Note that just rebuilding a newer version of heimdal that contains the
allow_weak_crypto fix will introduce the following Maverick/Natty bug
into Lucid:

https://bugs.launchpad.net/ubuntu/+source/heimdal/+bug/663319

It will also not actually fix any existing Lucid binaries, as they
depend on libkrb5.so.25, while a Heimdal new enough to contain the
allow_weak_crypto fix provides libkrb5.so.26.

Both problems should probably be addressed simultaneously.

Alternatively, as a short-term solution, backporting the
allow_weak_crypto fix into the 1.2.e1.dfsg.1 release in Lucid will
address this bug without introducing the libasn1 bug from
Maverick/Natty, at the expense of missing out on all the other updates.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/784255

Title:
  Lucid/Maverick heimdal packages have broken allow_weak_crypto
  implementation

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to