 146610 f1447794b61c530605a2da75829f62ba http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_i386.deb Size/MD5 checksum: 65456 ecd58a3ccf79672c2ce00fe7a7b161c7 ia64 architecture (Intel ia64) http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_ia64.deb Size/MD5 checksum: 67580 ece86227d7eace47ab16237e915b3fec http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_ia64.deb Size/MD5 checksum: 91958 6536d489a5b387070c87fda3d6a928a3 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_ia64.deb Size/MD5 checksum: 68352 b8532fb79679952018fc9e46fb3ae9e9 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23+lenny1_ia64.deb Size/MD5 checksum: 341402 8424c2421afe1140c7c2a0ee472ad8a5 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_ia64.deb Size/MD5 checksum: 83024 4aacfaec8c8f15081db9655ef1050832 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23+lenny1_ia64.deb Size/MD5 checksum: 149060 90993f31514099790278be32aa5e6614 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23+lenny1_ia64.deb Size/MD5 checksum: 187396 2fcf8a48bfe03ec3aff87cd75f232ff3 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23+lenny1_ia64.deb Size/MD5 checksum: 243462 264bddaa5766aeb444d03b40eb4d7fa1 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_ia64.deb Size/MD5 checksum: 568004 e5fc8d3bdb48f173cf1586e6d55e5bf6 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_ia64.deb Size/MD5 checksum: 79706 8e11ab18902532dfd516fdeb35093312 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_ia64.deb Size/MD5 checksum: 82078 0a29e217ca95d171305ed53615b7aeb7 mips architecture (MIPS (Big Endian)) http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23+lenny1_mips.deb Size/MD5 checksum: 104880 5863587f4ebdfc8d2accb92c43975770 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23+lenny1_mips.deb Size/MD5 checksum: 155770 46cc9b8f9907b607d2029b25a2d5176b http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_mips.deb Size/MD5 checksum: 68930 52fbafb17a0b36cd4f4ced0257963d00 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_mips.deb Size/MD5 checksum: 67240 0c00396d4af872fbd68435ce37f5b91f http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_mips.deb Size/MD5 checksum: 57308 3655fa5d350a36a6e7ac7e15c487c67c http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_mips.deb Size/MD5 checksum: 77244 901ab9aa01ee8f36ea0c4ae8b9b01384 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_mips.deb Size/MD5 checksum: 68074 6228a649cc3c0af4278709d81a85691f http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23+lenny1_mips.deb Size/MD5 checksum: 153862 390c96e802a795ac507d8b97d250b9bc http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_mips.deb Size/MD5 checksum: 603738 bd9e9352b83c7151718a0b28e8f4d58b http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23+lenny1_mips.deb Size/MD5 checksum: 287770 a810f916805a6c3622eecf55bac38d88 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_mips.deb Size/MD5 checksum: 67072 b8d4429a81ee151f53417dbf4e2af658 mipsel architecture (MIPS (Little Endian)) http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_mipsel.deb Size/MD5 checksum: 593356 6610f0434f090ac4da1c9d31141ff5e8 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_mipsel.deb Size/MD5 checksum: 67462 6139841e9d8c59b4da4ab38c7518a0ca http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_mipsel.deb Size/MD5 checksum: 68504 69adbead8bd79767a9de0f4b0354306e http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_mipsel.deb Size/MD5 checksum: 67572 b0dadb218ba13c6fcb2cd9771b392289 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_mipsel.deb Size/MD5 checksum: 77924 1426b53e89f0771dd89e0916fa5315b8 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23+lenny1_mipsel.deb Size/MD5 checksum: 108728 0a5e4d5a5fa93992198c14fa4a018e8d http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_mipsel.deb Size/MD5 checksum: 68454 b4d4b2b12789d6c1b9b55547bd23289f http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23+lenny1_mipsel.deb Size/MD5 checksum: 164172 1b1ceb3737ab04fb22bd4a4d20e5f4c0 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_mipsel.deb Size/MD5 checksum: 57758 b1af996db05522ffe582fc776132fe9f http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23+lenny1_mipsel.deb Size/MD5 checksum: 287940 fb18899c8acd1a3fb9cfb2950c2a0786 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23+lenny1_mipsel.deb Size/MD5 checksum: 155390 923b0df689d8546f64d9e94668e1a8c0 powerpc architecture (PowerPC) http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23+lenny1_powerpc.deb Size/MD5 checksum: 119716 64acba5b3c822aeea5d92acdbe13cdf5 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_powerpc.deb