The following commit has been merged in the master branch:
commit 62926630a82b8635d1cb1514b852f9f7a2609311
Author: Daria Brashear <[email protected]>
Date: Wed Jul 8 14:11:33 2015 -0400
bos: Use crypt for commands where spoofing could be a risk
bos defaults to not requiring crypt in a lot of cases, instead using clear.
As the simplest way to secure the channel is to enable crypt, do so.
FIXES 131782 (CVE-2015-3283)
Change-Id: I354fcbb5db37db225391a47b59d99518d1d0b2f9
src/bozo/bos.c | 44 ++++++++++++++++++++++----------------------
1 files changed, 22 insertions(+), 22 deletions(-)
--
OpenAFS Master Repository
_______________________________________________
OpenAFS-cvs mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-cvs
