cyrus_sasl

cyrus-sasl 2.1.28 · pkgs/by-name/cy/cyrus_sasl/package.nix

Health

Risk

risk 33 high

+25 1 open advisory, range unknown
+6 no maintainer
+2 no meta.mainProgram, no versionCheckHook

Version

2.1.28 no newer release in its git tags

Channels

master 2.1.28 · nixos-unstable 2.1.28 · nixos-26.05 2.1.28 no channel is behind master

Hydra

succeeded 14h ago

Advisories

NIXPKGS-2026-2931 high 7.5 EPSS 0.3% Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients · #571643

CVE-2026-107161 · range unknown

Packaging

no meta.mainProgram no versionCheckHook

Packagewhat each field means

Description

Library for adding authentication support to connection-based protocols

Homepage

https://www.cyrusimap.org/sasl

License

BSD-4-Clause

Platforms

45 platforms: Linux, Darwin

Source provenance

not set: built from source

Outputs

bin dev out man devdoc

Status

not broken, not insecure, free

Position

pkgs/by-name/cy/cyrus_sasl/package.nix:113

Maintainers

none

Version bumps 0

all open bumps

None open.

Pull requests 2

treewide: move `makeSetupHook` top-level users to `by-name` draft

#425903 by philiptaron · opened 15mo ago · checks pass

cyrus-sasl: find config files in /etc

#175418 by catern · opened 4y ago

Closed or merged in the last 60 days 1

various: fix pname misuse draft

#497499 by quantenzitrone · closed 2mo ago

Issues 1

Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients 1.severity: security

#571643 by nixpkgs-security-tracker · opened 13d ago · 0 comments