Commit Graph

  • da0f7e993b Accepting request 1334448 from network factory Ana Guerrero 2026-02-24 14:37:51 +00:00
  • 9fd065daf9 - Update to 1.22.2 * Fix a SPNEGO packet parsing bug which could cause GSS mechanism negotiation failure. - Fix building with glibc 2.43; (bsc#1257257); Add patch 0010-Fix-strchr-conformance-to-C23.patch Samuel Cabrero 2026-02-23 10:04:14 +00:00
  • dc361a18fe Accepting request 1330408 from network Ana Guerrero 2026-02-04 20:01:00 +00:00
  • 087b5fa41f Accepting request 1328893 from home:npower:branches:network Samuel Cabrero 2026-02-02 12:13:27 +00:00
  • 8b32daee32 Remove unused old file 0010-CVE-2025-24528.patch slfo-main Noel Power 2026-01-26 15:26:03 +00:00
  • 059debc8f0 Remove old unused file (from previous version) Noel Power 2026-01-26 14:44:47 +00:00
  • 796c8f1350 Update version to 1.22.1 (submitting also to network/krb5) Noel Power 2026-01-22 14:46:06 +00:00
  • dc9e724c19 Accepting request 1321564 from network Ana Guerrero 2025-12-09 11:45:47 +00:00
  • 50516cad9d Accepting request 1320128 from home:scabrero:branches:network Dirk Mueller 2025-12-08 11:46:47 +00:00
  • 0d56425bc9 Accepting request 1293371 from network Ana Guerrero 2025-07-17 15:17:37 +00:00
  • 0bd0c5c224 Accepting request 1289991 from home:schubi2 Peter Varkoly 2025-07-15 09:55:08 +00:00
  • f14e3cc06f Accepting request 1271359 from network Ana Guerrero 2025-04-23 13:18:10 +00:00
  • b0da844498 Accepting request 1271200 from home:hsk17:branches:openSUSE:Factory:Staging:Gcc7 Marcus Meissner 2025-04-22 09:10:07 +00:00
  • 7e63d3b09e Accepting request 1243471 from network slfo-1.2 Ana Guerrero 2025-02-06 21:02:16 +00:00
  • 58028352ab Accepting request 1243471 from network Ana Guerrero 2025-02-06 21:02:16 +00:00
  • 0ad6437d0b - Prevent overflow when calculating ulog block size. An authenticated attacker can cause kadmind to write beyond the end of the mapped region for the iprop log file, likely causing a process crash; (CVE-2025-24528); (bsc#1236619). - Add patch 0010-CVE-2025-24528.patch Dirk Mueller 2025-02-05 16:20:16 +00:00
  • 295f0aa2b2 Accepting request 1241313 from home:scabrero:branches:network Dirk Mueller 2025-02-05 16:20:16 +00:00
  • 3ee57d14de Accepting request 1185764 from network Ana Guerrero 2024-07-08 17:06:50 +00:00
  • b0388a20f4 Accepting request 1185764 from network Ana Guerrero 2024-07-08 17:06:50 +00:00
  • 193f91051e - Update to 1.21.3 * Fix vulnerabilities in GSS message token handling: * CVE-2024-37370, bsc#1227186 * CVE-2024-37371, bsc#1227187 * Fix a potential bad pointer free in krb5_cccol_have_contents() * Fix a memory leak in the macOS ccache type - Update patch 0009-Fix-three-memory-leaks.patch Dirk Mueller 2024-07-04 07:20:48 +00:00
  • f27c7892d6 Accepting request 1184896 from home:scabrero:branches:network Dirk Mueller 2024-07-04 07:20:48 +00:00
  • 09c6d1fd49 Accepting request 1175448 from network Ana Guerrero 2024-05-21 16:34:17 +00:00
  • 6e2b17ae67 Accepting request 1175448 from network Ana Guerrero 2024-05-21 16:34:17 +00:00
  • 5d6e2bca14 Accepting request 1174873 from home:scabrero:branches:network Samuel Cabrero 2024-05-21 07:32:21 +00:00
  • f05c3795bf Accepting request 1174873 from home:scabrero:branches:network Samuel Cabrero 2024-05-21 07:32:21 +00:00
  • b85624a3ad Accepting request 1173900 from network Ana Guerrero 2024-05-15 19:25:47 +00:00
  • 0959d1f2d2 Accepting request 1173900 from network Ana Guerrero 2024-05-15 19:25:47 +00:00
  • 0f79103832 Accepting request 1173687 from home:gladiac:branches:network Samuel Cabrero 2024-05-14 07:54:34 +00:00
