|
|
 |
|
|
Changelog for krb5-devel-1.6.3-31.fc11.i586.rpm :
Tue May 18 14:00:00 2010 Nalin Dahyabhai 1.6.3-31
- add patch to correct GSSAPI library null pointer dereference which could be
triggered by malformed client requests (CVE-2010-1321, #582466)
Tue May 4 14:00:00 2010 Nalin Dahyabhai 1.6.3-30
- fix output of kprop\'s init script\'s \"status\" and \"reload\" commands (#588222)
Tue Apr 6 14:00:00 2010 Nalin Dahyabhai - 1.6.3-29
- add backported patch to fix a few use-after-free bugs, including one in
kadmind (CVE-2010-0629, #576011)
Mon Mar 8 13:00:00 2010 Nalin Dahyabhai - 1.6.3-28
- pull up patch to get the client libraries to correctly perform password
changes over IPv6 (Sumit Bose, RT#6661)
Wed Mar 3 13:00:00 2010 Nalin Dahyabhai - 1.6.3-27
- fix a null pointer dereference and crash introduced in our PAM patch that
would happen if ftpd was given the name of a user who wasn\'t known to the
local system, limited to being triggerable by gssapi-authenticated clients by
the default xinetd config (Olivier Fourdan, #569472)
Tue Mar 2 13:00:00 2010 Nalin Dahyabhai - 1.6.3-26
- fix a regression (not labeling a kdb database lock file correctly, #569902)
- add a workaround to build with OpenSSL 1.0, which changed the signature
of EVP_PKEY_decrypt()
Fri Jan 22 13:00:00 2010 Nalin Dahyabhai - 1.6.3-25
- use portreserve correctly -- portrelease takes the basename of the file
whose entries should be released, so we need three files, not one
Thu Jan 14 13:00:00 2010 Nalin Dahyabhai - 1.6.3-24
- use portreserve to make sure the KDC can always bind to the kerberos-iv
port, kpropd can always bind to the krb5_prop port, and that kadmind can
always bind to the kerberos-adm port (#555279)
- backport the LSB headers for the init scripts
- make the kpropd init script treat \'reload\' as \'restart\' (part of #225974)
Tue Jan 12 13:00:00 2010 Nalin Dahyabhai - 1.6.3-23
- add upstream patch for integer underflow during AES and RC4 decryption
(CVE-2009-4212), via Tom Yu (#545015)
Tue Jun 30 14:00:00 2009 Nalin Dahyabhai
- pam_rhosts_auth.so\'s been gone, use pam_rhosts.so instead
Mon Jun 8 14:00:00 2009 Nalin Dahyabhai 1.6.3-22
- put %{krb5prefix}/sbin in everyone\'s path, too (#504525)
Tue May 26 14:00:00 2009 Nalin Dahyabhai 1.6.3-21
- don\'t depend on the execute bit being set on scripts that are sources
Tue Apr 7 14:00:00 2009 Nalin Dahyabhai 1.6.3-20
- add patches for read overflow and null pointer dereference in the
implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
- add patch for attempt to free uninitialized pointer in libkrb5
(CVE-2009-0846)
- add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
Tue Mar 17 13:00:00 2009 Nalin Dahyabhai 1.6.3-19
- libgssapi_krb5: backport fix for some errors which can occur when
we fail to set up the server half of a context (CVE-2009-0845)
Wed Feb 25 13:00:00 2009 Fedora Release Engineering - 1.6.3-18
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
Fri Jan 16 13:00:00 2009 Nalin Dahyabhai 1.6.3-17
- rebuild
Thu Sep 4 14:00:00 2008 Nalin Dahyabhai
- if we successfully change the user\'s password during an attempt to get
initial credentials, but then fail to get initial creds from a non-master
using the new password, retry against the master (#432334)
Tue Aug 5 14:00:00 2008 Tom \"spot\" Callaway 1.6.3-16
- fix license tag
Wed Jul 16 14:00:00 2008 Nalin Dahyabhai
- clear fuzz out of patches, dropping a man page patch which is no longer
necessary
- quote %{__cc} where needed because it includes whitespace now
- define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building
Fri Jul 11 14:00:00 2008 Nalin Dahyabhai 1.6.3-15
- build with -fno-strict-aliasing, which is needed because the library
triggers these warnings
- don\'t forget to label principal database lock files
- fix the labeling patch so that it doesn\'t break bootstrapping
Sat Jun 14 14:00:00 2008 Tom \"spot\" Callaway 1.6.3-14
- generate src/include/krb5/krb5.h before building
- fix conditional for sparcv9
Wed Apr 16 14:00:00 2008 Nalin Dahyabhai 1.6.3-13
- ftp: use the correct local filename during mget when the \'case\' option is
enabled (#442713)
Fri Apr 4 14:00:00 2008 Nalin Dahyabhai 1.6.3-12
- stop exporting kadmin keys to a keytab file when kadmind starts -- the
daemon\'s been able to use the database directly for a long long time now
- belatedly add aes128,aes256 to the default set of supported key types
Tue Apr 1 14:00:00 2008 Nalin Dahyabhai 1.6.3-11
- libgssapi_krb5: properly export the acceptor subkey when creating a lucid
