OpenAFS Master Repository branch, openafs-stable-1_6_x, updated. openafs-stable-1_6_12-7-g4f9a7ac
Gerrit Code Review
gerrit@openafs.org
Thu, 30 Jul 2015 00:01:59 -0400
The following commit has been merged in the openafs-stable-1_6_x branch:
commit eea466507af6320c35e3e8dc751da60a52b15a23
Author: Daria Brashear <shadow@your-file-system.com>
Date: Wed Jul 8 14:11:33 2015 -0400
bos: Use crypt for commands where spoofing could be a risk
bos defaults to not requiring crypt in a lot of cases, instead using clear.
As the simplest way to secure the channel is to enable crypt, do so.
FIXES 131782 (CVE-2015-3283)
(cherry picked from commit 62926630a82b8635d1cb1514b852f9f7a2609311)
Change-Id: Ib9e2514c4d14a77eead69677da1dabf86e526ebc
src/bozo/bos.c | 44 ++++++++++++++++++++++----------------------
1 files changed, 22 insertions(+), 22 deletions(-)
--
OpenAFS Master Repository