pool/krb5
SHA256
3
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 38408 from network

Browse Source 
checked in (request 38408)

OBS-URL: https://build.opensuse.org/request/show/38408
OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=22
This commit is contained in:
OBS User autobuild 2010-04-23 17:17:37 +00:00 committed by Git OBS Bridge
parent 26f8bba482
commit 8eb1b656d3
6 changed files with 34 additions and 70 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
krb5-1.7-MITKRB5-SA-2010-004.dif
View File

@ -1,20 +0,0 @@
Index: krb5-1.8.1/src/kdc/do_tgs_req.c
===================================================================
--- krb5-1.8.1.orig/src/kdc/do_tgs_req.c
+++ krb5-1.8.1/src/kdc/do_tgs_req.c
@@ -543,6 +543,7 @@ tgt_again:
to the caller */
ticket_reply = *(header_ticket);
enc_tkt_reply = *(header_ticket->enc_part2);
+ enc_tkt_reply.authorization_data = NULL;
clear(enc_tkt_reply.flags, TKT_FLG_INVALID);
}
@@ -554,6 +555,7 @@ tgt_again:
to the caller */
ticket_reply = *(header_ticket);
enc_tkt_reply = *(header_ticket->enc_part2);
+ enc_tkt_reply.authorization_data = NULL;
old_life = enc_tkt_reply.times.endtime - enc_tkt_reply.times.starttime;

2
krb5-doc.spec
View File

@ -21,7 +21,7 @@
Name: krb5-doc Name: krb5-doc
BuildRequires: ghostscript-library latex2html texlive BuildRequires: ghostscript-library latex2html texlive
Version: 1.8.1 Version: 1.8.1
Release: 2 Release: 1
%define srcRoot krb5-1.8.1 %define srcRoot krb5-1.8.1
Summary: MIT Kerberos5 Implementation--Documentation Summary: MIT Kerberos5 Implementation--Documentation
License: MIT License (or similar) License: MIT License (or similar)

6
krb5-mini.changes
View File

@ -1,9 +1,3 @@
-------------------------------------------------------------------
Wed Apr 14 11:36:32 CEST 2010 - mc@suse.de
- fix a double free vulnerability in the KDC
CVE-2010-1320, MITKRB5-SA-2010-004 (bnc#596002)
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Apr 9 12:43:44 CEST 2010 - mc@suse.de Fri Apr 9 12:43:44 CEST 2010 - mc@suse.de

36
krb5-mini.spec
View File

@ -1,5 +1,5 @@
# #
# spec file for package krb5 (Version 1.8.1) # spec file for package krb5-mini (Version 1.8.1)
# #
# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. # Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
# #
@ -28,7 +28,7 @@ Url: http://web.mit.edu/kerberos/www/
BuildRequires: bison libcom_err-devel ncurses-devel BuildRequires: bison libcom_err-devel ncurses-devel
BuildRequires: keyutils keyutils-devel BuildRequires: keyutils keyutils-devel
Version: 1.8.1 Version: 1.8.1
Release: 2 Release: 1
%if ! 0%{?build_mini} %if ! 0%{?build_mini}
BuildRequires: libopenssl-devel openldap2-devel BuildRequires: libopenssl-devel openldap2-devel
# bug437293 # bug437293
@ -47,15 +47,14 @@ Source1: vendor-files.tar.bz2
Source2: baselibs.conf Source2: baselibs.conf
Source5: krb5-%{version}-rpmlintrc Source5: krb5-%{version}-rpmlintrc
Source10: krb5-1.7-manpaths.txt Source10: krb5-1.7-manpaths.txt
Patch1: krb5-1.6.1-compile_pie.dif Patch2: krb5-1.6.1-compile_pie.dif
Patch2: krb5-1.6.3-kprop-use-mkstemp.dif Patch20: krb5-1.6.3-kprop-use-mkstemp.dif
Patch3: krb5-1.7-manpaths.dif Patch30: krb5-1.7-manpaths.dif
Patch4: krb5-1.4.3-enospc.dif Patch32: krb5-1.4.3-enospc.dif
Patch5: krb5-1.6.3-gssapi_improve_errormessages.dif Patch34: krb5-1.6.3-gssapi_improve_errormessages.dif
Patch6: krb5-1.6.3-kpasswd_tcp.patch Patch41: krb5-1.6.3-kpasswd_tcp.patch
Patch7: krb5-1.6.3-ktutil-manpage.dif Patch44: krb5-1.6.3-ktutil-manpage.dif
Patch8: krb5-1.6.3-fix-ipv6-query.dif Patch46: krb5-1.6.3-fix-ipv6-query.dif
Patch9: krb5-1.7-MITKRB5-SA-2010-004.dif
BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: mktemp, grep, /bin/touch, coreutils PreReq: mktemp, grep, /bin/touch, coreutils
PreReq: %insserv_prereq %fillup_prereq PreReq: %insserv_prereq %fillup_prereq
@ -195,15 +194,14 @@ Authors:
%prep %prep
%setup -q -n %{srcRoot} %setup -q -n %{srcRoot}
%setup -a 1 -T -D -n %{srcRoot} %setup -a 1 -T -D -n %{srcRoot}
%patch1
%patch2 %patch2
%patch3 -p1 %patch20
%patch4 -p1 %patch30 -p1
%patch5 -p1 %patch32 -p1
%patch6 %patch34 -p1
%patch7 -p1 %patch41
%patch8 -p1 %patch44 -p1
%patch9 -p1 %patch46 -p1
# Rename the man pages so that they'll get generated correctly. # Rename the man pages so that they'll get generated correctly.
pushd src pushd src
cat %{SOURCE10} | while read manpage ; do cat %{SOURCE10} | while read manpage ; do

