In message <[email protected]>, Lexi Winter writes: > > --Bghpo0KvGWo6IE0X > Content-Type: text/plain; charset=us-ascii > Content-Disposition: inline > Content-Transfer-Encoding: quoted-printable > > Herbert J. Skuhra: > > On Sun, 10 Aug 2025 07:32:04 +0200, Cy Schubert wrote: > > > krb5: Update MIT KRB5 from 1.21 to 1.22 > >=20 > > krb5-1.22 is withdrawn: > >=20 > > Due to a critical bug, krb5-1.22 has been withdrawn, and krb5-1.21.3 is= > =20 > > again the latest supported release. krb5-1.22.1 will be issued with a=20 > > correction. > > i assume the bug in question is this one: > https://krbdev.mit.edu/rt/Ticket/Display.html?id=3D9181
That bug was announced on the krbdev ML yesterday. > > the ticket doesn't mention whether it has any security impact or not. > if not, we're probably better off waiting for 1.22.1 rather than > reverting. A patch has been posted to the krbdev ML. It will be released in krb5 1.22.1 in a few days. I'm watching the ML for the release announcement. You can find our review at https://reviews.freebsd.org/D51990. I've been running it here since earlier today. -- Cheers, Cy Schubert <[email protected]> FreeBSD UNIX: <[email protected]> Web: https://FreeBSD.org NTP: <[email protected]> Web: https://nwtime.org e**(i*pi)+1=0