context (Kevin Coffman, via the nfs4 mailing list)
Tue Mar 18 13:00:00 2008 Nalin Dahyabhai 1.6.3-10
- add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
- add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
high-numbered descriptors are used (CVE-2008-0947, #433596)
- add backport bug fix for an attempt to free non-heap memory in
libgssapi_krb5 (CVE-2007-5901, #415321)
- add backport bug fix for a double-free in out-of-memory situations in
libgssapi_krb5 (CVE-2007-5971, #415351)
Tue Mar 18 13:00:00 2008 Nalin Dahyabhai 1.6.3-9
- rework file labeling patch to not depend on fragile preprocessor trickery,
in another attempt at fixing #428355 and friends
Tue Feb 26 13:00:00 2008 Nalin Dahyabhai 1.6.3-8
- ftp: add patch to fix \"runique on\" case when globbing fixes applied
- stop adding a redundant but harmless call to initialize the gssapi internals
Mon Feb 25 13:00:00 2008 Nalin Dahyabhai
- add patch to suppress double-processing of /etc/krb5.conf when we build
with --sysconfdir=/etc, thereby suppressing double-logging (#231147)
Mon Feb 25 13:00:00 2008 Nalin Dahyabhai
- remove a patch, to fix problems with interfaces which are \"up\" but which
have no address assigned, which conflicted with a different fix for the same
problem in 1.5 (#200979)
Mon Feb 25 13:00:00 2008 Nalin Dahyabhai
- ftp: don\'t lose track of a descriptor on passive get when the server fails to
open a file
Mon Feb 25 13:00:00 2008 Nalin Dahyabhai
- in login, allow PAM to interact with the user when they\'ve been strongly
authenticated
- in login, signal PAM when we\'re changing an expired password that it\'s an
expired password, so that when cracklib flags a password as being weak it\'s
treated as an error even if we\'re running as root
Mon Feb 18 13:00:00 2008 Nalin Dahyabhai 1.6.3-7
- drop netdb patch
- kdb_ldap: add patch to treat \'nsAccountLock: true\' as an indication that
the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
Netscape, Red Hat Directory Server (Simo Sorce)
Wed Feb 13 13:00:00 2008 Nalin Dahyabhai 1.6.3-6
- patch to avoid depending on to define NI_MAXHOST and NI_MAXSERV
Tue Feb 12 13:00:00 2008 Nalin Dahyabhai 1.6.3-5
- enable patch for key-expiration reporting
- enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
- enable patch to make kpasswd use the right sequence number on retransmit
- enable patch to allow mech-specific creds delegated under spnego to be found
when searching for creds
Wed Jan 2 13:00:00 2008 Nalin Dahyabhai 1.6.3-4
- some init script cleanups
- drop unquoted check and silent exit for \"$NETWORKING\" (#426852, #242502)
- krb524: don\'t barf on missing database if it looks like we\'re using kldap,
same as for kadmin
- return non-zero status for missing files which cause startup to
fail (#242502)
Tue Dec 18 13:00:00 2007 Nalin Dahyabhai 1.6.3-3
- allocate space for the nul-terminator in the local pathname when looking up
a file context, and properly free a previous context (Jose Plans, #426085)
Wed Dec 5 13:00:00 2007 Nalin Dahyabhai 1.6.3-2
- rebuild
Tue Oct 23 14:00:00 2007 Nalin Dahyabhai 1.6.3-1
- update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
and CVE-2007-4000 (the new pkinit module is built conditionally and goes
into the -pkinit-openssl package, at least for now, to make a buildreq
loop with openssl avoidable)
Wed Oct 17 14:00:00 2007 Nalin Dahyabhai 1.6.2-10
- make proper use of pam_loginuid and pam_selinux in rshd and ftpd
Fri Oct 12 14:00:00 2007 Nalin Dahyabhai
- make krb5.conf %verify(not md5 size mtime) in addition to
%config(noreplace), like /etc/nsswitch.conf (#329811)
Mon Oct 1 14:00:00 2007 Nalin Dahyabhai 1.6.2-9
- apply the fix for CVE-2007-4000 instead of the experimental patch for
setting ok-as-delegate flags
Tue Sep 11 14:00:00 2007 Nalin Dahyabhai 1.6.2-8
- move the db2 kdb plugin from -server to -libs, because a multilib libkdb
might need it
Tue Sep 11 14:00:00 2007 Nalin Dahyabhai 1.6.2-7
- also perform PAM session and credential management when ftpd accepts a
client using strong authentication, missed earlier
- also label kadmind log files and files created by the db2 plugin
Thu Sep 6 14:00:00 2007 Nalin Dahyabhai 1.6.2-6
- incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
- fix incorrect call to \"test\" in the kadmin init script (#252322,#287291)
Tue Sep 4 14:00:00 2007 Nalin Dahyabhai 1.6.2-5
- incorporate fixes for MITKRB5-SA-2007-006 (CVE-2007-3999, CVE-2007-4000)
Sat Aug 25 14:00:00 2007 Nalin Dahyabhai 1.6.2-4
