From dee7ae00a438215e311e3a0c9a351e6fc08e3809 Mon Sep 17 00:00:00 2001 From: Nalin Dahyabhai Date: Mon, 18 Nov 2013 16:07:42 -0500 Subject: [PATCH] Note where CVE-2013-6800 was fixed CVE-2013-6800 appears to be fixed by the same patch that fixes CVE-2013-1418, so mention the first in changelog entries that refer to the second. --- krb5.spec | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/krb5.spec b/krb5.spec index 0661f8c..693d4a7 100644 --- a/krb5.spec +++ b/krb5.spec @@ -1006,7 +1006,7 @@ exit 0 - update to 1.11.4 - drop patch for RT#7650, obsoleted - drop patch for RT#7706, obsoleted as RT#7723 - - drop patch for CVE-2013-1418, included in 1.11.4 + - drop patch for CVE-2013-1418/CVE-2013-6800, included in 1.11.4 * Tue Nov 12 2013 Nalin Dahyabhai - 1.11.3-31 - switch to the simplified version of the patch for #1029110 (RT#7764) @@ -1018,7 +1018,8 @@ exit 0 * Tue Nov 5 2013 Nalin Dahyabhai - 1.11.3-29 - incorporate upstream patch for remote crash of KDCs which serve multiple - realms simultaneously (RT#7756, CVE-2013-1418) + realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800, + #1026997/#1031501) * Mon Nov 4 2013 Nalin Dahyabhai - 1.11.3-28 - drop patch to add additional access() checks to ksu - they add to breakage