Issued:

2016-02-16

Updated:

2016-02-16

RHBA-2016:0178 - cyrus-sasl bug fix update

Synopsis

cyrus-sasl bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated cyrus-sasl packages that fix one bug are now available for Red Hat Enterprise Linux 7.

Description

The cyrus-sasl packages contain the Cyrus implementation of Simple Authentication and Security Layer (SASL). SASL is a method for adding authentication support to connection-based protocols.

This update fixes the following bug:

• When using the Cyrus SASL library (cyrus-sasl) Generic Security Services API (GSSAPI) plug-in, all connections shared a single lock for both server and client implementations. As a consequence, a deadlock in the cyrus-sasl GSSAPI plug-in caused the whole Directory Server to become unresponsive when both outgoing replication and incoming client connections used SASL GSSAPI. This update introduces per-thread locks, which minimizes the required synchronization and prevents a deadlock from occurring if some threads are blocked. As a result, the Directory Server is now able to reliably handle concurrent connections that use the cyrus-sasl GSSAPI plug-in. (BZ#1288447)

Users of cyrus-sasl are advised to upgrade to these updated packages, which fix this bug.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• cyrus-sasl-md5-2.1.26-20.el7_2.s390.rpm
• cyrus-sasl-devel-2.1.26-20.el7_2.i686.rpm
• cyrus-sasl-ldap-2.1.26-20.el7_2.x86_64.rpm
• cyrus-sasl-devel-2.1.26-20.el7_2.ppc.rpm
• cyrus-sasl-md5-2.1.26-20.el7_2.x86_64.rpm
• cyrus-sasl-md5-2.1.26-20.el7_2.s390x.rpm
• cyrus-sasl-debuginfo-2.1.26-20.el7_2.s390.rpm
• cyrus-sasl-md5-2.1.26-20.el7_2.ppc.rpm
• cyrus-sasl-scram-2.1.26-20.el7_2.ppc.rpm
• cyrus-sasl-debuginfo-2.1.26-20.el7_2.ppc64le.rpm
• cyrus-sasl-ldap-2.1.26-20.el7_2.ppc64le.rpm
• cyrus-sasl-gs2-2.1.26-20.el7_2.x86_64.rpm
• cyrus-sasl-md5-2.1.26-20.el7_2.i686.rpm
• cyrus-sasl-ntlm-2.1.26-20.el7_2.s390x.rpm
• cyrus-sasl-lib-2.1.26-20.el7_2.s390x.rpm
• cyrus-sasl-ntlm-2.1.26-20.el7_2.i686.rpm
• cyrus-sasl-md5-2.1.26-20.el7_2.ppc64.rpm
• cyrus-sasl-2.1.26-20.el7_2.i686.rpm
• cyrus-sasl-gs2-2.1.26-20.el7_2.i686.rpm
• cyrus-sasl-lib-2.1.26-20.el7_2.ppc64le.rpm
• cyrus-sasl-md5-2.1.26-20.el7_2.ppc64le.rpm
• cyrus-sasl-ntlm-2.1.26-20.el7_2.x86_64.rpm
• cyrus-sasl-scram-2.1.26-20.el7_2.s390.rpm
• cyrus-sasl-2.1.26-20.el7_2.s390x.rpm
• cyrus-sasl-plain-2.1.26-20.el7_2.s390.rpm
• cyrus-sasl-2.1.26-20.el7_2.x86_64.rpm
• cyrus-sasl-gs2-2.1.26-20.el7_2.s390x.rpm
• cyrus-sasl-ntlm-2.1.26-20.el7_2.ppc64le.rpm
• cyrus-sasl-debuginfo-2.1.26-20.el7_2.ppc64.rpm
