RHBA-2009:1330 - Bug Fix Advisory

Topic

Updated cyrus-sasl packages that fix various bugs are now available.

Description

The cyrus-sasl packages contain the Cyrus implementation of SASL. SASL is
the Simple Authentication and Security Layer, a method for adding
authentication support to connection-based protocols.

This errata fixes the following bugs:

• the shadow authentication method was not working properly on 64 bit

architectures. The saslauthd might randomly crash if it was configured to
authenticate against the shadow file. (BZ#433583)

• the rimap authentication method was not working properly when user

passwords contain double quote characters. The saslauthd process would hang
when it was configured to authenticate with the rimap method and user
password contained such characters. (BZ#438533)

• the saslauthd init script did not support a reload command although it

was mentioned in the init script usage instructions. The reload is now
implemented as a conditional restart of the saslauthd daemon. (BZ#448154)

• the pluginviewer command did not display plugins which were not

statically linked into it. The pluginviewer command is now linked
dynamically so it can display any cyrus-sasl plugins which are installed on
the system. (BZ#473197)

• the ldap authentication method had very long timeout for network failure

detection. The saslauthd now sets a network failure timeout based on the
ldap_timeout configuration option. (BZ#475726)

All Cyrus users are advised to install this updated package, which
addresses these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 433583 - Saslauthd crashes randomly
• BZ - 438533 - patch for hang in "saslauthd -a rimap"
• BZ - 448154 - saslauthd initscript does not support reload()
• BZ - 473197 - pluginviewer can't load plugins
• BZ - 475726 - saslauthd: very slow network failure detection

CVEs

(none)

References

(none)