auto-import krb5-1.2.7-10 from krb5-1.2.7-10.src.rpm

krb5.spec

@@ -4,7 +4,7 @@
 Summary: The Kerberos network authentication system.
 Name: krb5
 Version: 1.2.7
-Release: 8
+Release: 10
 Source0: krb5-%{version}.tar.gz
 Source1: krb5-%{version}.tar.gz.asc
 Source2: kpropd.init
@@ -54,6 +54,7 @@ Patch26: krb5-1.2.7-errno.patch
 Patch27: gssftp-patch
 Patch28: krb5-1.2.7-princ_size.patch
 Patch29: krb5-1.2.7-reject-bad-transited.patch
+Patch30: krb5-1.2.7-underrun.patch
 License: MIT, freely distributable.
 URL: http://web.mit.edu/kerberos/www/
 Group: System Environment/Libraries
@@ -115,11 +116,18 @@ network uses Kerberos, this package should be installed on every
 workstation.
 
 %changelog
+* Thu Mar  6 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.7-10
+- rebuild
+
+* Thu Mar  6 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.7-9
+- fix buffer underrun in unparsing certain principals (CAN-2003-0082)
+
 * Tue Feb  4 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.7-8
 - add patch to document the reject-bad-transited option in kdc.conf
 
 * Mon Feb  3 2003 Nalin Dahyabhai <nalin@redhat.com>
-- add patch to fix server-side crashes when principals have no components
+- add patch to fix server-side crashes when principals have no
+  components (CAN-2003-0072)
 
 * Thu Jan 23 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.7-7
 - add patch from Mark Cox for exploitable bugs in ftp client
@@ -571,6 +579,7 @@ workstation.
 %patch27 -p1 -b .gssftp-patch
 %patch28 -p1 -b .princ_size.patch
 %patch29 -p1 -b .reject-bad-transited.patch
+%patch30 -p1 -b .underrun
 
 cp src/krb524/README README.krb524