[28022] in Kerberos

home help back first fref pref prev next nref lref last post

Re: MITKRB5-SA-2007-005: kadmind vulnerable to buffer overflow

daemon@ATHENA.MIT.EDU (Russ Allbery)
Tue Jul 10 16:46:27 2007

From: Russ Allbery <rra@stanford.edu>
To: kerberos@mit.edu
In-Reply-To: <4693ED9B.1000707@aol.com> (Edward Beuerlein's message of "Tue,
	10 Jul 2007 16:35:39 -0400")
Date: Tue, 10 Jul 2007 13:46:04 -0700
Message-ID: <874pkc3s37.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Edward Beuerlein <ebeuerlein@aol.com> writes:

> My bad-I forgot to use the -l option in patch.  So now the issue I have
> is that the 2007-001-002-003 combo patch I applied for the older kadmin
> issues is conflicting with the 1.4.4 attached to this email.  When I run
> both patches during compile time I get this error:

The backport I did was because we didn't apply the combo patch (it didn't
apply cleanly to 1.4 and wasn't fully necessary on Linux).  If you applied
the combo patch, the patch in the advisory would probably work, or at
least be fairly close.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post