From: Maxim Cournoyer <maxim.cournoyer@gmail.com>
To: Leo Famulari <leo@famulari.name>
Cc: 34632@debbugs.gnu.org
Subject: [bug#34632] [PATCH 0/2] Change from GSS to MIT-KRB5.
Date: Mon, 13 May 2019 23:17:17 -0400 [thread overview]
Message-ID: <87o9457miq.fsf@gmail.com> (raw)
In-Reply-To: <20190317182705.GD1410@jasmine.lan> (Leo Famulari's message of "Sun, 17 Mar 2019 14:27:05 -0400")
Hello,
Leo Famulari <leo@famulari.name> writes:
> On Fri, Mar 15, 2019 at 11:43:26PM -0400, Maxim Cournoyer wrote:
>> Unmaintained on what ground? The website doesn't list fresh news,
>> but the latest release was made in 2014 [1], and the maintainer has made
>> changes to the Debian package last time in 2017 [2]. I wouldn't say it's
>> unmaintained until the maintainer says so or CVEs pile up unfixed (which
>> there aren't).
>
> Considering the rate of vulnerability discovery in MIT Kerberos [0] I
> think that, if GSS was being examined to the same degree, we would learn
> of many serious bugs. Any significant C codebase of this age will have
> such bugs. But unfortunately GSS hasn't received as much scrutiny.
>
> [0]
> https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=krb5
Just FYI,
I had ping'd the GSS mailing list with this message:
http://lists.gnu.org/archive/html/help-gss/2019-03/msg00001.html, but
there haven't been a reply (yet).
So it looks like it was a wise decision to make the switch! Sorry for
doubting, eh!
Maxim
next prev parent reply other threads:[~2019-05-14 3:18 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-02-23 16:20 [bug#34632] [PATCH 0/2] Change from GSS to MIT-KRB5 Marius Bakke
2019-02-23 16:23 ` [bug#34632] [PATCH 1/2] gnu: gsasl: Use the MIT Kerberos implementation instead of GSS Marius Bakke
2019-02-23 16:23 ` [bug#34632] [PATCH core-updates 2/2] gnu: curl: Build against MIT Kerberos " Marius Bakke
2019-02-26 4:58 ` [bug#34632] [PATCH 0/2] Change from GSS to MIT-KRB5 Leo Famulari
2019-03-15 22:14 ` Ludovic Courtès
2019-03-16 3:43 ` Maxim Cournoyer
2019-03-17 18:27 ` Leo Famulari
2019-05-14 3:17 ` Maxim Cournoyer [this message]
2019-05-14 18:15 ` bug#34632: " Marius Bakke
2019-05-15 23:06 ` [bug#34632] " Maxim Cournoyer
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87o9457miq.fsf@gmail.com \
--to=maxim.cournoyer@gmail.com \
--cc=34632@debbugs.gnu.org \
--cc=leo@famulari.name \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/guix.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.