[krb5/f20] Note where CVE-2013-6800 was fixed

Nalin Dahyabhai nalin at fedoraproject.org
Tue Nov 19 02:30:33 UTC 2013


commit f4e223cd6916d36dca5ca024f3e24d90582de8d3
Author: Nalin Dahyabhai <nalin at dahyabhai.net>
Date:   Mon Nov 18 16:23:50 2013 -0500

    Note where CVE-2013-6800 was fixed
    
    CVE-2013-6800 appears to be fixed by the same patch that fixes
    CVE-2013-1418, so mention the first in changelog entries that refer to
    the second.

 krb5.spec |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)
---
diff --git a/krb5.spec b/krb5.spec
index e8aa8ab..862f50e 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -1024,7 +1024,8 @@ exit 0
 
 * Tue Nov  5 2013 Nalin Dahyabhai <nalin at redhat.com> - 1.11.3-29
 - incorporate upstream patch for remote crash of KDCs which serve multiple
-  realms simultaneously (RT#7756, CVE-2013-1418)
+  realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,
+  #1026997/#1031501)
 
 * Mon Nov  4 2013 Nalin Dahyabhai <nalin at redhat.com> - 1.11.3-28
 - drop patch to add additional access() checks to ksu - they add to breakage


More information about the scm-commits mailing list