- cover more cases in labeling files on creation
- add missing gawk build dependency
Thu Aug 23 14:00:00 2007 Nalin Dahyabhai 1.6.2-3
- rebuild
Thu Jul 26 14:00:00 2007 Nalin Dahyabhai 1.6.2-2
- kdc.conf: default to listening for TCP clients, too (#248415)
Thu Jul 19 14:00:00 2007 Nalin Dahyabhai 1.6.2-1
- update to 1.6.2
- add \"buildrequires: texinfo-tex\" to get texi2pdf
Wed Jun 27 14:00:00 2007 Nalin Dahyabhai 1.6.1-8
- incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
and MITKRB5-SA-2007-005 (CVE-2007-2798)
Mon Jun 25 14:00:00 2007 Nalin Dahyabhai 1.6.1-7
- reintroduce missing %postun for the non-split_workstation case
Mon Jun 25 14:00:00 2007 Nalin Dahyabhai 1.6.1-6
- rebuild
Mon Jun 25 14:00:00 2007 Nalin Dahyabhai 1.6.1-5.1
- rebuild
Sun Jun 24 14:00:00 2007 Nalin Dahyabhai 1.6.1-5
- add missing pam-devel build requirement, force selinux-or-fail build
Sun Jun 24 14:00:00 2007 Nalin Dahyabhai 1.6.1-4
- rebuild
Sun Jun 24 14:00:00 2007 Nalin Dahyabhai 1.6.1-3
- label all files at creation-time according to the SELinux policy (#228157)
Fri Jun 22 14:00:00 2007 Nalin Dahyabhai
- perform PAM account / session management in krshd (#182195,#195922)
- perform PAM authentication and account / session management in ftpd
- perform PAM authentication, account / session management, and password-
changing in login.krb5 (#182195,#195922)
Fri Jun 22 14:00:00 2007 Nalin Dahyabhai
- preprocess kerberos.ldif into a format FDS will like better, and include
that as a doc file as well
Fri Jun 22 14:00:00 2007 Nalin Dahyabhai
- switch man pages to being generated with the right paths in them
- drop old, incomplete SELinux patch
- add patch from Greg Hudson to make srvtab routines report missing-file errors
at same point that keytab routines do (#241805)
Thu May 24 14:00:00 2007 Nalin Dahyabhai 1.6.1-2
- pull patch from svn to undo unintentional chattiness in ftp
- pull patch from svn to handle NULL krb5_get_init_creds_opt structures
better in a couple of places where they\'re expected
Wed May 23 14:00:00 2007 Nalin Dahyabhai 1.6.1-1
- update to 1.6.1
- drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
- drop patch for sendto bug in 1.6, fixed in 1.6.1
Fri May 18 14:00:00 2007 Nalin Dahyabhai
- kadmind.init: don\'t fail outright if the default principal database
isn\'t there if it looks like we might be using the kldap plugin
- kadmind.init: attempt to extract the key for the host-specific kadmin
service when we try to create the keytab
Wed May 16 14:00:00 2007 Nalin Dahyabhai 1.6-6
- omit dependent libraries from the krb5-config --libs output, as using
shared libraries (no more static libraries) makes them unnecessary and
they\'re not part of the libkrb5 interface (patch by Rex Dieter, #240220)
(strips out libkeyutils, libresolv, libdl)
Fri May 4 14:00:00 2007 Nalin Dahyabhai 1.6-5
- pull in keyutils as a build requirement to get the \"KEYRING:\" ccache type,
because we\'ve merged
Fri May 4 14:00:00 2007 Nalin Dahyabhai 1.6-4
- fix an uninitialized length value which could cause a crash when parsing
key data coming from a directory server
- correct a typo in the krb5.conf man page (\"ldap_server\"->\"ldap_servers\")
Fri Apr 13 14:00:00 2007 Nalin Dahyabhai
- move the default acl_file, dict_file, and admin_keytab settings to
the part of the default/example kdc.conf where they\'ll actually have
an effect (#236417)
Thu Apr 5 14:00:00 2007 Nalin Dahyabhai 1.5-24
- merge security fixes from RHSA-2007:0095
Tue Apr 3 14:00:00 2007 Nalin Dahyabhai 1.6-3
- add patch to correct unauthorized access via krb5-aware telnet
daemon (#229782, CVE-2007-0956)
- add patch to fix buffer overflow in krb5kdc and kadmind
(#231528, CVE-2007-0957)
- add patch to fix double-free in kadmind (#231537, CVE-2007-1216)
Thu Mar 22 13:00:00 2007 Nalin Dahyabhai
- back out buildrequires: keyutils-libs-devel for now
Thu Mar 22 13:00:00 2007 Nalin Dahyabhai 1.6-2
- add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
dragging keyutils-libs in as a dependency
Mon Mar 19 13:00:00 2007 Nalin Dahyabhai 1.5-23
- fix bug ID in changelog
Thu Mar 15 13:00:00 2007 Nalin Dahyabhai 1.5-22
* Thu Mar 15 2007 Nalin Dahyabhai 1.5-21
- add preliminary patch to fix buffer overflow in krb5kdc and kadmind
(#231528, CVE-2007-0957)
- add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)
Wed Feb 28 13:00:00 2007 Nalin Dahyabhai
- add patch to build semi-useful static libraries, but don\'t apply it unless
we need them
Tue Feb 27 13:00:00 2007 Nalin Dahyabhai - 1.5-20
