The Kerberos network authentication system
Go to file
2009-06-04 19:35:17 +00:00
.cvsignore - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999 and 2007-10-23 19:40:45 +00:00
2004-002-dblfree_patch.txt auto-import changelog data from krb5-1.3.4-7.src.rpm 2004-09-09 07:21:49 +00:00
2004-003-patch_1.3.4.txt auto-import changelog data from krb5-1.3.4-7.src.rpm 2004-09-09 07:21:49 +00:00
2006-001-patch_1.5.txt - switch to the updated patch for MITKRB-SA-2006-001 2006-08-18 16:50:54 +00:00
2006-002-patch.txt - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456) 2007-01-09 19:31:40 +00:00
2006-003-patch.txt - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456) 2007-01-09 19:31:40 +00:00
CVE-2007-3999-2.patch - incorporate updated fix for CVE-2007-3999 2007-09-06 20:20:55 +00:00
CVE-2007-4000.patch - incorporate fixes for MITKRB5-SA-2007-006 (CVE-2007-3999, CVE-2007-4000) 2007-09-04 18:10:23 +00:00
eklogin.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
ekrb5-telnet.xinetd - add an xinetd configuration file for encryption-only telnetd, 2005-09-06 14:05:59 +00:00
ekshell.pamd - make proper use of pam_loginuid and pam_selinux in rshd and ftpd 2007-10-17 17:48:52 +00:00
gssftp.pamd - make proper use of pam_loginuid and pam_selinux in rshd and ftpd 2007-10-17 17:48:52 +00:00
gssftp.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
kadm5.acl auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
kadmin.sysconfig - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469 2005-05-06 20:16:06 +00:00
kadmind.init - add empty Default-Start: statements to the init scripts 2009-04-20 20:33:32 +00:00
kdc.conf - stop exporting kadmin keys to a keytab file when kadmind starts -- the 2008-04-04 21:29:53 +00:00
klogin.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
kpropd.init - add empty Default-Start: statements to the init scripts 2009-04-20 20:33:32 +00:00
krb5-1.2.1-passive.patch - initial update to 1.6, making the package-split optional 2007-01-23 22:14:15 +00:00
krb5-1.3-ftp-glob.patch fix globbing patch port mode (#139075) 2004-11-17 00:42:19 +00:00
krb5-1.3-ksu-access.patch auto-import changelog data from krb5-1.3.1-6.src.rpm 2004-09-09 07:16:22 +00:00
krb5-1.3-large-file.patch auto-import changelog data from krb5-1.3.1-6.src.rpm 2004-09-09 07:16:22 +00:00
krb5-1.3-netkit-rsh.patch auto-import changelog data from krb5-1.3.1-6.src.rpm 2004-09-09 07:16:22 +00:00
krb5-1.3-rlogind-environ.patch - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469 2005-05-06 20:16:06 +00:00
krb5-1.3.1-dns.patch auto-import changelog data from krb5-1.3.1-7.src.rpm 2004-09-09 07:16:33 +00:00
krb5-1.3.2-efence.patch auto-import changelog data from krb5-1.3.2-1.src.rpm 2004-09-09 07:17:04 +00:00
krb5-1.3.3-rcp-markus.patch - fix double-close in keytab handling 2005-06-24 20:28:25 +00:00
krb5-1.3.3-rcp-sendlarge.patch auto-import changelog data from krb5-1.3.3-3.src.rpm 2004-09-09 07:18:32 +00:00
krb5-1.3.4-send-pr-tempfile.patch - specify $TMPDIR directly because older mktemp versions didn't support -t, 2004-11-23 02:38:51 +00:00
krb5-1.3.5-kprop-mktemp.patch - fixup comments 2004-12-20 23:17:34 +00:00
krb5-1.4-ktany.patch - update to 1.4 2005-02-24 23:16:08 +00:00
krb5-1.4-ncurses.patch - don't include <term.h> into the telnet client when we're not using curses 2005-03-16 22:59:54 +00:00
krb5-1.4.1-api.patch merge fixes for MITKRB5-SA-2005-002 and MITKRB5-SA-2005-003 2005-07-12 18:09:21 +00:00
krb5-1.4.1-telnet-environ.patch merge fixes for MITKRB5-SA-2005-002 and MITKRB5-SA-2005-003 2005-07-12 18:09:21 +00:00
krb5-1.4.2-max_dgram_size.patch - add an (undocumented, so far) option to set the max_dgram_size default 2005-09-14 23:58:11 +00:00
krb5-1.4.3-enospc.patch - give a little bit more information to the user when kinit gets the 2006-02-06 20:04:44 +00:00
