Re: Segfaults after receiving invalid AS-REQ

Patrik Lundin <[email protected]> Thu, 7 Dec 2017 13:19:57 +0100

Newsgroups	gmane.comp.encryption.kerberos.heimdal.general
Message-ID	<[email protected]>

On 2017-08-31 15:08:08, Lars-Johan Liman wrote:
> On 8/31/2017 5:54 AM, Lars-Johan Liman wrote:
> >> Just curious: is this patch available in the Github repository or does
> >> "waiting" mean somewhere else?
> 
> [email protected]:
> > Its not in the repository.
> 
> Ack. Thanks.
> 
> 				Cheers,
> 				  /Liman

For anyone interested I saw Debian Security Advisory DSA-4055-1
(relating to newly published CVE-2017-17439) which is regarding the
problem discussed in this thread.

This made me look in the repo and the upstream fix is now public:
https://github.com/heimdal/heimdal/commit/1a6a6e462dc2ac6111f9e02c6852ddec4849b887

Here is an issue with additional information:
https://github.com/heimdal/heimdal/issues/353

-- 
Patrik Lundin