{"id":"CLSA-2026-1778175067","summary":"cyrus-sasl: Fix of CVE-2019-19906","details":"- CVE-2019-19906: fix off-by-one in _sasl_add_string (lib/common.c) that\n  could cause denial of service or information disclosure via crafted input","modified":"2026-06-01T00:33:25.986910135Z","published":"2026-05-07T17:31:13Z","upstream":["CVE-2019-19906"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1778175067.html"}],"affected":[{"package":{"name":"cyrus-sasl","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/cyrus-sasl?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.23-15.el6_6.2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778175067.json"}},{"package":{"name":"cyrus-sasl-devel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/cyrus-sasl-devel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.23-15.el6_6.2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778175067.json"}},{"package":{"name":"cyrus-sasl-gssapi","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/cyrus-sasl-gssapi?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.23-15.el6_6.2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778175067.json"}},{"package":{"name":"cyrus-sasl-ldap","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/cyrus-sasl-ldap?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.23-15.el6_6.2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778175067.json"}},{"package":{"name":"cyrus-sasl-lib","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/cyrus-sasl-lib?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.23-15.el6_6.2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778175067.json"}},{"package":{"name":"cyrus-sasl-md5","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/cyrus-sasl-md5?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.23-15.el6_6.2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778175067.json"}},{"package":{"name":"cyrus-sasl-ntlm","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/cyrus-sasl-ntlm?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.23-15.el6_6.2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778175067.json"}},{"package":{"name":"cyrus-sasl-plain","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/cyrus-sasl-plain?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.23-15.el6_6.2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778175067.json"}},{"package":{"name":"cyrus-sasl-sql","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/cyrus-sasl-sql?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.23-15.el6_6.2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778175067.json"}}],"schema_version":"1.7.5"}