krb5-1.4.3-kdc_max_dgram_size.patch - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not 2006-01-20 00:28:41 +00:00
krb5-1.5-fclose.patch Ensure that we don't accidentally attempt to use or fclose() a file which 2006-07-06 15:49:31 +00:00
krb5-1.5-io.patch - pull up latest revision of patch to reduce lockups in rsh/rshd 2006-07-25 15:52:36 +00:00
krb5-1.5-ksu-path.patch Set the default PATH to the one set by login, with the addition of the 2006-07-06 15:50:46 +00:00
krb5-1.5-kt_default_name.patch add newlines after new errors 2006-10-18 21:36:40 +00:00
krb5-1.5.1-1.6-pal.patch - backport of preauth plugin support from 1.6 2007-01-22 21:24:18 +00:00
krb5-1.6-buildconf.patch - initial update to 1.6, making the package-split optional 2007-01-23 22:14:15 +00:00
krb5-1.6-ldap-init.patch - fix an unitialized length count which caused the plugin to attempt to 2007-05-04 18:06:26 +00:00
krb5-1.6-ldap-man.patch - fix incorrect doc: "ldap_server" refers to what the code expects is 2007-05-04 18:05:15 +00:00
krb5-1.6-nodeplibs.patch - label all files at creation-time according to the SELinux policy 2007-06-25 00:55:25 +00:00
krb5-1.6-sort-of-static.patch - also don't error out in the --disable-shared case, which while it doesn't 2007-06-25 00:52:53 +00:00
krb5-1.6.1-empty.patch - flesh out the note to include why the patch isn't going anywhere 2009-02-19 22:35:32 +00:00
krb5-1.6.1-pam.patch - make PAM support for ksu also set PAM_RUSER 2009-05-11 18:19:08 +00:00
krb5-1.6.1-telnet-manual_z.patch - telnet can suspend itself if the calling shell supports job control, and 2008-10-28 21:35:45 +00:00
krb5-1.6.2-dirsrv-accountlock.patch comment: Treat 'nsAccountLock: true' the same as 'loginDisabled: true'. 2008-02-25 18:32:02 +00:00
krb5-1.6.2-key_exp.patch - wow, fix a syntax error 2008-02-12 21:03:29 +00:00
krb5-1.6.2-login_chdir.patch - test patch for login chdir when $HOME is on root-squashed nfs 2007-07-26 19:07:22 +00:00
krb5-1.6.3-cc_gen_new-locks.patch - krb5_fcc_generate_new(): unlock the fcc list lock before returning in the 2008-10-28 21:36:18 +00:00
krb5-1.6.3-ftp_fdleak.patch - ftp: don't lose track of a descriptor on passive get when the server 2008-02-25 19:50:42 +00:00
krb5-1.6.3-ftp_glob_runique.patch - ftp: add patch to fix "runique on" case when globbing fixes applied 2008-02-26 21:18:38 +00:00
krb5-1.6.3-kdc_listen_all.patch Provide an option to make the KDC also listen on loopback interfaces for 2008-04-04 21:32:15 +00:00
krb5-1.6.3-login-lpass.patch - clear fuzz out of patches, dropping a man page patch which is no longer 2008-07-16 18:09:47 +00:00
krb5-1.6.3-lucid-acceptor.patch - libgssapi_krb5: properly export the acceptor subkey when creating a lucid 2008-04-01 20:53:54 +00:00
krb5-1.6.3-selinux-label.patch - add a hunk so that the db2 test will compile correctly 2009-02-19 22:34:47 +00:00
krb5-1.7-api.patch - try to be more resilient to comparisons of malformed principal structures 2009-06-04 19:29:44 +00:00
krb5-1.7-buildconf.patch - link binaries to produce position-independent executables, and strip the 2009-06-04 19:09:04 +00:00
krb5-1.7-doublelog.patch - avoid double-logging in the servers by avoiding processing of the same 2009-06-04 19:32:36 +00:00
krb5-1.7-io.patch - try to avoid locking up in rsh due to client and server blocking on 2009-06-04 19:26:29 +00:00
krb5-1.7-kprop-mktemp.patch - use an in-memory ccache instead of an on-disk temporary to avoid 2009-06-04 19:16:47 +00:00
krb5-1.7-ktany.patch - forward-port long-present out-of-tree patch to support "ANY" keytab type, 2009-06-04 19:05:20 +00:00
krb5-1.7-nodeplibs.patch - suppress our indirect dependencies from the output of --libs, unless the 2009-06-04 19:30:50 +00:00
krb5-1.7-pam.patch - update of the PAM support patch 2009-06-04 19:35:17 +00:00
krb5-1.7-rcp-markus.patch - when we're not doing a recursive transfer, treat subdirectories as a 2009-06-04 19:27:50 +00:00