- temporarily back out %post changes, fix for #143289 for security update
- add preliminary patch to correct unauthorized access via krb5-aware telnet
Mon Feb 19 13:00:00 2007 Nalin Dahyabhai
- make profile.d scriptlets mode 644 instead of 755 (part of #225974)
Tue Jan 30 13:00:00 2007 Nalin Dahyabhai 1.6-1
- clean up quoting of command-line arguments passed to the krsh/krlogin
wrapper scripts
Mon Jan 22 13:00:00 2007 Nalin Dahyabhai
- initial update to 1.6, pre-package-reorg
- move workstation daemons to a new subpackage (#81836, #216356, #217301), and
make the new subpackage require xinetd (#211885)
Mon Jan 22 13:00:00 2007 Nalin Dahyabhai - 1.5-18
- make use of install-info more failsafe (Ville Skyttä, #223704)
- preserve timestamps on shell scriptlets at %install-time
Tue Jan 16 13:00:00 2007 Nalin Dahyabhai - 1.5-17
- move to using pregenerated PDF docs to cure multilib conflicts (#222721)
Fri Jan 12 13:00:00 2007 Nalin Dahyabhai - 1.5-16
- update backport of the preauth module interface (part of #194654)
Tue Jan 9 13:00:00 2007 Nalin Dahyabhai - 1.5-14
- apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
- apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)
Wed Dec 20 13:00:00 2006 Nalin Dahyabhai - 1.5-12
- update backport of the preauth module interface
Mon Oct 30 13:00:00 2006 Nalin Dahyabhai
- update backport of the preauth module interface
- add proposed patches 4566, 4567
- add proposed edata reporting interface for KDC
- add temporary placeholder for module global context fixes
Mon Oct 23 14:00:00 2006 Nalin Dahyabhai - 1.5-11
- don\'t bail from the KDC init script if there\'s no database, it may be in
a different location than the default (fenlason)
- remove the [kdc] section from the default krb5.conf -- doesn\'t seem to have
been applicable for a while
Wed Oct 18 14:00:00 2006 Nalin Dahyabhai - 1.5-10
- rename krb5.sh and krb5.csh so that they don\'t overlap (#210623)
- way-late application of added error info in kadmind.init (#65853)
Wed Oct 18 14:00:00 2006 Nalin Dahyabhai - 1.5-9.pal_18695
- add backport of in-development preauth module interface (#208643)
Mon Oct 9 14:00:00 2006 Nalin Dahyabhai - 1.5-9
- provide docs in PDF format instead of as tex source (Enrico Scholz, #209943)
Wed Oct 4 14:00:00 2006 Nalin Dahyabhai - 1.5-8
- add missing shebang headers to krsh and krlogin wrapper scripts (#209238)
Wed Sep 6 14:00:00 2006 Nalin Dahyabhai - 1.5-7
- set SS_LIB at configure-time so that libss-using apps get working readline
support (#197044)
Fri Aug 18 14:00:00 2006 Nalin Dahyabhai - 1.5-6
- switch to the updated patch for MITKRB-SA-2006-001
Tue Aug 8 14:00:00 2006 Nalin Dahyabhai - 1.5-5
- apply patch to address MITKRB-SA-2006-001 (CVE-2006-3084)
Mon Aug 7 14:00:00 2006 Nalin Dahyabhai - 1.5-4
- ensure that the gssapi library\'s been initialized before walking the
internal mechanism list in gss_release_oid(), needed if called from
gss_release_name() right after a gss_import_name() (#198092)
Tue Jul 25 14:00:00 2006 Nalin Dahyabhai - 1.5-3
- rebuild
Tue Jul 25 14:00:00 2006 Nalin Dahyabhai - 1.5-2
- pull up latest revision of patch to reduce lockups in rsh/rshd
Mon Jul 17 14:00:00 2006 Nalin Dahyabhai - 1.5-1.2
- rebuild
Wed Jul 12 14:00:00 2006 Jesse Keating - 1.5-1.1
- rebuild
Thu Jul 6 14:00:00 2006 Nalin Dahyabhai 1.5-1
- build
Wed Jul 5 14:00:00 2006 Nalin Dahyabhai 1.5-0
- update to 1.5
Fri Jun 23 14:00:00 2006 Nalin Dahyabhai 1.4.3-9
- mark profile.d config files noreplace (Laurent Rineau, #196447)
Thu Jun 8 14:00:00 2006 Nalin Dahyabhai 1.4.3-8
- add buildprereq for autoconf
Mon May 22 14:00:00 2006 Nalin Dahyabhai 1.4.3-7
- further munge krb5-config so that \'libdir=/usr/lib\' is given even on 64-bit
architectures, to avoid multilib conflicts; other changes will conspire to
strip out the -L flag which uses this, so it should be harmless (#192692)
Fri Apr 28 14:00:00 2006 Nalin Dahyabhai 1.4.3-6
- adjust the patch which removes the use of rpath to also produce a
krb5-config which is okay in multilib environments (#190118)
- make the name-of-the-tempfile comment which compile_et adds to error code
headers always list the same file to avoid conflicts on multilib installations
- strip SIZEOF_LONG out of krb5.h so that it doesn\'t conflict on multilib boxes
- strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn\'t conflict on mulitlib
boxes
Fri Apr 14 14:00:00 2006 Stepan Kasal 1.4.3-5
- Fix formatting typo in kinit.1 (krb5-kinit-man-typo.patch)
Fri Feb 10 13:00:00 2006 Jesse Keating 1.4.3-4.1
- bump again for double-long bug on ppc(64)
Mon Feb 6 13:00:00 2006 Nalin Dahyabhai 1.4.3-4
- give a little bit more information to the user when kinit gets the catch-all
I/O error (#180175)
Thu Jan 19 13:00:00 2006 Nalin Dahyabhai 1.4.3-3
- rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
declared, such as with recent glibc when _GNU_SOURCE isn\'t being used
Thu Jan 19 13:00:00 2006 Matthias Clasen 1.4.3-2
- Use full paths in krb5.sh to avoid path lookups
Fri Dec 9 13:00:00 2005 Jesse Keating
- rebuilt
Thu Dec 1 13:00:00 2005 Nalin Dahyabhai
- login: don\'t truncate passwords before passing them into crypt(), in
case they\'re significant (#149476)
Thu Nov 17 13:00:00 2005 Nalin Dahyabhai 1.4.3-1
- update to 1.4.3
- make ksu setuid again (#137934, others)
Tue Sep 13 14:00:00 2005 Nalin Dahyabhai 1.4.2-4
- mark %{krb5prefix}/man so that files which are packaged within it are
flagged as %doc (#168163)
Tue Sep 6 14:00:00 2005 Nalin Dahyabhai 1.4.2-3
- add an xinetd configuration file for encryption-only telnetd, parallelling
the kshell/ekshell pair (#167535)
Wed Aug 31 14:00:00 2005 Nalin Dahyabhai 1.4.2-2
- change the default configured encryption type for KDC databases to the
compiled-in default of des3-hmac-sha1 (#57847)
Thu Aug 11 14:00:00 2005 Nalin Dahyabhai 1.4.2-1
- update to 1.4.2, incorporating the fixes for MIT-KRB5-SA-2005-002 and
MIT-KRB5-SA-2005-003
Wed Jun 29 14:00:00 2005 Nalin Dahyabhai 1.4.1-6
- rebuild
Wed Jun 29 14:00:00 2005 Nalin Dahyabhai 1.4.1-5
- fix telnet client environment variable disclosure the same way NetKit\'s
telnet client did (CAN-2005-0488) (#159305)
- keep apps which call krb5_principal_compare() or krb5_realm_compare() with
malformed or NULL principal structures from crashing outright (Thomas Biege)
(#161475)
Tue Jun 28 14:00:00 2005 Nalin Dahyabhai
- apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
(#157104)
- apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)
Fri Jun 24 14:00:00 2005 Nalin Dahyabhai 1.4.1-4
- fix double-close in keytab handling
- add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)
Fri May 13 14:00:00 2005 Nalin Dahyabhai 1.4.1-3
- prevent spurious EBADF in krshd when stdin is closed by the client while
the command is running (#151111)
Fri May 13 14:00:00 2005 Martin Stransky 1.4.1-2
- add deadlock patch, removed old patch
Fri May 6 14:00:00 2005 Nalin Dahyabhai 1.4.1-1
- update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
- when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
file for the service, pass it as an argument for the -r flag
Wed Mar 23 13:00:00 2005 Nalin Dahyabhai 1.4-3
- drop krshd patch for now
Thu Mar 17 13:00:00 2005 Nalin Dahyabhai
- add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
- add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)
Wed Mar 16 13:00:00 2005 Nalin Dahyabhai 1.4-2
- don\'t include into the telnet client when we\'re not using curses
Thu Feb 24 13:00:00 2005 Nalin Dahyabhai 1.4-1
- update to 1.4
- v1.4 kadmin client requires a v1.4 kadmind on the server, or use the \"-O\"
flag to specify that it should communicate with the server using the older
protocol
- new libkrb5support library
- v5passwdd and kadmind4 are gone
- versioned symbols
- pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
it on to krb5kdc
- pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
it on to kadmind
- pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
it on to krb524d
*instead of
* \"-m\"
- set \"forwardable\" in [libdefaults] in the default krb5.conf to match the
default setting which we supply for pam_krb5
- set a default of 24h for \"ticket_lifetime\" in [libdefaults], reflecting the
compiled-in default
Mon Dec 20 13:00:00 2004 Nalin Dahyabhai 1.3.6-3
- rebuild
Mon Dec 20 13:00:00 2004 Nalin Dahyabhai 1.3.6-2
- rebuild
Mon Dec 20 13:00:00 2004 Nalin Dahyabhai 1.3.6-1
- update to 1.3.6, which includes the previous fix
Mon Dec 20 13:00:00 2004 Nalin Dahyabhai 1.3.5-8
- apply fix from Tom Yu for MITKRB5-SA-2004-004 (CAN-2004-1189)
Fri Dec 17 13:00:00 2004 Martin Stransky 1.3.5-7
- fix deadlock during file transfer via rsync/krsh
- thanks goes to James Antill for hint
Fri Nov 26 13:00:00 2004 Nalin Dahyabhai 1.3.5-6
- rebuild
Mon Nov 22 13:00:00 2004 Nalin Dahyabhai 1.3.5-3
- fix predictable-tempfile-name bug in krb5-send-pr (CAN-2004-0971, #140036)
Tue Nov 16 13:00:00 2004 Nalin Dahyabhai
- silence compiler warning in kprop by using an in-memory ccache with a fixed
