From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: [PATCH 0/1] Fix CVE-2015-{8629, 8630, 8631} Date: Thu, 4 Feb 2016 19:49:07 -0500 Message-ID: Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:56517) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aRUaL-0007XO-VC for guix-devel@gnu.org; Thu, 04 Feb 2016 19:49:18 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aRUaI-0003Ee-NG for guix-devel@gnu.org; Thu, 04 Feb 2016 19:49:17 -0500 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:58791) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aRUaI-0003EY-HA for guix-devel@gnu.org; Thu, 04 Feb 2016 19:49:14 -0500 Received: from jasmine.home (pool-173-49-104-211.phlapa.fios.verizon.net [173.49.104.211]) by mail.messagingengine.com (Postfix) with ESMTPA id DE9D8680169 for ; Thu, 4 Feb 2016 19:49:12 -0500 (EST) List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: guix-devel@gnu.org These are upstream patches, also applied by Debian: https://security-tracker.debian.org/tracker/CVE-2015-8629 Can somebody that actually uses mit-krb5 test and push? Or if you'd rather just push, feel free. By the way, I'm curious about this package's unusual method of applying patches. Does anyone have any insight? I read the git history but it doesn't give much detail on why the "normal" method doesn't work. Leo Famulari (1): gnu: mit-krb5: Fix CVE-2015-{8629, 8630, 8631}. gnu-system.am | 3 + gnu/packages/mit-krb5.scm | 6 +- gnu/packages/patches/mit-krb5-CVE-2015-8629.patch | 29 ++ gnu/packages/patches/mit-krb5-CVE-2015-8630.patch | 59 +++ gnu/packages/patches/mit-krb5-CVE-2015-8631.patch | 550 ++++++++++++++++++++++ 5 files changed, 646 insertions(+), 1 deletion(-) create mode 100644 gnu/packages/patches/mit-krb5-CVE-2015-8629.patch create mode 100644 gnu/packages/patches/mit-krb5-CVE-2015-8630.patch create mode 100644 gnu/packages/patches/mit-krb5-CVE-2015-8631.patch -- 2.6.3