• cyrus-sasl-gssapi-2.1.26-20.el7_2.ppc.rpm
• cyrus-sasl-ldap-2.1.26-20.el7_2.ppc64.rpm
• cyrus-sasl-gssapi-2.1.26-20.el7_2.s390x.rpm
• cyrus-sasl-gssapi-2.1.26-20.el7_2.x86_64.rpm
• cyrus-sasl-debuginfo-2.1.26-20.el7_2.ppc.rpm
• cyrus-sasl-devel-2.1.26-20.el7_2.x86_64.rpm
• cyrus-sasl-lib-2.1.26-20.el7_2.ppc.rpm
• cyrus-sasl-lib-2.1.26-20.el7_2.x86_64.rpm
• cyrus-sasl-scram-2.1.26-20.el7_2.x86_64.rpm
• cyrus-sasl-gssapi-2.1.26-20.el7_2.i686.rpm
• cyrus-sasl-sql-2.1.26-20.el7_2.s390.rpm
• cyrus-sasl-scram-2.1.26-20.el7_2.s390x.rpm
• cyrus-sasl-ldap-2.1.26-20.el7_2.ppc.rpm
• cyrus-sasl-plain-2.1.26-20.el7_2.i686.rpm
• cyrus-sasl-scram-2.1.26-20.el7_2.ppc64le.rpm
• cyrus-sasl-ldap-2.1.26-20.el7_2.s390x.rpm
• cyrus-sasl-sql-2.1.26-20.el7_2.ppc.rpm
• cyrus-sasl-ldap-2.1.26-20.el7_2.i686.rpm
• cyrus-sasl-gssapi-2.1.26-20.el7_2.ppc64.rpm
• cyrus-sasl-2.1.26-20.el7_2.s390.rpm
• cyrus-sasl-plain-2.1.26-20.el7_2.ppc64.rpm
• cyrus-sasl-gssapi-2.1.26-20.el7_2.s390.rpm
• cyrus-sasl-2.1.26-20.el7_2.src.rpm
• cyrus-sasl-lib-2.1.26-20.el7_2.i686.rpm
• cyrus-sasl-devel-2.1.26-20.el7_2.s390x.rpm
• cyrus-sasl-devel-2.1.26-20.el7_2.ppc64le.rpm
• cyrus-sasl-plain-2.1.26-20.el7_2.ppc.rpm
• cyrus-sasl-scram-2.1.26-20.el7_2.i686.rpm
• cyrus-sasl-sql-2.1.26-20.el7_2.s390x.rpm
• cyrus-sasl-2.1.26-20.el7_2.ppc64le.rpm
• cyrus-sasl-2.1.26-20.el7_2.ppc.rpm
• cyrus-sasl-devel-2.1.26-20.el7_2.ppc64.rpm
• cyrus-sasl-ntlm-2.1.26-20.el7_2.ppc.rpm
• cyrus-sasl-sql-2.1.26-20.el7_2.i686.rpm
• cyrus-sasl-devel-2.1.26-20.el7_2.s390.rpm
• cyrus-sasl-lib-2.1.26-20.el7_2.ppc64.rpm
• cyrus-sasl-gs2-2.1.26-20.el7_2.s390.rpm
• cyrus-sasl-ntlm-2.1.26-20.el7_2.ppc64.rpm
• cyrus-sasl-plain-2.1.26-20.el7_2.ppc64le.rpm
• cyrus-sasl-debuginfo-2.1.26-20.el7_2.s390x.rpm
• cyrus-sasl-debuginfo-2.1.26-20.el7_2.x86_64.rpm
• cyrus-sasl-2.1.26-20.el7_2.ppc64.rpm
• cyrus-sasl-gs2-2.1.26-20.el7_2.ppc.rpm
• cyrus-sasl-gssapi-2.1.26-20.el7_2.ppc64le.rpm
• cyrus-sasl-ldap-2.1.26-20.el7_2.s390.rpm
• cyrus-sasl-lib-2.1.26-20.el7_2.s390.rpm
• cyrus-sasl-debuginfo-2.1.26-20.el7_2.i686.rpm
• cyrus-sasl-ntlm-2.1.26-20.el7_2.s390.rpm
• cyrus-sasl-plain-2.1.26-20.el7_2.s390x.rpm
• cyrus-sasl-gs2-2.1.26-20.el7_2.ppc64le.rpm
• cyrus-sasl-plain-2.1.26-20.el7_2.x86_64.rpm
• cyrus-sasl-sql-2.1.26-20.el7_2.ppc64.rpm
• cyrus-sasl-gs2-2.1.26-20.el7_2.ppc64.rpm
• cyrus-sasl-scram-2.1.26-20.el7_2.ppc64.rpm
• cyrus-sasl-sql-2.1.26-20.el7_2.ppc64le.rpm
• cyrus-sasl-sql-2.1.26-20.el7_2.x86_64.rpm

Fixes

• This content is not included.BZ - 1288447

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.