Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 6 Jun 2010 16:41:59 +0000
From:      "b. f." <bf1783@googlemail.com>
To:        freebsd-current@freebsd.org, freebsd-security@freebsd.org
Subject:   Our aging base system heimdal
Message-ID:  <AANLkTik213g_8W2ocr3mCCb2EED8RBXsYBavdYll1PI_@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
Is anybody planning to update the base system heimdal, which has been
largely untouched since May 2008?  In addition to the many other
bug-fixes and improvements in the current version 1.3.3 (see, for
example:

http://www.h5l.org/releases.html

), there are patches for heimdal vulnerabilities 2010-05-27 and
2010-03-21 (CVE-2010-1321), which are described at:

http://www.h5l.org/advisories.html

Others have mentioned that they have problems using our base system
heimdal -- problems that cannot be easily circumvented by rebuilding
WITHOUT_KERBEROS, and using security/krb5 (security/heimdal is badly
outdated), because this leaves various dependent base system utilities
behind, if they are not modified.

Regards,
                b.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTik213g_8W2ocr3mCCb2EED8RBXsYBavdYll1PI_>