Size/MD5 checksum: 70260 55506c65fcb75c975d634e72ca57b499 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_powerpc.deb Size/MD5 checksum: 70536 e2dd4053970203b291fc0064e3fc7e4f http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_powerpc.deb Size/MD5 checksum: 625910 b49078c416463d3e6fe9e1abaa857ad7 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_powerpc.deb Size/MD5 checksum: 71772 e73ebc9e9f7b3f957b22dbbed7af487c http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23+lenny1_powerpc.deb Size/MD5 checksum: 185506 6e31ca4fc06dd38ce754b84f608b0018 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23+lenny1_powerpc.deb Size/MD5 checksum: 170426 564ade009cd10f03ec390d51a18b1bc6 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_powerpc.deb Size/MD5 checksum: 71610 e5db62f80f8a909dec79e7926db1c43a http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23+lenny1_powerpc.deb Size/MD5 checksum: 281752 5595cab6b86610d4f41f648584091c24 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_powerpc.deb Size/MD5 checksum: 61528 a4d2292554728724b07549d4e4ba9abd http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_powerpc.deb Size/MD5 checksum: 79702 cac4d2488861483529067e5bf3e57cfa s390 architecture (IBM S/390) http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_s390.deb Size/MD5 checksum: 66690 a52cee912cf1f46018d8ed8c54ccf9b6 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_s390.deb Size/MD5 checksum: 604082 0f8f8838bc5d8487de8a8b23ecb17329 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23+lenny1_s390.deb Size/MD5 checksum: 112752 890c4b70503ab1bb94fbc0d43d6c7328 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_s390.deb Size/MD5 checksum: 68984 ab0d3fc56183cd0ff319cdac869b9251 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_s390.deb Size/MD5 checksum: 77658 d7e99571c7bfa56fbf753b1f69a48935 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_s390.deb Size/MD5 checksum: 67948 e6e7ab2c5fc90b575896e11acdb227b4 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23+lenny1_s390.deb Size/MD5 checksum: 166632 a98fd5a59024bd1a2bdd1fb60e692d02 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_s390.deb Size/MD5 checksum: 67832 31291b7faa6591eb93d8879389a00360 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23+lenny1_s390.deb Size/MD5 checksum: 157992 66a99b49a60c0e82d0d92d112d381c2e http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_s390.deb Size/MD5 checksum: 58868 a663ebf059cf987c9949878d0efc7dfc http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23+lenny1_s390.deb Size/MD5 checksum: 273358 2b4557d2cf8f639984a44dfe6a889b2c sparc architecture (Sun SPARC/UltraSPARC) http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1-23+lenny1_sparc.deb Size/MD5 checksum: 144494 08996d7a2ba0f2ff53abd41245b4f352 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules_2.1.22.dfsg1-23+lenny1_sparc.deb Size/MD5 checksum: 137850 394ff90e509d13b822d5ed0cddc2ea27 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg1-23+lenny1_sparc.deb Size/MD5 checksum: 102142 4739d9c336e9f8173147eb222353ff7a http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_sparc.deb Size/MD5 checksum: 63600 39aa7cbabf1e395d297bc9636402f5a7 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_sparc.deb Size/MD5 checksum: 62582 88bd4a20e17255314a5dd788bbb02f86 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.dfsg1-23+lenny1_sparc.deb Size/MD5 checksum: 261038 003e8ca005174a442e1271a04d6c885f http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_sparc.deb Size/MD5 checksum: 55826 1439ea1b2401eefd06cdd608a9559fa6 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_sparc.deb Size/MD5 checksum: 62976 6c75a70e425e2032975c46634c404591 http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_sparc.deb Size/MD5 checksum: 65428 9b2b3189c39972e611bc180fd5aa6ba1 http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_sparc.deb Size/MD5 checksum: 535118 407f26e926701d7a0008522aa5da27bb http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_sparc.deb Size/MD5 checksum: 74926 f2b2c0957166e2196404efbbf9413bfb These files will probably be moved into the stable distribution on its next update. - --------------------------------------------------------------------------------- For apt-get: deb http://security.debian.org/ stable/updates main For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main Mailing list: debian-security-announce@lists.debian.org Package info: `apt-cache show ' and http://packages.debian.org/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkojzKIACgkQHYflSXNkfP8X4QCdFIZfAWStsWeHaU/VPvslWafO cOQAniJfVdsiGmjL2V+VHffEeQJF5j5A =SHqc -----END PGP SIGNATURE-----