sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] SECURITY UPDATE for crypto/krb5

From: Seth Alan Woolley <seth AT positivism.org>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] SECURITY UPDATE for crypto/krb5
Date: Mon, 20 Dec 2004 17:20:57 -0800

The following files are attached for spell crypto/krb5:
BUILD
CONFIGURE
CONFLICTS
DEPENDS
desktop/
desktop/telnet.desktop
DETAILS
HISTORY
init.d/
init.d/krb5-admin-server
init.d/krb5-kdc
INSTALL
PRE_BUILD
services
TRIGGERS
xinetd.d/
xinetd.d/ftpd
xinetd.d/kshd
xinetd.d/klogind
xinetd.d/telnetd

* DETAILS: updated to 1.3.6 SECURITY FIX
authenticated users can take over server
other probably exploits
* PRE_BUILD: fix the name of the inside source file
* BUILD: fix all the broken configure scripts for some reason

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: securityupdate.20243.tar.bz2
Description: Binary data

Attachment: pgpNsTXlSaA4Q.pgp
Description: PGP signature

[SM-Security] SECURITY UPDATE for crypto/krb5, Seth Alan Woolley, 12/20/2004