Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 191444 - Multiple vulnerabilities in app-crypt/mit-krb5
Summary: Multiple vulnerabilities in app-crypt/mit-krb5
Status: RESOLVED DUPLICATE of bug 191301
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-09-05 22:09 UTC by lkml_ccc
Modified: 2007-09-06 07:45 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description lkml_ccc 2007-09-05 22:09:48 UTC
These vulnerabilities are still unpatched in gentoo's mit-krb5 ebuild:

http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-004.txt
http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-005.txt
http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-006.txt

Applying patches listed in those advisories should resolve the problem. 
2007-004 and 2007-005 are fixed in newer 1.5.x releases of mit-krb5.
Comment 1 Pierre-Yves Rofes (RETIRED) gentoo-dev 2007-09-06 07:45:44 UTC
I don't know which ebuild you're talking about, but SA 004 and 005 are fixed in app-crypt/mit-krb5-1.5.3 and SA 006 will be fixed with bug 191301.

*** This bug has been marked as a duplicate of bug 191301 ***