USN-1988-1: Cyrus SASL vulnerability
9 October 2013
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 13.04
Cyrus SASL could be made to crash if it processed specially crafted input.
- cyrus-sasl2 - Cyrus Simple Authentication and Security Layer
It was discovered that Cyrus SASL incorrectly handled certain invalid password salts. An attacker could use this issue to cause Cyrus SASL to crash, resulting in a denial of service.
The problem can be corrected by updating your system to the following package versions:
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
After a standard system update you need to reboot your computer to make all the necessary changes.