X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:message-id:date:mime-version
	:content-type:content-transfer-encoding:reply-to; q=dns; s=
	default; b=jh/18xma/I7FSWCNgFjMpiO+yMUj3WcPoXOymrqCuWbmXlJ3o9iQX
	TrGcDR3zG4FxxOvvspHaiHjRT8kz4NRCiEkXPVduPMqlAWKeGCqwrNFsQ+EzAQi8
	oQAQJ+zw+dw4LVW+4Sly5xfNSB58e9eEdxxdYpdDOJYJJVoWF+0b7g=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:message-id:date:mime-version
	:content-type:content-transfer-encoding:reply-to; s=default; bh=
	BVjjwLTdjTIK5HQkVLVCTecESBo=; b=FLEzENSZTgn9SR0m2xvWViS9jzwHxFU2
	XiAWCv4iZxfsYJerDwdLtGRxxYF9WvutymsQBw61r11pgAt0xhYNUq5zFX85O45m
	zl4BhyF5oWMeHiypniU0rFZVRroJ0IFtUUnnqDkXrG5/Q3n2PdK+HGb/eFbo89Fz
	6QdhiCU0vUE=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Spam-SWARE-Status:	No, score=-4.0 required=5.0 tests=ALL_TRUSTED,BAYES_00,DATE_IN_PAST_12_24,FORGED_MUA_MOZILLA,GIT_PATCH_2,KAM_NUMSUBJECT autolearn=ham version=3.3.1 spammy=H*R:D*cygwin.com
X-HELO:	localhost.localdomain
Authentication-Results:	sourceware.org; auth=none
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcastmailservice.net; s=20180828_2048; t=1578537315; bh=GHAaigTAbT26RHuO68EBnvh3vptYXVl+FGbutheD2Vo=; h=Received:Received:Received:To:From:Subject:Message-ID:Date: MIME-Version:Content-Type; b=EWRe5b7WDtKXu5E7okiyGeyY9wyVRjeWS+fl6Qwk4ZapQUyOwqB7s61//rza+z+2O cwhBFvo8XTOZC+G34o0B/wEP1YWEkU0GZZcpj3k+rJeHA6O/NqIJbQDOTVwX5LUZLe uLFACQvV1ay5ZAc0LOwhUAjz5iysVuOpcg5FI/gh6hZtYBcbs8XUCWfY5JNJeurHDb O8CqfZOoxbc/2Z6tOAXEq5bj1wKOZj0ZfpL6HclTex+8+T3JOPqb18/o7pITTrunq3 T7gpm48M/WjlrbKFDaDzcp+1CfRHkSdTtsbdNFkTRB5ijHBjb+qcP9cgM9W5B/p02/ LvD5h/G1ecvHQ==
X-Xfinity-VAAS:	gggruggvucftvghtrhhoucdtuddrgedufedrvdehledggeejucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuvehomhgtrghsthdqtfgvshhipdfqfgfvpdfpqffurfetoffkrfenuceurghilhhouhhtmecufedttdenucenucfjughrpefvhffukffffgggtgfgsehtjeertddtfeehnecuhfhrohhmpeffrghvihguucftohhthhgvnhgsvghrghgvrhcuoegurghvvghrohhthhesrggtmhdrohhrgheqnecuffhomhgrihhnpegthihruhhsihhmrghprdhorhhgnecukfhppeejfedrgedvrddujedtrddvgeenucfrrghrrghmpehhvghlohepmhgrihhlrdgurghvvghrohhthhdrugihnhgunhhsrdhorhhgpdhinhgvthepjeefrdegvddrudejtddrvdegpdhmrghilhhfrhhomhepuggrvhgvrhhothhhsegrtghmrdhorhhgpdhrtghpthhtoheptgihghifihhnqdgrnhhnohhunhgtvgestgihghifihhnrdgtohhmnecuvehluhhsthgvrhfuihiivgeptd
X-Xfinity-VMeta:	sc=0.00;st=legit
To:	cygwin AT cygwin DOT com
From:	David Rothenberger <daveroth AT acm DOT org>
Subject:	[ANNOUNCEMENT] Updated: cyrus-sasl-2.1.27-1
Message-Id:	<announce.ad258174-1725-d575-37d3-c33b2941fd23@acm.org>
Date:	Wed, 8 Jan 2020 18:35:12 -0800
User-Agent:	Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Firefox/68.0 Thunderbird/68.3.1
MIME-Version:	1.0
X-IsSubscribed:	yes
Reply-To:	cygwin AT cygwin DOT com

A new release of cyrus-sasl and related packages is available.

SECURITY:
=========
This release includes a patch for CVE-2019-19906: Off-by-one in
_sasl_add_string function.

DESCRIPTION:
============
SASL is the Simple Authentication and Security Layer, a method for
adding authentication support to connection-based protocols. To use
SASL, a protocol includes a command for identifying and
authenticating a user to a server and for optionally negotiating
protection of subsequent protocol interactions. If its use is
negotiated, a security layer is inserted between the protocol and
the connection.

See http://cyrusimap.org/ for more information.

QUESTIONS:
==========
If you want to make a point or ask a question the Cygwin mailing list is
the appropriate place.

-- 
David Rothenberger  ----  daveroth AT acm DOT org

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -