| Summary: | <app-crypt/heimdal-7.6.0: S4U2Self with unkeyed checksum (CVE-2018-16860) | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | GLSAMaker/CVETool Bot <glsamaker> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | minor | CC: | kerberos, mgorny |
| Priority: | Normal | Flags: | stable-bot:
sanity-check+
|
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://www.h5l.org/pipermail/heimdal-announce/2019-May/000009.html | ||
| See Also: | https://bugs.gentoo.org/show_bug.cgi?id=710666 | ||
| Whiteboard: | B3 [noglsa] | ||
| Package list: |
app-crypt/heimdal-7.6.0
|
Runtime testing required: | --- |
| Bug Depends on: | |||
| Bug Blocks: | 686032 | ||
|
Description
GLSAMaker/CVETool Bot
2019-05-15 15:09:49 UTC
heimdal-7.6.0 has been released addressing this issue... The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5c8fbea00ec59fad9583f6b815e89dcd33271faa commit 5c8fbea00ec59fad9583f6b815e89dcd33271faa Author: Eray Aslan <eras@gentoo.org> AuthorDate: 2019-05-17 07:47:28 +0000 Commit: Eray Aslan <eras@gentoo.org> CommitDate: 2019-05-17 07:47:55 +0000 app-crypt/heimdal: security bump to 7.6.0 Bug: https://bugs.gentoo.org/686034 Closes: https://bugs.gentoo.org/649492 Closes: https://bugs.gentoo.org/647880 Closes: https://bugs.gentoo.org/641762 Package-Manager: Portage-2.3.66, Repoman-2.3.12 Signed-off-by: Eray Aslan <eras@gentoo.org> app-crypt/heimdal/Manifest | 1 + .../files/heimdal_build-headers-before-use.patch | 29 ++++ app-crypt/heimdal/files/heimdal_fix-db60.patch | 11 ++ app-crypt/heimdal/files/heimdal_hcrypto.patch | 45 +++++ app-crypt/heimdal/heimdal-7.6.0.ebuild | 185 +++++++++++++++++++++ app-crypt/heimdal/metadata.xml | 3 + 6 files changed, 274 insertions(+) Arches, please test and mark stable =app-crypt/heimdal-7.6.0 Target Keywords = alpha amd64 arm arm64 hppa ia64 ~mips ppc ppc64 s390 ~sh ~sparc x86 ~amd64-fbsd arm64 stable x86 stable amd64 stable arm stable s390 stable hppa stable alpha stable ia64 stable ping ppc ppc64 ppc stable sparc stable GLSA Vote: no ppc64, ping. heimdal-7.6.0 passes tests on ppc64 but certain USE-flag combinations fail to build, e.g. bug #738190. ppc64 stable Please cleanup. The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c1a86a0c8b561fdd8a53e91ed7f8b2334e40b98c commit c1a86a0c8b561fdd8a53e91ed7f8b2334e40b98c Author: Eray Aslan <eras@gentoo.org> AuthorDate: 2020-09-08 06:35:35 +0000 Commit: Eray Aslan <eras@gentoo.org> CommitDate: 2020-09-08 06:35:35 +0000 app-crypt/heimdal: cleanup Bug: https://bugs.gentoo.org/686034 Package-Manager: Portage-3.0.6, Repoman-3.0.1 Signed-off-by: Eray Aslan <eras@gentoo.org> app-crypt/heimdal/Manifest | 1 - app-crypt/heimdal/heimdal-7.5.0.ebuild | 173 --------------------------------- app-crypt/heimdal/metadata.xml | 3 - 3 files changed, 177 deletions(-) Thanks! |
