tocsin

Debian/openafs: unknown

The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive informat

Action: Upgrade openafs to 1.6.5-1 or later.

Affected

introducedfixedlast affected
01.6.5-1-

Fixed versions

1.6.5-1

Sources

published · modified · JSON