Branches for Dapper

Author: Martin Pitt
Revision Date: 2006-04-24 11:58:30 UTC

* SECURITY UPDATE: Remote DoS with crafted realms during DIGEST-MD5
  negotiation.
* Add debian/patches/27_upstream_cvs_digest-md5-crash.diff:
  - plugins/digestmd5.c: Check that the provided realm is valid to avoid
    crash.
  - Patch taken from upstream CVS, fixed upstream in 2.1.21:
    https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/
    plugins/digestmd5.c.diff?r1=1.173&r2=1.175&f=u
* CVE-2006-1721

Author: Andrew Pollock
Revision Date: 2008-05-01 10:03:51 UTC

debian/rules: configure with --with-devrandom=/dev/urandom to avoid
hanging/blocking applications when entropy is exhausted. (LP: #225333)

Author: Kees Cook
Revision Date: 2009-06-23 11:29:50 UTC

* SECURITY UPDATE: base64 encoding could result in unterminated
  strings, leading to crashes or loss of privacy.
  - Add debian/patches/50_sasl_encode64_term.diff: backported
    upstream fixes.
  - CVE-2009-0688

Author: Kees Cook
Revision Date: 2009-06-23 11:29:50 UTC

* SECURITY UPDATE: base64 encoding could result in unterminated
  strings, leading to crashes or loss of privacy.
  - Add debian/patches/50_sasl_encode64_term.diff: backported
    upstream fixes.
  - CVE-2009-0688