tocsin

Debian/heimdal: high 7.5

The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp. When these patches were backported to t

Action: Upgrade heimdal to 7.8.git20221117.28daf24+dfsg-1.1 or later.

Affected

introducedfixedlast affected
07.8.git20221117.28daf24+dfsg-1.1-

Fixed versions

7.8.git20221117.28daf24+dfsg-1.1

Sources

published · modified · JSON