  • c18272040b Accepting request 1173687 from home:gladiac:branches:network Samuel Cabrero 2024-05-14 07:54:34 +00:00
  • ec33d02bf2 Accepting request 1171363 from network Ana Guerrero 2024-05-02 21:46:50 +00:00
  • b60245a7d2 Accepting request 1171363 from network Ana Guerrero 2024-05-02 21:46:50 +00:00
  • 6402def7df Accepting request 1171347 from home:kukuk:cleanup Samuel Cabrero 2024-05-02 13:10:43 +00:00
  • 0efe12eee6 Accepting request 1171347 from home:kukuk:cleanup Samuel Cabrero 2024-05-02 13:10:43 +00:00
  • fd2ab2030e Accepting request 1169845 from home:scabrero:branches:network Dirk Mueller 2024-05-01 05:54:37 +00:00
  • 34eb3603a2 Accepting request 1169845 from home:scabrero:branches:network Dirk Mueller 2024-05-01 05:54:37 +00:00
  • 06437f46c4 Accepting request 1156860 from network Ana Guerrero 2024-04-04 20:24:00 +00:00
  • 3b56b9009e Accepting request 1156860 from network Ana Guerrero 2024-04-04 20:24:00 +00:00
  • 39ade0e594 Accepting request 1153219 from home:pmonrealgonzalez:branches:network Samuel Cabrero 2024-03-11 07:49:33 +00:00
  • fa4ab7b339 Accepting request 1153219 from home:pmonrealgonzalez:branches:network Samuel Cabrero 2024-03-11 07:49:33 +00:00
  • 0303b6cb4c Accepting request 1134351 from network Ana Guerrero 2023-12-21 22:37:52 +00:00
  • 312e61556c Accepting request 1134351 from network Ana Guerrero 2023-12-21 22:37:52 +00:00
  • 12dcc60b0b - update to 1.21.2 (bsc#1218211, CVE-2023-39975): * Fix double-free in KDC TGS processing [CVE-2023-39975]. - update to 1.21.1 (CVE-2023-36054): with Windows KDCs. Dirk Mueller 2023-12-20 23:21:24 +00:00
  • 4426104a84 - update to 1.21.2 (bsc#1218211, CVE-2023-39975): * Fix double-free in KDC TGS processing [CVE-2023-39975]. - update to 1.21.1 (CVE-2023-36054): with Windows KDCs. Dirk Mueller 2023-12-20 23:21:24 +00:00
  • 0f8352fed9 Accepting request 1114991 from network Ana Guerrero 2023-10-05 18:02:35 +00:00
  • 6bf75e5dbb Accepting request 1114991 from network Ana Guerrero 2023-10-05 18:02:35 +00:00
  • 157057f8f8 Accepting request 1114983 from home:dimstar:Factory Samuel Cabrero 2023-10-03 12:17:40 +00:00
  • c77b1e477d Accepting request 1114983 from home:dimstar:Factory Samuel Cabrero 2023-10-03 12:17:40 +00:00
  • 01a27b5e5c Accepting request 1098841 from network Ana Guerrero 2023-07-17 17:22:54 +00:00
  • 3495417f04 Accepting request 1098841 from network Ana Guerrero 2023-07-17 17:22:54 +00:00
  • 36feefeaf6 - update to 1.121.1 (CVE-2023-36054): * Fix potential uninitialized pointer free in kadm5 XDR parsing [CVE-2023-36054]. * Added a credential cache type providing compatibility with the macOS 11 native credential cache. * libkadm5 will use the provided krb5_context object to read configuration values, instead of creating its own. * Added an interface to retrieve the ticket session key from a GSS context. * The KDC will no longer issue tickets with RC4 or triple-DES session keys unless explicitly configured with the new allow_rc4 or allow_des3 variables respectively. * The KDC will assume that all services can handle aes256-sha1 session keys unless the service principal has a session_enctypes string attribute. * Support for PAC full KDC checksums has been added to mitigate an S4U2Proxy privilege escalation attack. * The PKINIT client will advertise a more modern set of supported CMS algorithms. * Removed unused code in libkrb5, libkrb5support, and the PKINIT module. * Modernized the KDC code for processing TGS requests, the code for encrypting and decrypting key data, the PAC handling code, and the GSS library packet parsing and composition code. * Improved the test framework's detection of memory errors in daemon processes when used with asan. Dirk Mueller 2023-07-15 18:25:31 +00:00
