summaryrefslogtreecommitdiff
path: root/network/krb5/README
diff options
context:
space:
mode:
Diffstat (limited to 'network/krb5/README')
-rw-r--r--network/krb5/README10
1 files changed, 10 insertions, 0 deletions
diff --git a/network/krb5/README b/network/krb5/README
index cf7ab7dde3..1cc2092fff 100644
--- a/network/krb5/README
+++ b/network/krb5/README
@@ -3,3 +3,13 @@ provide strong authentication for client/server applications by using
secret-key cryptography. A free implementation of this protocol is
available from the Massachusetts Institute of Technology. Kerberos is
available in many commercial products as well.
+
+This package includes patches for security advisories:
+
+MITKRB5-SA-2009-004
+ integer underflow in AES and RC4 decryption
+MITKRB5-SA-2009-003
+ KDC denial of service in cross-realm referral processing
+
+For further information about these advisories, please see
+http://web.mit.edu/kerberos/advisories/