Simon Josefsson discovered an out-of-bounds memory read in GNU SASL,
an implementation of the Simple Authentication and Security Layer
framework, which could result in denial of service
For the oldstable distribution (buster), this problem has been fixed
in version 180-8+deb10u1
For the stable distribution (bullseye), this problem has been fixe ...