Hi Brian, On Sat, Apr 08, 2023 at 07:56:55PM +1000, Brian May wrote: > Salvatore Bonaccorso <car...@debian.org> writes: > > > Version: 7.8.git20221117.28daf24+dfsg-1.1 > > Are you sure this applies to the unstable version? > > I can only find one out of two chunks in the patch. Maybe it was already > fixed in the stable branch which we use for unstable?
I *was* almost sure this was only fixed in the master branch of Heimdal and was not in 7.7.0 as well, and 7.8 does not seem to have the change applied as well. But I will double-check again. https://www.kb.cert.org/vuls/id/730793 contains some more information and some distributions like Ubuntu did cherry pick the fix as well in their respective 7.7.0 and 7.5.0 based versions. Regards, Salvatore
