USN-5301-1 fixed a vulnerability in Cyrus. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that the Cyrus SASL SQL plugin incorrectly handled SQL input. A remote attacker could use this issue to execute arbitrary SQL commands.
{ "binaries": [ { "binary_name": "cyrus-sasl2-dbg", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "cyrus-sasl2-doc", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "cyrus-sasl2-heimdal-dbg", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "cyrus-sasl2-mit-dbg", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-2", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-2-dbgsym", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-dev", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-dev-dbgsym", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-db", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-db-dbgsym", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-dbgsym", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-gssapi-heimdal", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-gssapi-heimdal-dbgsym", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-gssapi-mit", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-gssapi-mit-dbgsym", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-ldap", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-ldap-dbgsym", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-otp", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-otp-dbgsym", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-sql", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "libsasl2-modules-sql-dbgsym", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "sasl2-bin", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" }, { "binary_name": "sasl2-bin-dbgsym", "binary_version": "2.1.25.dfsg1-17ubuntu0.1~esm2" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "cyrus-sasl2-dbg", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "cyrus-sasl2-doc", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "cyrus-sasl2-heimdal-dbg", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "cyrus-sasl2-mit-dbg", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-2", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-2-dbgsym", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-dev", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-dev-dbgsym", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-db", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-db-dbgsym", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-dbgsym", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-gssapi-heimdal", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-gssapi-heimdal-dbgsym", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-gssapi-mit", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-gssapi-mit-dbgsym", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-ldap", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-ldap-dbgsym", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-otp", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-otp-dbgsym", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-sql", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "libsasl2-modules-sql-dbgsym", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "sasl2-bin", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" }, { "binary_name": "sasl2-bin-dbgsym", "binary_version": "2.1.26.dfsg1-14ubuntu0.2+esm1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }