Re: HEADS UP: MIT KRB5 1.22.1 Import
- Reply: Cy Schubert : "Re: HEADS UP: MIT KRB5 1.22.1 Import"
- In reply to: Cy Schubert : "Re: HEADS UP: MIT KRB5 1.22.1 Import"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 21 Aug 2025 14:18:25 UTC
On Thu, Aug 21, 2025 at 02:36:15AM -0700, Cy Schubert wrote: > In message <86frdlkw30.fsf@ltc.des.dev>, =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav? > = w > rites: > > Cy Schubert <Cy.Schubert@cschubert.com> writes: > > > KRB5 1.22.0 released with a GSSAPI bug (CVE-2025-57736). The point patch= > > =20 > > > was applied on Aug 19 (f96110babbe1). 1.22.1 contains the point patch plu= > > s=20 > > > an additional GSSAPI patch. I intend to commit it to HEAD after a few day= > > s=20 > > > of testing on Aug 25. > > > > Please post your patch for review (using git arc, as described in the > > committers guide) so others can test it too. > > git arc does not work with vendor merges. There is a way to trick it though. What problem do you run into exactly? Could you provide a recipe for me to reproduce it locally?