Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/netbsd-7-0]: src/doc Ticket #1453
details: https://anonhg.NetBSD.org/src/rev/01140ee05ed9
branches: netbsd-7-0
changeset: 801338:01140ee05ed9
user: martin <martin%NetBSD.org@localhost>
date: Wed Jul 12 15:38:06 2017 +0000
description:
Ticket #1453
diffstat:
doc/CHANGES-7.0.3 | 13 ++++++++++++-
1 files changed, 12 insertions(+), 1 deletions(-)
diffs (24 lines):
diff -r b0fba5beb460 -r 01140ee05ed9 doc/CHANGES-7.0.3
--- a/doc/CHANGES-7.0.3 Wed Jul 12 15:36:58 2017 +0000
+++ b/doc/CHANGES-7.0.3 Wed Jul 12 15:38:06 2017 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-7.0.3,v 1.1.2.47 2017/07/10 13:16:27 martin Exp $
+# $NetBSD: CHANGES-7.0.3,v 1.1.2.48 2017/07/12 15:38:06 martin Exp $
A complete list of changes from the NetBSD 7.0.2 release to the NetBSD 7.0.3
release:
@@ -2993,3 +2993,14 @@
in -r1.200.
[dh, ticket #1451]
+crypto/external/bsd/heimdal/dist/lib/krb5/ticket.c 1.3-1.4
+
+ In _krb5_extract_ticket() the KDC-REP service name must be
+ obtained from encrypted version stored in 'enc_part' instead
+ of the unencrypted version stored in 'ticket'.
+ Use of the unecrypted version provides an opportunity for
+ successful server impersonation and other attacks.
+
+ Identified by Jeffrey Altman, Viktor Duchovni and Nico Williams.
+ [christos, ticket #1453]
+
Home |
Main Index |
Thread Index |
Old Index