Thanks Ken for getting this released. Very much appreciated
El mar., 20 nov. 2018 16:10, Ken Murchison <murch@xxxxxxxxxxxx> escribió:
All,
I'm pleased to announce the release of the long-awaited SASL 2.1.27 which can be downloaded from here:
* HTTP: https://www.cyrusimap.org/releases/cyrus-sasl-2.1.27.tar.gz https://www.cyrusimap.org/releases/cyrus-sasl-2.1.27.tar.gz.sig * FTP: ftp://ftp.cyrusimap.org/cyrus-sasl/cyrus-sasl-2.1.27.tar.gz ftp://ftp.cyrusimap.org/cyrus-sasl/cyrus-sasl-2.1.27.tar.gz.sig md5sum: a33820c66e0622222c5aefafa1581083 cyrus-sasl-2.1.27.tar.gz b295313b9915be32b334f7e88f30dacd cyrus-sasl-2.1.27.tar.gz.sig
The (mostly) complete list of changes from 2.1.26 are these:
- Added support for OpenSSL 1.1
- Added support for lmdb (from Howard Chu)
- Lots of build fixes (from Ignacio Casal Quinteiro and others)
- Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
- DIGEST-MD5 plugin:
- Fixed memory leaks
- Fixed a segfault when looking for non-existent reauth cache
- Prevent client from going from step 3 back to step 2
- Allow cmusaslsecretDIGEST-MD5 property to be disabled
- GSSAPI plugin:
- Added support for retrieving negotiated SSF
- Properly compute maxbufsize AFTER security layers have been set
- SCRAM plugin:
- Added support for SCRAM-SHA-256
- Allow SCRAM-* to be used by HTTP
- LOGIN plugin:
- Don’t prompt client for password until requested by server
- NTLM plugin:
- Fixed crash due to uninitialized HMAC context
- saslauthd:
- cache.c:
- Don’t use cached credentials if timeout has expired
- Fixed debug logging output
- ipc_doors.c:
- Fixed potential DoS attack (from Oracle)
- ipc_unix.c:
- Prevent premature closing of socket
- auth_rimap.c:
- Added support LOGOUT command
- Added support for unsolicited CAPABILITY responses in LOGIN reply
- Properly detect end of responses (don’t needlessly wait)
- Properly handle backslash in passwords
- auth_httpform:
- Fix off-by-one error in string termination
- Added support for 204 success response
- auth_krb5.c:
- Added krb5_conv_krb4_instance option
- Added more verbose error logging
-- Ken Murchison Cyrus Development Team FastMail US LLC