6
krb5.changes
View File

@ -1,9 +1,3 @@
-------------------------------------------------------------------
Wed Apr 14 11:36:32 CEST 2010 - mc@suse.de
- fix a double free vulnerability in the KDC
CVE-2010-1320, MITKRB5-SA-2010-004 (bnc#596002)
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Apr 9 12:43:44 CEST 2010 - mc@suse.de Fri Apr 9 12:43:44 CEST 2010 - mc@suse.de

34
krb5.spec
View File

@ -28,7 +28,7 @@ Url: http://web.mit.edu/kerberos/www/
BuildRequires: bison libcom_err-devel ncurses-devel BuildRequires: bison libcom_err-devel ncurses-devel
BuildRequires: keyutils keyutils-devel BuildRequires: keyutils keyutils-devel
Version: 1.8.1 Version: 1.8.1
Release: 2 Release: 1
%if ! 0%{?build_mini} %if ! 0%{?build_mini}
BuildRequires: libopenssl-devel openldap2-devel BuildRequires: libopenssl-devel openldap2-devel
# bug437293 # bug437293
@ -47,15 +47,14 @@ Source1: vendor-files.tar.bz2
Source2: baselibs.conf Source2: baselibs.conf
Source5: krb5-%{version}-rpmlintrc Source5: krb5-%{version}-rpmlintrc
Source10: krb5-1.7-manpaths.txt Source10: krb5-1.7-manpaths.txt
Patch1: krb5-1.6.1-compile_pie.dif Patch2: krb5-1.6.1-compile_pie.dif
Patch2: krb5-1.6.3-kprop-use-mkstemp.dif Patch20: krb5-1.6.3-kprop-use-mkstemp.dif
Patch3: krb5-1.7-manpaths.dif Patch30: krb5-1.7-manpaths.dif
Patch4: krb5-1.4.3-enospc.dif Patch32: krb5-1.4.3-enospc.dif
Patch5: krb5-1.6.3-gssapi_improve_errormessages.dif Patch34: krb5-1.6.3-gssapi_improve_errormessages.dif
Patch6: krb5-1.6.3-kpasswd_tcp.patch Patch41: krb5-1.6.3-kpasswd_tcp.patch
Patch7: krb5-1.6.3-ktutil-manpage.dif Patch44: krb5-1.6.3-ktutil-manpage.dif
Patch8: krb5-1.6.3-fix-ipv6-query.dif Patch46: krb5-1.6.3-fix-ipv6-query.dif
Patch9: krb5-1.7-MITKRB5-SA-2010-004.dif
BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: mktemp, grep, /bin/touch, coreutils PreReq: mktemp, grep, /bin/touch, coreutils
PreReq: %insserv_prereq %fillup_prereq PreReq: %insserv_prereq %fillup_prereq
@ -195,15 +194,14 @@ Authors:
%prep %prep
%setup -q -n %{srcRoot} %setup -q -n %{srcRoot}
%setup -a 1 -T -D -n %{srcRoot} %setup -a 1 -T -D -n %{srcRoot}
%patch1
%patch2 %patch2
%patch3 -p1 %patch20
%patch4 -p1 %patch30 -p1
%patch5 -p1 %patch32 -p1
%patch6 %patch34 -p1
%patch7 -p1 %patch41
%patch8 -p1 %patch44 -p1
%patch9 -p1 %patch46 -p1
# Rename the man pages so that they'll get generated correctly. # Rename the man pages so that they'll get generated correctly.
pushd src pushd src
cat %{SOURCE10} | while read manpage ; do cat %{SOURCE10} | while read manpage ; do