name instead of an on-disk ccache with a name generated by tmpnam()
Tue Nov 16 13:00:00 2004 Nalin Dahyabhai 1.3.5-2
- fix globbing patch port mode (#139075)
Mon Nov 1 13:00:00 2004 Nalin Dahyabhai 1.3.5-1
- fix segfault in telnet due to incorrect checking of gethostbyname_r result
codes (#129059)
Fri Oct 15 14:00:00 2004 Nalin Dahyabhai
- remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
supported keytypes in kdc.conf -- they produce exactly the same keys as
rc4-hmac:normal because rc4 string-to-key ignores salts
- nuke kdcrotate -- there are better ways to balance the load on KDCs, and
the SELinux policy for it would have been scary-looking
- update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003
Tue Aug 31 14:00:00 2004 Nalin Dahyabhai 1.3.4-7
- rebuild
Tue Aug 24 14:00:00 2004 Nalin Dahyabhai 1.3.4-6
- rebuild
Tue Aug 24 14:00:00 2004 Nalin Dahyabhai 1.3.4-5
- incorporate revised fixes from Tom Yu for CAN-2004-0642, CAN-2004-0644,
CAN-2004-0772
Mon Aug 23 14:00:00 2004 Nalin Dahyabhai 1.3.4-4
- rebuild
Mon Aug 23 14:00:00 2004 Nalin Dahyabhai 1.3.4-3
- incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
(MITKRB5-SA-2004-002, #130732)
- incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)
Tue Jul 27 14:00:00 2004 Nalin Dahyabhai 1.3.4-2
- fix indexing error in server sorting patch (#127336)
Tue Jun 15 14:00:00 2004 Elliot Lee
- rebuilt
Mon Jun 14 14:00:00 2004 Nalin Dahyabhai 1.3.4-0.1
- update to 1.3.4 final
Mon Jun 7 14:00:00 2004 Nalin Dahyabhai 1.3.4-0
- update to 1.3.4 beta1
- remove MITKRB5-SA-2004-001, included in 1.3.4
Mon Jun 7 14:00:00 2004 Nalin Dahyabhai 1.3.3-8
- rebuild
Fri Jun 4 14:00:00 2004 Nalin Dahyabhai 1.3.3-7
- rebuild
Fri Jun 4 14:00:00 2004 Nalin Dahyabhai 1.3.3-6
- apply updated patch from MITKRB5-SA-2004-001 (revision 2004-06-02)
Tue Jun 1 14:00:00 2004 Nalin Dahyabhai 1.3.3-5
- rebuild
Tue Jun 1 14:00:00 2004 Nalin Dahyabhai 1.3.3-4
- apply patch from MITKRB5-SA-2004-001 (#125001)
Wed May 12 14:00:00 2004 Thomas Woerner 1.3.3-3
- removed rpath
Thu Apr 15 14:00:00 2004 Nalin Dahyabhai 1.3.3-2
- re-enable large file support, fell out in 1.3-1
- patch rcp to use long long and %lld format specifiers when reporting file
sizes on large files
Tue Apr 13 14:00:00 2004 Nalin Dahyabhai 1.3.3-1
- update to 1.3.3
Wed Mar 10 13:00:00 2004 Nalin Dahyabhai 1.3.2-1
- update to 1.3.2
Mon Mar 8 13:00:00 2004 Nalin Dahyabhai 1.3.1-12
- rebuild
Tue Mar 2 13:00:00 2004 Elliot Lee 1.3.1-11.1
- rebuilt
Fri Feb 13 13:00:00 2004 Elliot Lee 1.3.1-11
- rebuilt
Mon Feb 9 13:00:00 2004 Nalin Dahyabhai 1.3.1-10
- catch krb4 send_to_kdc cases in kdc preference patch
Mon Feb 2 13:00:00 2004 Nalin Dahyabhai 1.3.1-9
- remove patch to set TERM in klogind which, combined with the upstream fix in
1.3.1, actually produces the bug now (#114762)
Mon Jan 19 13:00:00 2004 Nalin Dahyabhai 1.3.1-8
- when iterating over lists of interfaces which are \"up\" from getifaddrs(),
skip over those which have no address (#113347)
Mon Jan 12 13:00:00 2004 Nalin Dahyabhai
- prefer the kdc which last replied to a request when sending requests to kdcs
Mon Nov 24 13:00:00 2003 Nalin Dahyabhai 1.3.1-7
- fix combination of --with-netlib and --enable-dns (#82176)
Tue Nov 18 13:00:00 2003 Nalin Dahyabhai
- remove libdefault ticket_lifetime option from the default krb5.conf, it is
ignored by libkrb5
Thu Sep 25 14:00:00 2003 Nalin Dahyabhai 1.3.1-6
- fix bug in patch to make rlogind start login with a clean environment a la
netkit rlogin, spotted and fixed by Scott McClung
Tue Sep 23 14:00:00 2003 Nalin Dahyabhai 1.3.1-5
- include profile.d scriptlets in krb5-devel so that krb5-config will be in
the path if krb5-workstation isn\'t installed, reported by Kir Kolyshkin
Mon Sep 8 14:00:00 2003 Nalin Dahyabhai
- add more etypes (arcfour) to the default enctype list in kdc.conf
- don\'t apply previous patch, refused upstream
Fri Sep 5 14:00:00 2003 Nalin Dahyabhai 1.3.1-4
- fix 32/64-bit bug storing and retrieving the issue_date in v4 credentials
Wed Sep 3 14:00:00 2003 Dan Walsh 1.3.1-3
- Don\'t check for write access on /etc/krb5.conf if SELinux
Tue Aug 26 14:00:00 2003 Nalin Dahyabhai 1.3.1-2
- fixup some int/pointer varargs wackiness
Tue Aug 5 14:00:00 2003 Nalin Dahyabhai 1.3.1-1
- rebuild
Mon Aug 4 14:00:00 2003 Nalin Dahyabhai 1.3.1-0
- update to 1.3.1
Thu Jul 24 14:00:00 2003 Nalin Dahyabhai 1.3-2
- pull fix for non-compliant encoding of salt field in etype-info2 preauth
data from 1.3.1 beta 1, until 1.3.1 is released.
