diff options
| author | jakllsch <jakllsch@pkgsrc.org> | 2015-10-28 19:43:01 +0000 |
|---|---|---|
| committer | jakllsch <jakllsch@pkgsrc.org> | 2015-10-28 19:43:01 +0000 |
| commit | b173f52b18a3ac0d76b049dd016d7f3ba9d39643 (patch) | |
| tree | efdddbf1ddcad0009212f70f86c5893f0b40fdb9 /finance | |
| parent | d96d052c51e7d26455191b0cb4b73c0e5e940274 (diff) | |
| download | pkgsrc-b173f52b18a3ac0d76b049dd016d7f3ba9d39643.tar.gz | |
update openafs to 1.6.15
OpenAFS 1.6.15 (Security Release)
All client and server platforms
* Fix for OPENAFS-SA-2015-007 "Tattletale"
When constructing an Rx acknowledgment (ACK) packet, Andrew-derived
Rx implementations do not initialize three octets of data that are
padding in the C language structure and were inadvertently included
in the wire protocol (CVE-2015-7762). Additionally, OpenAFS Rx in
versions 1.5.75 through 1.5.78, 1.6.0 through 1.6.14, and 1.7.0
through 1.7.32 include a variable-length padding at the end of the
ACK packet, in an attempt to detect the path MTU, but only four octets
of the additional padding are initialized (CVE-2015-7763).
Diffstat (limited to 'finance')
0 files changed, 0 insertions, 0 deletions