There are some memory leaks in the Cyrus-SASL digest-md5 plugin that would be nice to have fixed in RHEL 4.6. These leaks cause problems for server software that accepts digest-md5 SASL for authentication. Here are details on the leaks I'd like addressed: - Cipher context is leaked (cvs diff -r1.185 -r1.186 digestmd5.c) - Response value and realm are leaked in reauth situations (cvs diff -r1.184 -r1.1.85 digestmd5.c)
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on the solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2007-0795.html