Rhba-2009:1120: Bug Fix Update; Cyrus-Sasl; Rhba-2009:1330: Bug Fix Update - Red Hat ENTERPRISE LINUX 5.4 - TECHNICAL NOTES Manual

Chapter 1. Package Updates
imapd) relied on this function's output being properly terminated. Under certain conditions, improperly
terminated output from sasl_encode64() could, potentially, cause cyrus-imapd to crash, disclose
portions of its memory, or lead to SASL authentication failures.
Users of cyrus-imapd are advised to upgrade to these updated packages, which resolve this issue.
After installing the update, cyrus-imapd will be restarted automatically.

1.32.2. RHBA-2009:1120: bug fix update

Note
This update has already been released (prior to the GA of this release) as FASTRACK
RHBA-2009:1120
errata
Updated cyrus-imapd packages that fix several bugs are now available.
The cyrus-imapd package contains a high-performance mail server with IMAP, POP3, NNTP and
SIEVE support.
These updated cyrus-imapd packages provide fixes for the following bugs:
• attempting to connect to the update server failed and resulted in the following error messages being
logged to /var/log/maillog:
connect(192.168.11.110) failed: Invalid argument
couldn't connect to MUPDATE server
[IP address]: no connection to server
FATAL: error connecting with MUPDATE server
These updated packages correct this problem so that connecting to the update server now works as
expected. (BZ#326511
• on systems with 64-bit architectures, cyrus-imapd experienced a segmentation fault when
replication was enabled.
In addition, these updated cyrus-imapd packages provide the following enhancement:
• more detailed information has been added to the ctl_cyrusdb(8) man page, which explains how to
perform operations common to Cyrus databases.
Users are advised to upgrade to these updated cyrus-imapd packages, which resolve these issues
and add this enhancement.

1.33. cyrus-sasl

1.33.1. RHBA-2009:1330: bug fix update

Updated cyrus-sasl packages that fix various bugs are now available.
226
https://www.redhat.com/security/data/cve/CVE-2009-0688.html
38
227
228
)
229
(BZ#484377 )
(CVE-2009-0688
230
(BZ#463230 )
226
)