krb5-1.7-rcp-sendlarge.patch - send the length of the file by printf()ing a long long instead of a long, 2009-06-04 19:15:24 +00:00
krb5-any-fixup-patch.txt - patch to make srvtab routines report missing-file errors at the same 2007-06-22 22:03:42 +00:00
krb5-CVE-2007-5901.patch - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 2008-03-18 18:13:22 +00:00
krb5-CVE-2007-5971.patch - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 2008-03-18 18:13:22 +00:00
krb5-CVE-2008-0062,0063.patch - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 2008-03-18 18:13:22 +00:00
krb5-CVE-2008-0947.patch - clear fuzz out of patches, dropping a man page patch which is no longer 2008-07-16 18:09:47 +00:00
krb5-CVE-2009-0844-0845-2.patch - add patches for read overflow and null pointer dereference in the 2009-04-07 18:14:43 +00:00
krb5-CVE-2009-0846.patch - add patch for attempt to free uninitialized pointer in libkrb5 2009-04-07 18:15:12 +00:00
krb5-CVE-2009-0847.patch - add patch to fix length validation bug in libkrb5 (CVE-2009-0847) 2009-04-07 18:15:43 +00:00
krb5-MITKRB5SA-2005-001.patch - add draft fix from Tom Yu for slc_add_reply() buffer overflow 2005-03-28 18:25:19 +00:00
krb5-ok-as-delegate.patch - note the RT number for the upstream discussion 2009-02-19 22:32:32 +00:00
krb5-telnet.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
krb5-tex-pdf.sh - preserve timestamps on profile.d shell scriptlets 2007-01-22 21:23:54 +00:00
krb5-trunk-close-err.patch - add a patch to catch out-of-space errors rcp'ing files to NFS 2009-02-19 23:11:41 +00:00
krb5-trunk-doublelog.patch - clear fuzz out of patches, dropping a man page patch which is no longer 2008-07-16 18:09:47 +00:00
krb5-trunk-ftp_mget_case.patch - whoops, forgot to go back and get the ITS entry number 2008-05-12 18:50:56 +00:00
krb5-trunk-kpasswd_tcp2.patch - a second approach proposed in RT 2008-02-12 16:28:13 +00:00
krb5-trunk-kpasswd_tcp.patch - note RT numbers for reference 2008-01-23 18:27:03 +00:00
krb5-trunk-ksu-typo.patch - fix a typo in a ksu error message (Marek Mahut) 2009-04-21 18:46:52 +00:00
krb5-trunk-manpaths.patch - clear fuzz out of patches, dropping a man page patch which is no longer 2008-07-16 18:09:47 +00:00
krb5-trunk-manpaths.txt - filename listing all of the man pages in the source tree, so that the 2007-06-22 22:02:16 +00:00
krb5-trunk-preauth-master.patch - if we successfully change the user's password during an attempt to get 2008-09-04 15:13:51 +00:00
krb5-trunk-seqnum.patch - note RT numbers for reference 2008-01-23 18:27:03 +00:00
krb5-trunk-spnego_delegation.patch note the RT number 2007-11-09 15:40:20 +00:00
krb5.conf - merge back changes made between fc6 and rawhide to date 2007-01-22 21:27:49 +00:00
krb5.csh auto-import krb5-1.2.5-5 from krb5-1.2.5-5.src.rpm 2004-09-09 07:12:05 +00:00
krb5.sh Use full paths in krb5.sh to avoid path lookups 2006-01-19 18:05:28 +00:00
krb5.spec - add an auth stack to ksu's PAM configuration so that pam_setcred() calls 2009-05-19 23:21:48 +00:00
krb5kdc.init - add empty Default-Start: statements to the init scripts 2009-04-20 20:33:32 +00:00
krb5kdc.sysconfig - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469 2005-05-06 20:16:06 +00:00
krlogin - clean up quoting of command-line arguments passed to the krsh/krlogin 2007-01-30 21:01:21 +00:00
krsh - clean up quoting of command-line arguments passed to the krsh/krlogin 2007-01-30 21:01:21 +00:00
kshell.pamd - make proper use of pam_loginuid and pam_selinux in rshd and ftpd 2007-10-17 17:48:52 +00:00
kshell.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
ksu.pamd - add an auth stack to ksu's PAM configuration so that pam_setcred() calls 2009-05-19 23:21:48 +00:00
Makefile makefile update to properly grab makefile.common 2007-10-15 18:56:42 +00:00
sources - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999 and 2007-10-23 19:40:45 +00:00