Re: [PATCH 0/1] Fix CVE-2015-{8629, 8630, 8631}

2016-02-04 Thread Leo Famulari
On Thu, Feb 04, 2016 at 08:13:18PM -0500, Mark H Weaver wrote: > Leo Famulari writes: > > > These are upstream patches, also applied by Debian: > > https://security-tracker.debian.org/tracker/CVE-2015-8629 > > Thanks for this, but I already updated mit-krb5 and applied fixes for > these CVEs on

Re: [PATCH 0/1] Fix CVE-2015-{8629, 8630, 8631}

2016-02-04 Thread Mark H Weaver
Leo Famulari writes: > These are upstream patches, also applied by Debian: > https://security-tracker.debian.org/tracker/CVE-2015-8629 Thanks for this, but I already updated mit-krb5 and applied fixes for these CVEs on the new 'security-updates' branch about 17 hours ago. I'm sorry that your ef

[PATCH 0/1] Fix CVE-2015-{8629, 8630, 8631}

2016-02-04 Thread Leo Famulari
These are upstream patches, also applied by Debian: https://security-tracker.debian.org/tracker/CVE-2015-8629 Can somebody that actually uses mit-krb5 test and push? Or if you'd rather just push, feel free. By the way, I'm curious about this package's unusual method of applying patches. Does anyo