Bugzilla Bug 56016

net-mail would like to remove dev-libs/cyrus-sasl-2.1.17 from portage. Please
stable .18 on your arch a soon as you can. Thanks.

Sorry to do this over guys, but there was a security fix and I brought in the
old pam_mysql-friendly authentication method so everyone can upgrade. This is
pretty important. Please mark it stable if you can.

This is now: dev-libs/cyrus-sasl-2.1.18-r1

Tuan, can you test this, too?

Cory, if this is security related, IMO we need to re-assign this bug to
security@g.o with all the info.

re-assigning to security.  Cory -- many thanks for getting this patched so
quickly.

assigning A0 rating, pending further disclosure of information about the
vulnerability

need x86 and ppc marked stable before we can issue a GLSA.  Current keywords on
2.1.18 are:

cyrus-sasl-2.1.18.ebuild:KEYWORDS="~x86 ~ppc sparc ~mips ~alpha arm hppa amd64
~ia64 s390 ppc64"

marked stable on alpha and ia64

tested on x86. maked stable.

CC arches have stable keywords in previous versions.

stabled on amd64, remove CC

Still missing arm hppa mips ppc ppc64 s390 and sparc stable on 2.1.18-r1.

stable on sparc

please see #56389 - there are problems with cyrus-sasl-2.1.18-r1

does anybody know why there was this change in /etc/sasl2/smtpd.conf
--8<--
-pwcheck_method: saslauthd
-mech_list: plain login
+pwcheck_method:pam
--8<--
? This way Postfix doesn't use the saslauthd anymore, which I think is bad.

@comment #13: that file is owned by postfix. Please file a seperate bug.
Thanks.

Ok, I got rid of that bug. We're up to -r2. Shouldn't create any other
stability problems though.

the problem with -r1 that should have been fixed in -r2 still persists.
see bug #56389.

ppc: GLSA is blocked waiting for your keyword. Please mark
dev-libs/cyrus-sasl-2.1.18-r2 stable.

Stable on PPC. Very sorry for the delay.

Ready for a GLSA
arm, hppa, mips, ppc64, s390 : rememebr to mark stable to benefit from the GLSA

added arm/hppa to stable

removed ppc from glsa

removing ppc64 from bug, package marked stable

mips stable.

s390 stable z0r

GLSA 200410-05, at least