Mon Jul 21 14:00:00 2003 Nalin Dahyabhai 1.3-1
- update to 1.3
Mon Jul 7 14:00:00 2003 Nalin Dahyabhai 1.2.8-4
- correctly use stdargs
Wed Jun 18 14:00:00 2003 Nalin Dahyabhai 1.3-0.beta.4
- test update to 1.3 beta 4
- ditch statglue build option
- krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err
Wed Jun 4 14:00:00 2003 Elliot Lee
- rebuilt
Wed May 21 14:00:00 2003 Jeremy Katz 1.2.8-2
- gcc 3.3 doesn\'t implement varargs.h, include stdarg.h instead
Wed Apr 9 14:00:00 2003 Nalin Dahyabhai 1.2.8-1
- update to 1.2.8
Mon Mar 31 14:00:00 2003 Nalin Dahyabhai 1.2.7-14
- fix double-free of enc_part2 in krb524d
Fri Mar 21 13:00:00 2003 Nalin Dahyabhai 1.2.7-13
- update to latest patch kit for MITKRB5-SA-2003-004
Wed Mar 19 13:00:00 2003 Nalin Dahyabhai 1.2.7-12
- add patch included in MITKRB5-SA-2003-003 (CAN-2003-0028)
Mon Mar 17 13:00:00 2003 Nalin Dahyabhai 1.2.7-11
- add patches from patchkit from MITKRB5-SA-2003-004 (CAN-2003-0138 and
CAN-2003-0139)
Thu Mar 6 13:00:00 2003 Nalin Dahyabhai 1.2.7-10
- rebuild
Thu Mar 6 13:00:00 2003 Nalin Dahyabhai 1.2.7-9
- fix buffer underrun in unparsing certain principals (CAN-2003-0082)
Tue Feb 4 13:00:00 2003 Nalin Dahyabhai 1.2.7-8
- add patch to document the reject-bad-transited option in kdc.conf
Mon Feb 3 13:00:00 2003 Nalin Dahyabhai
- add patch to fix server-side crashes when principals have no
components (CAN-2003-0072)
Thu Jan 23 13:00:00 2003 Nalin Dahyabhai 1.2.7-7
- add patch from Mark Cox for exploitable bugs in ftp client
Wed Jan 22 13:00:00 2003 Tim Powers
- rebuilt
Wed Jan 15 13:00:00 2003 Nalin Dahyabhai 1.2.7-5
- use PICFLAGS when building code from the ktany patch
Thu Jan 9 13:00:00 2003 Bill Nottingham 1.2.7-4
- debloat
Tue Jan 7 13:00:00 2003 Jeremy Katz 1.2.7-3
- include .so.
* symlinks as well as .so.
*.
*
Mon Dec 9 13:00:00 2002 Jakub Jelinek 1.2.7-2
- always #include to access errno, never do it directly
- enable LFS on a bunch of other 32-bit arches
Wed Dec 4 13:00:00 2002 Nalin Dahyabhai
- increase the maximum name length allowed by kuserok() to the higher value
used in development versions
Mon Dec 2 13:00:00 2002 Nalin Dahyabhai
- install src/krb524/README as README.krb524 in the -servers package,
includes information about converting for AFS principals
Fri Nov 15 13:00:00 2002 Nalin Dahyabhai 1.2.7-1
- update to 1.2.7
- disable use of tcl
Mon Nov 11 13:00:00 2002 Nalin Dahyabhai
- update to 1.2.7-beta2 (internal only, not for release), dropping dnsparse
and kadmind4 fixes
Wed Oct 23 14:00:00 2002 Nalin Dahyabhai 1.2.6-5
- add patch for buffer overflow in kadmind4 (not used by default)
Fri Oct 11 14:00:00 2002 Nalin Dahyabhai 1.2.6-4
- drop a hunk from the dnsparse patch which is actually redundant (thanks to
Tom Yu)
Wed Oct 9 14:00:00 2002 Nalin Dahyabhai 1.2.6-3
- patch to handle truncated dns responses
Mon Oct 7 14:00:00 2002 Nalin Dahyabhai 1.2.6-2
- remove hashless key types from the default kdc.conf, they\'re not supposed to
be there, noted by Sam Hartman on krbdev
Fri Sep 27 14:00:00 2002 Nalin Dahyabhai 1.2.6-1
- update to 1.2.6
Fri Sep 13 14:00:00 2002 Nalin Dahyabhai 1.2.5-7
- use %{_lib} for the sake of multilib systems
Fri Aug 2 14:00:00 2002 Nalin Dahyabhai 1.2.5-6
- add patch from Tom Yu for exploitable bugs in rpc code used in kadmind
Tue Jul 23 14:00:00 2002 Nalin Dahyabhai 1.2.5-5
- fix bug in krb5.csh which would cause the path check to always succeed
Fri Jul 19 14:00:00 2002 Jakub Jelinek 1.2.5-4
- build even libdb.a with -fPIC and $RPM_OPT_FLAGS.
Fri Jun 21 14:00:00 2002 Tim Powers
- automated rebuild
Sun May 26 14:00:00 2002 Tim Powers
- automated rebuild
Wed May 1 14:00:00 2002 Nalin Dahyabhai 1.2.5-1
- update to 1.2.5
- disable statglue
Fri Mar 1 13:00:00 2002 Nalin Dahyabhai 1.2.4-1
- update to 1.2.4
Wed Feb 20 13:00:00 2002 Nalin Dahyabhai 1.2.3-5
- rebuild in new environment
- reenable statglue
Sat Jan 26 13:00:00 2002 Florian La Roche
- prereq chkconfig for the server subpackage
Wed Jan 16 13:00:00 2002 Nalin Dahyabhai 1.2.3-3
- build without -g3, which gives us large static libraries in -devel
Tue Jan 15 13:00:00 2002 Nalin Dahyabhai 1.2.3-2
- reintroduce ld.so.conf munging in the -libs %post
Thu Jan 10 13:00:00 2002 Nalin Dahyabhai 1.2.3-1
- rename the krb5 package back to krb5-libs; the previous rename caused
something of an uproar
- update to 1.2.3, which includes the FTP and telnetd fixes
- configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
the default behavior instead of enabling the feature (the feature is enabled
by --enable-dns, which we still use)
- reenable optimizations on Alpha
- support more encryption types in the default kdc.conf (heads-up from post
to comp.protocols.kerberos by Jason Heiss)
Fri Aug 3 14:00:00 2001 Nalin Dahyabhai 1.2.2-14
- rename the krb5-libs package to krb5 (naming a subpackage -libs when there
is no main package is silly)
- move defaults for PAM to the appdefaults section of krb5.conf -- this is
the area where the krb5_appdefault_
* functions look for settings)
- disable statglue (warning: breaks binary compatibility with previous
packages, but has to be broken at some point to work correctly with
unpatched versions built with newer versions of glibc)
Fri Aug 3 14:00:00 2001 Nalin Dahyabhai 1.2.2-13
- bump release number and rebuild
Wed Aug 1 14:00:00 2001 Nalin Dahyabhai
- add patch to fix telnetd vulnerability
Fri Jul 20 14:00:00 2001 Nalin Dahyabhai
- tweak statglue.c to fix stat/stat64 aliasing problems
- be cleaner in use of gcc to build shlibs
Wed Jul 11 14:00:00 2001 Nalin Dahyabhai
- use gcc to build shared libraries
Wed Jun 27 14:00:00 2001 Nalin Dahyabhai
- add patch to support \"ANY\" keytab type (i.e.,
\"default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab\"
patch from Gerald Britton, #42551)
- build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
- patch ftpd to use long long and %lld format specifiers to support the SIZE
command on large files (also #30697)
- don\'t use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
- implement reload in krb5kdc and kadmind init scripts (#41911)
- lose the krb5server init script (not using it any more)
Sun Jun 24 14:00:00 2001 Elliot Lee
- Bump release + rebuild.
Tue May 29 14:00:00 2001 Nalin Dahyabhai
- pass some structures by address instead of on the stack in krb5kdc
Tue May 22 14:00:00 2001 Nalin Dahyabhai
- rebuild in new environment
Thu Apr 26 14:00:00 2001 Nalin Dahyabhai
- add patch from Tom Yu to fix ftpd overflows (#37731)
Wed Apr 18 14:00:00 2001 Than Ngo
- disable optimizations on the alpha again
Fri Mar 30 14:00:00 2001 Nalin Dahyabhai
- add in glue code to make sure that libkrb5 continues to provide a
weak copy of stat()
Thu Mar 15 13:00:00 2001 Nalin Dahyabhai
- build alpha with -O0 for now
Thu Mar 8 13:00:00 2001 Nalin Dahyabhai
- fix the kpropd init script
Mon Mar 5 13:00:00 2001 Nalin Dahyabhai
- update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
- re-enable optimization on Alpha
Thu Feb 8 13:00:00 2001 Nalin Dahyabhai
- build alpha with -O0 for now
- own /var/kerberos
Tue Feb 6 13:00:00 2001 Nalin Dahyabhai
- own the directories which are created for each package (#26342)
Tue Jan 23 13:00:00 2001 Nalin Dahyabhai
- gettextize init scripts
Fri Jan 19 13:00:00 2001 Nalin Dahyabhai
- add some comments to the ksu patches for the curious
- re-enable optimization on alphas
Mon Jan 15 13:00:00 2001 Nalin Dahyabhai
- fix krb5-send-pr (#18932) and move it from -server to -workstation
- buildprereq libtermcap-devel
- temporariliy disable optimization on alphas
- gettextize init scripts
Tue Dec 5 13:00:00 2000 Nalin Dahyabhai
- force -fPIC
Fri Dec 1 13:00:00 2000 Nalin Dahyabhai
- rebuild in new environment
Tue Oct 31 13:00:00 2000 Nalin Dahyabhai
- add bison as a BuildPrereq (#20091)
Mon Oct 30 13:00:00 2000 Nalin Dahyabhai
- change /usr/dict/words to /usr/share/dict/words in default kdc.conf (#20000)
Thu Oct 5 14:00:00 2000 Nalin Dahyabhai
- apply kpasswd bug fixes from David Wragg
Wed Oct 4 14:00:00 2000 Nalin Dahyabhai | |
