tocsin

Debian/krb5: unknown

The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interp

Action: Upgrade krb5 to 1.12.1+dfsg-17 or later.

Affected

introducedfixedlast affected
01.12.1+dfsg-17-

Fixed versions

1.12.1+dfsg-17

Sources

published · modified · JSON