Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients

The publication date reported by the vendor.

The vendor changed the advisory after it was first published.

We collected the advisory from the official source.

Our collector saw this advisory during a later source check.