[krbdev.mit.edu #6702] SVN Commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Tue Apr 20 17:12:11 EDT 2010


Fix CVE-2010-1230 (MITKRB5-SA-2010-004) double-free in KDC triggered
by ticket renewal.  Add a test case.

See also http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577490

Thanks to Joel Johnson and Brian Almeida for the reports.

http://src.mit.edu/fisheye/changelog/krb5/?cs=23912
Commit By: tlyu
Revision: 23912
Changed Files:
U   trunk/src/kdc/do_tgs_req.c
U   trunk/src/tests/dejagnu/config/default.exp
U   trunk/src/tests/dejagnu/krb-standalone/standalone.exp




More information about the krb5-bugs mailing list