Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 13 Sep 2004 18:35:43 -0400
From:      Jeff Aitken <jaitken@aitken.com>
To:        Daniel Rudy <dr2867@pacbell.net>
Cc:        freebsd-security@freebsd.org
Subject:   Re: Kerberos 5 Security Alert?
Message-ID:  <20040913223543.GA28187@eagle.aitken.com>
In-Reply-To: <41461A28.1060308@pacbell.net>
References:  <41461A28.1060308@pacbell.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Sep 13, 2004 at 03:07:36PM -0700, Daniel Rudy wrote:
> Does FreeBSD use the MIT implementation?  

No, the system-supplied krb5 bits are from the Heimdal distribution.
The MIT distribution is available as a port, but is not part of the
base system.


> Why wasn't there a FreeBSD security alert for Kerberos 5?  

I may be wrong, but I think that security alerts are issued only
for the base system (i.e., things that are part of FreeBSD proper).
Vulnerabilities that affect ports are documented here:

    http://www.vuxml.org/freebsd/

I'm sure someone will correct me if this is wrong.


--Jeff



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040913223543.GA28187>