The cyrus-imapd packages contain a high-performance mail server with IMAP,POP3, NNTP, and SIEVE support.It was discovered that the Cyrus SASL library (cyrus-sasl) does not alwaysreliably terminate output from the sasl_encode64() function used byprograms using this library. The Cyrus IMAP server (cyrus-imapd) relied onthis function's output being properly terminated. Under certain conditions,improperly terminated output from sasl_encode64() could, potentially, causecyrus-imapd to crash, disclose portions of its memory, or lead to SASLauthentication failures. (CVE-2009-0688)Users of cyrus-imapd are advised to upgrade to these updated packages,which resolve this issue. After installing the update, cyrus-imapd will berestarted automatically.