[27611] in Kerberos
Re: MITKRB5-SA-2007-002: KDC,
daemon@ATHENA.MIT.EDU (Tom Yu)
Tue Apr 3 16:18:33 2007
To: Mike Friedman <mikef@ack.berkeley.edu>
From: Tom Yu <tlyu@mit.edu>
Date: Tue, 03 Apr 2007 16:18:24 -0400
In-Reply-To: <20070403125222.H980@malcolm.berkeley.edu> (Mike Friedman's
message of "Tue, 3 Apr 2007 13:01:29 -0700 (PDT)")
Message-ID: <ldvodm5jjov.fsf@cathode-dark-space.mit.edu>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
>>>>> "mikef" == Mike Friedman <mikef@ack.berkeley.edu> writes:
mikef> On Tue, 3 Apr 2007 at 14:10 (-0400), Tom Yu wrote:
>> AFFECTED SOFTWARE
>> =================
>>
>> * MIT krb5 releases through krb5-1.6
mikef> ...
>> The patch is available at
>>
>> http://web.mit.edu/kerberos/advisories/2007-002-patch.txt
mikef> Tom,
mikef> Is the above patch supposed to apply to 1.4.2? I find several large
mikef> discrepancies in the line numbers. For example, in
mikef> src/kadmin/server/misc.c, the 1.4.2 version has only 151 lines, yet the
mikef> patch refers to line 171. There are also significant differences in, for
mikef> example, src/kadmin/server/ovsec_kadmd.c. Plus minor line differences in
mikef> other modules for this patch.
mikef> Is there a different version of this patch for 1.4.2?
Your patching may be significantly simplified if you are certain that
vsnprintf() is present on your systems; in that case you may omit the
changes to files other than src/lib/kadm5/logger.c, at the expense of
sometimes losing some log data due to vsnprintf() performing
truncation. Also, it is probably wise to unconditionally call
vsnprintf() in logger.c (rather than under #ifdef HAVE_VSNPRINTF) in
that case.
krb5-1.5.x had significant changes in some of the affected kadmind and
KDC code; if there is sufficient interest, we may be able to produce
additional patches for earlier releases.
---Tom
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
