The following commit has been merged in the openafs-stable-1_6_x branch:
commit eea466507af6320c35e3e8dc751da60a52b15a23
Author: Daria Brashear <[email protected]>
Date: Wed Jul 8 14:11:33 2015 -0400
bos: Use crypt for commands where spoofing could be a risk
bos defaults to not requiring crypt in a lot of cases, instead using clear.
As the simplest way to secure the channel is to enable crypt, do so.
FIXES 131782 (CVE-2015-3283)
(cherry picked from commit 62926630a82b8635d1cb1514b852f9f7a2609311)
Change-Id: Ib9e2514c4d14a77eead69677da1dabf86e526ebc
src/bozo/bos.c | 44 ++++++++++++++++++++++----------------------
1 files changed, 22 insertions(+), 22 deletions(-)
--
OpenAFS Master Repository
_______________________________________________
OpenAFS-cvs mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-cvs
