From nobody Mon Aug 18 05:52:18 2025 X-Original-To: current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4c521244mbz64gJn for ; Mon, 18 Aug 2025 05:52:22 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from omta004.cacentral1.a.cloudfilter.net (omta002.cacentral1.a.cloudfilter.net [3.97.99.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4c52116QYmz3KJv for ; Mon, 18 Aug 2025 05:52:21 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=permerror reason="p tag has invalid value: quarantine rua=mailto:p[ostmaster@cschubert.com" header.from=cschubert.com (policy=permerror); spf=pass (mx1.freebsd.org: domain of cy.schubert@cschubert.com designates 3.97.99.33 as permitted sender) smtp.mailfrom=cy.schubert@cschubert.com Received: from shw-obgw-4001a.ext.cloudfilter.net ([10.228.9.142]) by cmsmtp with ESMTPS id ngatuHMfr5Mqynsn7usrjD; Mon, 18 Aug 2025 05:52:21 +0000 Received: from spqr.komquats.com ([70.66.136.217]) by cmsmtp with ESMTPSA id nsn5ubOFdWX70nsn6ud9r7; Mon, 18 Aug 2025 05:52:21 +0000 X-Auth-User: cschuber X-Authority-Analysis: v=2.4 cv=d71WygjE c=1 sm=1 tr=0 ts=68a2bf95 a=h7br+8Ma+Xn9xscxy5znUg==:117 a=h7br+8Ma+Xn9xscxy5znUg==:17 a=kj9zAlcOel0A:10 a=2OwXVqhp2XgA:10 a=Gz7s5_CCAAAA:8 a=6I5d2MoRAAAA:8 a=EkcXrb_YAAAA:8 a=Rk-M77FJAAAA:8 a=YxBL1-UpAAAA:8 a=IEyuxA9iCegVlB61KgwA:9 a=CjuIK1q_8ugA:10 a=J0X-IUJ9AbQA:10 a=LK5xJRSDVpKd5WXXoEvA:22 a=ef1k35tKgZpiIrJ2aQ5N:22 a=Ia-lj3WSrqcvXOmTRaiG:22 Received: from slippy.cwsent.com (slippy.cwsent.com [10.1.1.91]) by spqr.komquats.com (Postfix) with ESMTP id 022223D2; Sun, 17 Aug 2025 22:52:18 -0700 (PDT) Received: by slippy.cwsent.com (Postfix, from userid 1000) id D8235126; Sun, 17 Aug 2025 22:52:18 -0700 (PDT) X-Mailer: exmh version 2.9.0 11/07/2018 with nmh-1.8+dev Reply-to: Cy Schubert From: Cy Schubert X-os: FreeBSD X-Sender: cy@cwsent.com X-URL: http://www.cschubert.com/ To: "Herbert J. Skuhra" , current@freebsd.org Subject: Re: git: f1c4c3daccba - main - krb5: Update MIT KRB5 from 1.21 to 1.22 In-reply-to: References: <202508100532.57A5W4Dl038254@gitrepo.freebsd.org> <87zfby8jv6.wl-herbert@gojira.at> Comments: In-reply-to Lexi Winter message dated "Sun, 17 Aug 2025 08:59:30 +0100." List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Sun, 17 Aug 2025 22:52:18 -0700 Message-Id: <20250818055218.D8235126@slippy.cwsent.com> X-CMAE-Envelope: MS4xfOXY7upfTKwLc9bmRCqVS+lq1j18AMp6oGh2DunyDsILy91eW4P6jetr7z9NwuBniPaBkglqm8lRwqV5gfabc+gm4YCDCsvrJhJAShfiw7fwiwXzUrrK NRnfSB8ogerEJnXR1Mvq9HCL4bybG2508SSo7KsMPVfbUwfin6KXfbdW4g0Tm6HnijqAOTE/WpFR6mZwoXN8QjVsUaoY1omUnl5lR+bE2omtnhZTDk5OMM4O X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.27 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-0.99)[-0.988]; NEURAL_HAM_SHORT(-0.98)[-0.978]; MV_CASE(0.50)[]; RWL_MAILSPIKE_EXCELLENT(-0.40)[3.97.99.33:from]; R_SPF_ALLOW(-0.20)[+ip4:3.97.99.32/31]; RCVD_IN_DNSWL_LOW(-0.10)[3.97.99.33:from]; MIME_GOOD(-0.10)[text/plain]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; TO_DN_SOME(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:16509, ipnet:3.96.0.0/15, country:US]; RCPT_COUNT_TWO(0.00)[2]; HAS_REPLYTO(0.00)[Cy.Schubert@cschubert.com]; TO_MATCH_ENVRCPT_SOME(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; DMARC_BAD_POLICY(0.00)[cschubert.com : p tag has invalid value: quarantine rua=mailto:p[ostmaster@cschubert.com]; RCVD_TLS_LAST(0.00)[]; MLMMJ_DEST(0.00)[current@freebsd.org]; RCVD_COUNT_THREE(0.00)[4]; R_DKIM_NA(0.00)[]; REPLYTO_EQ_FROM(0.00)[] X-Rspamd-Queue-Id: 4c52116QYmz3KJv In message , Lexi Winter writes: > > --Bghpo0KvGWo6IE0X > Content-Type: text/plain; charset=us-ascii > Content-Disposition: inline > Content-Transfer-Encoding: quoted-printable > > Herbert J. Skuhra: > > On Sun, 10 Aug 2025 07:32:04 +0200, Cy Schubert wrote: > > > krb5: Update MIT KRB5 from 1.21 to 1.22 > >=20 > > krb5-1.22 is withdrawn: > >=20 > > Due to a critical bug, krb5-1.22 has been withdrawn, and krb5-1.21.3 is= > =20 > > again the latest supported release. krb5-1.22.1 will be issued with a=20 > > correction. > > i assume the bug in question is this one: > https://krbdev.mit.edu/rt/Ticket/Display.html?id=3D9181 That bug was announced on the krbdev ML yesterday. > > the ticket doesn't mention whether it has any security impact or not. > if not, we're probably better off waiting for 1.22.1 rather than > reverting. A patch has been posted to the krbdev ML. It will be released in krb5 1.22.1 in a few days. I'm watching the ML for the release announcement. You can find our review at https://reviews.freebsd.org/D51990. I've been running it here since earlier today. -- Cheers, Cy Schubert FreeBSD UNIX: Web: https://FreeBSD.org NTP: Web: https://nwtime.org e**(i*pi)+1=0