Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[gentoo-announce] GLSA: heimdal
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index News & Announcements
View previous topic :: View next topic  
Author Message
pjp
Administrator
Administrator


Joined: 16 Apr 2002
Posts: 20054

PostPosted: Mon Oct 14, 2002 6:39 pm    Post subject: [gentoo-announce] GLSA: heimdal Reply with quote

Daniel Ahlberg wrote:
- - --------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT
- - --------------------------------------------------------------------

PACKAGE : heimdal
SUMMARY : remote command execution
EXPLOIT : remote
DATE : 2002-10-14 15:30 UTC

- - --------------------------------------------------------------------

- From www.pdc.kth.se/heimdal:

Kf and kfd are used to forward credentials in a stand-alone fashion.
Work on them never really finished, and in releases earlier than
Heimdal 0.5 they had multiple security issues, including possible
buffer overruns. Their use has never been recommended.

SOLUTION

It is recommended that all Gentoo Linux users who are running
app-crypt/heimdal-0.4e and earlier update their systems
as follows:

emerge rsync
emerge heimdal
emerge clean

- - --------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at www.gentoo.org/~aliz
- - --------------------------------------------------------------------


Mailing List Archive: http://lists.gentoo.org/pipermail/gentoo-announce/2002-October/000218.html
_________________
Quis separabit? Quo animo?
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index News & Announcements All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum