From nobody Thu Aug 21 06:49:55 2025 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4c6v8532Shz65tFc for ; Thu, 21 Aug 2025 06:49:57 +0000 (UTC) (envelope-from des@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4c6v852CHsz3sGj; Thu, 21 Aug 2025 06:49:57 +0000 (UTC) (envelope-from des@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1755758997; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=iDoFz0OBjvWrhB1nkpvij+XM3twyD7IWYc0e+h24+yI=; b=WpnaAXNAbd1Mg2dablySBmG54KaMRGo+q8FpF73klucYW6HYhZeCU81DlLY692EKsahQHw jU/MI/Yahc4o2TpWqsaBCG/OUnNaNGUa2IQsobWVII+ezSubsGem4n5/3uKBD2geyME6X2 iHLLJvxiNgzDXtusWPo2SeQE6qqeTKja4FcS92uMxbnGu3VeZJBKL69YNn6ON8RIOr+wjT aZFF5iTDZJFx52JsB43SGCN6aRtVM7ey3ojL4vbr4npaSGBrt8os95fU3Np6/0BCCv1FXY kwk0KWhNMA3ZkGZf4w9dVnqd7TVwTdXAjfksNQTyzixTtJjv/Bix2O2kdQpaGw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1755758997; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=iDoFz0OBjvWrhB1nkpvij+XM3twyD7IWYc0e+h24+yI=; b=Y38MpFjrg50nap9O4mclmmpQe0+vPrbtg4rpNRvat8GMOOsWUnMcVfGYYDhsJ8evbfAqoD hEkRzwCOYAlRqKneh2yw5T3n++fwcNm25Ed8ssjyE0UtWo5SHLYigqlMygwX8IedZvKD+B V4P+1Pz/wEc1Al6SiEp1ygmC0H3JmOe6bVKm4dDbYHxoufbjP2AmN9a6kLeDxei7ygBMAT B6ZUf+TyZSCSqjAbNbu2V2rHCSallIKSnP/H2QoyMA1+bw45pwkrBKzY+unJMhSY9fukBS 1mQ4/QKmEfZTu3Cr2/S7RJGiwytw17IqATfppDah1pMEPv8Q9/EcFec6FuEKgw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1755758997; a=rsa-sha256; cv=none; b=MKTwRlYdsajBjTa34nf5Jxcb7M+C/JSrEGPVA4BZgPoDk85o3zZCixNXeg5uhoGgsdk/s5 NaiR2RRzDgDijkXbCHQFlzlKZNkAR6xTO0aYjhscCAZ0m9NtXP1qY+7PS/zw0uCRwN8QeP Jx7wERtm14vrg785jkCf8oC1PJREogbDdb00hDDF6ZNlzAAO2uuTnmNRPcTwbPHCxJgcP8 gA2NVKrAVn4esQlfhF237LWcr5MOsoyybVN8eKtaegPaujsUjZJsOxWr4KlI1OJYB/WCTa HnkGEDYIrsuvT+sk31VjuDAwE3pnTS3QZ960wtTzBl/S/bgfSD/Q6XBza1p4cg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from ltc.des.dev (unknown [IPv6:2a01:e0a:c54:bed0:922e:16ff:fef1:acef]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: des) by smtp.freebsd.org (Postfix) with ESMTPSA id 4c6v850zdxz18YT; Thu, 21 Aug 2025 06:49:56 +0000 (UTC) (envelope-from des@freebsd.org) Received: by ltc.des.dev (Postfix, from userid 1001) id D51B13C2DC; Thu, 21 Aug 2025 08:49:55 +0200 (CEST) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: Cy Schubert Cc: freebsd-current@freebsd.org, ivy@freebsd.org Subject: Re: HEADS UP: MIT KRB5 1.22.1 Import In-Reply-To: <20250821055519.65D8B684@slippy.cwsent.com> (Cy Schubert's message of "Wed, 20 Aug 2025 22:55:19 -0700") References: <20250821055519.65D8B684@slippy.cwsent.com> User-Agent: Gnus/5.13 (Gnus v5.13) Date: Thu, 21 Aug 2025 08:49:55 +0200 Message-ID: <86frdlkw30.fsf@ltc.des.dev> List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cy Schubert writes: > KRB5 1.22.0 released with a GSSAPI bug (CVE-2025-57736). The point patch= =20 > was applied on Aug 19 (f96110babbe1). 1.22.1 contains the point patch plu= s=20 > an additional GSSAPI patch. I intend to commit it to HEAD after a few day= s=20 > of testing on Aug 25. Please post your patch for review (using git arc, as described in the committers guide) so others can test it too. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@FreeBSD.org