[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#693931: marked as done (Please unblock krb5 1.10.1+dfsg-3)

Your message dated Wed, 21 Nov 2012 23:18:01 +0100
with message-id <20121121221801.GQ17465@radis.cristau.org>
and subject line Re: Bug#693931: Please unblock krb5 1.10.1+dfsg-3
has caused the Debian Bug report #693931,
regarding Please unblock krb5 1.10.1+dfsg-3
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
693931: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=693931
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
package: release.debian.org

Hi.  This includes a fix that causes many gss-using applications to
crash on some systems and a fix requested by the security team.
Removing the call to unload gss plugins does create a bit of a leak if
libgssapi_krb5 is dlclosed and dlopened repeatedly, plugins are
involved, and the plugins do not trigger a circular reference.  That's
rare. Normally either plugins are not involved, or there is a circular
reference.  Also, I no of no application that loads and unloads
libgssapi_krb5.  I think the memory leak is better than a crash of
unrelated applications.  Upstream and I are discussing longer-term
solutions.

krb5 (1.10.1+dfsg-3) unstable; urgency=low

  * Kadmind crash only triggered by admin users, cve-2012-1013, Closes:
    #687647
  * Don't unload GSS-API plugins to avoid crashing applications that use
    GSS-API on systems with plugins installed, Closes: #693741

 -- Sam Hartman <hartmans@debian.org>  Mon, 19 Nov 2012 17:35:04 -0500

--- End Message ---
--- Begin Message --- 
On Wed, Nov 21, 2012 at 16:50:09 -0500, Sam Hartman wrote:

> krb5 (1.10.1+dfsg-3) unstable; urgency=low
> 
That has been unblocked for a couple days already.

Cheers,
Julien

Attachment: signature.asc
Description: Digital signature


--- End Message ---
Reply to: