rpms/krb5
7
0
Fork 0
Code Issues Pull Requests Releases Activity
The Kerberos network authentication system
220 Commits 9 Branches 52 Tags 8.1 MiB
Diff 100%
7668599d1d
Go to file
Nalin Dahyabhai 7668599d1d - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 
when v4 compatibility is enabled on the KDC (CVE-2008-0062,
    CVE-2008-0063, #432620, #432621)
- add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
- add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
- add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)
2008-03-18 18:13:22 +00:00
.cvsignore - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999 and 2007-10-23 19:40:45 +00:00
2004-002-dblfree_patch.txt auto-import changelog data from krb5-1.3.4-7.src.rpm 2004-09-09 07:21:49 +00:00
2004-003-patch_1.3.4.txt auto-import changelog data from krb5-1.3.4-7.src.rpm 2004-09-09 07:21:49 +00:00
2006-001-patch_1.5.txt - switch to the updated patch for MITKRB-SA-2006-001 2006-08-18 16:50:54 +00:00
2006-002-patch.txt - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456) 2007-01-09 19:31:40 +00:00
2006-003-patch.txt - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456) 2007-01-09 19:31:40 +00:00
CVE-2007-3999-2.patch - incorporate updated fix for CVE-2007-3999 2007-09-06 20:20:55 +00:00
CVE-2007-4000.patch - incorporate fixes for MITKRB5-SA-2007-006 (CVE-2007-3999, CVE-2007-4000) 2007-09-04 18:10:23 +00:00
eklogin.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
ekrb5-telnet.xinetd - add an xinetd configuration file for encryption-only telnetd, 2005-09-06 14:05:59 +00:00
ekshell.pamd - make proper use of pam_loginuid and pam_selinux in rshd and ftpd 2007-10-17 17:48:52 +00:00
gssftp.pamd - make proper use of pam_loginuid and pam_selinux in rshd and ftpd 2007-10-17 17:48:52 +00:00
gssftp.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
kadm5.acl auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
kadmin.sysconfig - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469 2005-05-06 20:16:06 +00:00
kadmind.init - some init script cleanups 2008-01-02 17:03:38 +00:00
kdc.conf - kdc.conf: default to listening for TCP clients, too (#248415) 2007-07-26 18:36:57 +00:00
kdcrotate auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
klogin.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
kpropd.init - some init script cleanups 2008-01-02 17:03:38 +00:00
krb5-1.2.1-passive.patch - initial update to 1.6, making the package-split optional 2007-01-23 22:14:15 +00:00
krb5-1.2.7-login-lpass.patch note to self 2005-12-02 01:48:17 +00:00
krb5-1.2.7-reject-bad-transited.patch auto-import krb5-1.2.5-15 from krb5-1.2.5-15.src.rpm 2004-09-09 07:12:53 +00:00
krb5-1.3-ftp-glob.patch fix globbing patch port mode (#139075) 2004-11-17 00:42:19 +00:00
krb5-1.3-ksu-access.patch auto-import changelog data from krb5-1.3.1-6.src.rpm 2004-09-09 07:16:22 +00:00
krb5-1.3-large-file.patch auto-import changelog data from krb5-1.3.1-6.src.rpm 2004-09-09 07:16:22 +00:00
krb5-1.3-netkit-rsh.patch auto-import changelog data from krb5-1.3.1-6.src.rpm 2004-09-09 07:16:22 +00:00
krb5-1.3-rlogind-environ.patch - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469 2005-05-06 20:16:06 +00:00
krb5-1.3.1-dns.patch auto-import changelog data from krb5-1.3.1-7.src.rpm 2004-09-09 07:16:33 +00:00
krb5-1.3.2-efence.patch auto-import changelog data from krb5-1.3.2-1.src.rpm 2004-09-09 07:17:04 +00:00
krb5-1.3.3-rcp-markus.patch - fix double-close in keytab handling 2005-06-24 20:28:25 +00:00
krb5-1.3.3-rcp-sendlarge.patch auto-import changelog data from krb5-1.3.3-3.src.rpm 2004-09-09 07:18:32 +00:00
krb5-1.3.4-send-pr-tempfile.patch - specify $TMPDIR directly because older mktemp versions didn't support -t, 2004-11-23 02:38:51 +00:00
krb5-1.3.5-kprop-mktemp.patch - fixup comments 2004-12-20 23:17:34 +00:00
krb5-1.4-ktany.patch - update to 1.4 2005-02-24 23:16:08 +00:00
krb5-1.4-ncurses.patch - don't include <term.h> into the telnet client when we're not using curses 2005-03-16 22:59:54 +00:00
krb5-1.4.1-api.patch merge fixes for MITKRB5-SA-2005-002 and MITKRB5-SA-2005-003 2005-07-12 18:09:21 +00:00
krb5-1.4.1-telnet-environ.patch merge fixes for MITKRB5-SA-2005-002 and MITKRB5-SA-2005-003 2005-07-12 18:09:21 +00:00
krb5-1.4.2-max_dgram_size.patch - add an (undocumented, so far) option to set the max_dgram_size default 2005-09-14 23:58:11 +00:00
krb5-1.4.3-enospc.patch - give a little bit more information to the user when kinit gets the 2006-02-06 20:04:44 +00:00
krb5-1.4.3-kdc_max_dgram_size.patch - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not 2006-01-20 00:28:41 +00:00
krb5-1.5-brokenrev.patch The version of "rev" in util-linux doesn't work as this script expects it 2006-07-06 15:50:10 +00:00
krb5-1.5-fclose.patch Ensure that we don't accidentally attempt to use or fclose() a file which 2006-07-06 15:49:31 +00:00
krb5-1.5-io.patch - pull up latest revision of patch to reduce lockups in rsh/rshd 2006-07-25 15:52:36 +00:00
krb5-1.5-ksu-path.patch Set the default PATH to the one set by login, with the addition of the 2006-07-06 15:50:46 +00:00
krb5-1.5-kt_default_name.patch add newlines after new errors 2006-10-18 21:36:40 +00:00
krb5-1.5.1-1.6-pal.patch - backport of preauth plugin support from 1.6 2007-01-22 21:24:18 +00:00
krb5-1.6-buildconf.patch - initial update to 1.6, making the package-split optional 2007-01-23 22:14:15 +00:00
krb5-1.6-ldap-init.patch - fix an unitialized length count which caused the plugin to attempt to 2007-05-04 18:06:26 +00:00
krb5-1.6-ldap-man.patch - fix incorrect doc: "ldap_server" refers to what the code expects is 2007-05-04 18:05:15 +00:00
krb5-1.6-nodeplibs.patch - label all files at creation-time according to the SELinux policy 2007-06-25 00:55:25 +00:00
krb5-1.6-sort-of-static.patch - also don't error out in the --disable-shared case, which while it doesn't 2007-06-25 00:52:53 +00:00
krb5-1.6.1-empty.patch - experimental patch to ignore empty values for various environment values 2007-05-23 21:46:54 +00:00
krb5-1.6.1-pam.patch - in login, allow PAM to interact with the user when they've been strongly 2008-02-25 18:33:34 +00:00
krb5-1.6.2-dirsrv-accountlock.patch comment: Treat 'nsAccountLock: true' the same as 'loginDisabled: true'. 2008-02-25 18:32:02 +00:00
krb5-1.6.2-key_exp.patch - wow, fix a syntax error 2008-02-12 21:03:29 +00:00
krb5-1.6.2-login_chdir.patch - test patch for login chdir when $HOME is on root-squashed nfs 2007-07-26 19:07:22 +00:00
krb5-1.6.3-ftp_fdleak.patch - ftp: don't lose track of a descriptor on passive get when the server 2008-02-25 19:50:42 +00:00
krb5-1.6.3-ftp_glob_runique.patch - ftp: add patch to fix "runique on" case when globbing fixes applied 2008-02-26 21:18:38 +00:00
krb5-1.6.3-selinux-label.patch - remove a couple of hunks where on third look we don't need to be using 2008-03-18 15:49:52 +00:00
krb5-any-fixup-patch.txt - patch to make srvtab routines report missing-file errors at the same 2007-06-22 22:03:42 +00:00
krb5-CVE-2007-5901.patch - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 2008-03-18 18:13:22 +00:00
krb5-CVE-2007-5971.patch - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 2008-03-18 18:13:22 +00:00
krb5-CVE-2008-0062,0063.patch - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 2008-03-18 18:13:22 +00:00
krb5-CVE-2008-0947.patch - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 2008-03-18 18:13:22 +00:00
krb5-MITKRB5SA-2005-001.patch - add draft fix from Tom Yu for slc_add_reply() buffer overflow 2005-03-28 18:25:19 +00:00
krb5-ok-as-delegate.patch - experimental ok-as-delegate setting patch (not applied) 2007-08-25 04:28:10 +00:00
krb5-telnet.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
krb5-tex-pdf.sh - preserve timestamps on profile.d shell scriptlets 2007-01-22 21:23:54 +00:00
krb5-trunk-doublelog.patch - add patch to suppress double-processing of /etc/krb5.conf when we build 2008-02-25 20:53:41 +00:00
krb5-trunk-kpasswd_tcp2.patch - a second approach proposed in RT 2008-02-12 16:28:13 +00:00
krb5-trunk-kpasswd_tcp.patch - note RT numbers for reference 2008-01-23 18:27:03 +00:00
krb5-trunk-manpaths.patch - filename listing all of the man pages in the source tree, so that the 2007-06-22 22:02:16 +00:00
krb5-trunk-manpaths.txt - filename listing all of the man pages in the source tree, so that the 2007-06-22 22:02:16 +00:00
krb5-trunk-seqnum.patch - note RT numbers for reference 2008-01-23 18:27:03 +00:00
krb5-trunk-spnego_delegation.patch note the RT number 2007-11-09 15:40:20 +00:00
krb5.conf - merge back changes made between fc6 and rawhide to date 2007-01-22 21:27:49 +00:00
krb5.csh auto-import krb5-1.2.5-5 from krb5-1.2.5-5.src.rpm 2004-09-09 07:12:05 +00:00
krb5.sh Use full paths in krb5.sh to avoid path lookups 2006-01-19 18:05:28 +00:00
krb5.spec - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 2008-03-18 18:13:22 +00:00
krb5kdc.init - some init script cleanups 2008-01-02 17:03:38 +00:00
krb5kdc.sysconfig - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469 2005-05-06 20:16:06 +00:00
krb524.sysconfig - update to 1.4 2005-02-24 23:16:08 +00:00
krb524d.init - some init script cleanups 2008-01-02 17:03:38 +00:00
krlogin - clean up quoting of command-line arguments passed to the krsh/krlogin 2007-01-30 21:01:21 +00:00
krsh - clean up quoting of command-line arguments passed to the krsh/krlogin 2007-01-30 21:01:21 +00:00
kshell.pamd - make proper use of pam_loginuid and pam_selinux in rshd and ftpd 2007-10-17 17:48:52 +00:00
kshell.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
Makefile makefile update to properly grab makefile.common 2007-10-15 18:56:42 +00:00
sources - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999 and 2007-10-23 19:40:45 +00:00