  • ddc533e05b - update to 1.121.1 (CVE-2023-36054): * Fix potential uninitialized pointer free in kadm5 XDR parsing [CVE-2023-36054]. * Added a credential cache type providing compatibility with the macOS 11 native credential cache. * libkadm5 will use the provided krb5_context object to read configuration values, instead of creating its own. * Added an interface to retrieve the ticket session key from a GSS context. * The KDC will no longer issue tickets with RC4 or triple-DES session keys unless explicitly configured with the new allow_rc4 or allow_des3 variables respectively. * The KDC will assume that all services can handle aes256-sha1 session keys unless the service principal has a session_enctypes string attribute. * Support for PAC full KDC checksums has been added to mitigate an S4U2Proxy privilege escalation attack. * The PKINIT client will advertise a more modern set of supported CMS algorithms. * Removed unused code in libkrb5, libkrb5support, and the PKINIT module. * Modernized the KDC code for processing TGS requests, the code for encrypting and decrypting key data, the PAC handling code, and the GSS library packet parsing and composition code. * Improved the test framework's detection of memory errors in daemon processes when used with asan. Dirk Mueller 2023-07-15 18:25:31 +00:00
  • 4a71926b1b Accepting request 1084720 from network Dominique Leuenberger 2023-05-05 13:57:07 +00:00
  • 72c75b5915 Accepting request 1084720 from network Dominique Leuenberger 2023-05-05 13:57:07 +00:00
  • 9b19498eb9 Accepting request 1084716 from home:fcrozat:branches:network Dirk Mueller 2023-05-04 13:49:47 +00:00
  • 153e613fe7 Accepting request 1084716 from home:fcrozat:branches:network Dirk Mueller 2023-05-04 13:49:47 +00:00
  • e1286c714b Accepting request 1074019 from network Dominique Leuenberger 2023-04-01 19:13:15 +00:00
  • 568cf45a3a Accepting request 1074019 from network Dominique Leuenberger 2023-04-01 19:13:15 +00:00
  • bed174ccde Accepting request 1073940 from home:dimstar:Factory Samuel Cabrero 2023-03-23 17:15:10 +00:00
  • defe642025 Accepting request 1073940 from home:dimstar:Factory Samuel Cabrero 2023-03-23 17:15:10 +00:00
  • cde206b112 Accepting request 1069660 from network Dominique Leuenberger 2023-03-07 15:48:24 +00:00
  • 0cdb430f95 Accepting request 1069660 from network Dominique Leuenberger 2023-03-07 15:48:24 +00:00
  • 2d89800a45 Accepting request 1069134 from home:scabrero:bsc1208887 Dirk Mueller 2023-03-06 14:30:02 +00:00
  • b20663f691 Accepting request 1069134 from home:scabrero:bsc1208887 Dirk Mueller 2023-03-06 14:30:02 +00:00
  • 12c583dafc Accepting request 1069137 from network Dominique Leuenberger 2023-03-05 19:07:51 +00:00
  • 36c3697305 Accepting request 1069137 from network Dominique Leuenberger 2023-03-05 19:07:51 +00:00
  • ae967cda93 Accepting request 1045519 from home:schubi2:pam_usr_etc Samuel Cabrero 2023-03-03 10:03:46 +00:00
  • 92bd526339 Accepting request 1045519 from home:schubi2:pam_usr_etc Samuel Cabrero 2023-03-03 10:03:46 +00:00
  • 040abea7ab Accepting request 1042851 from network Dominique Leuenberger 2022-12-16 16:50:43 +00:00
  • 182567aa89 Accepting request 1042851 from network Dominique Leuenberger 2022-12-16 16:50:43 +00:00
  • 83fc4d39c0 Accepting request 1042600 from home:scabrero:branches:network Marcus Meissner 2022-12-14 09:47:16 +00:00
  • 4effb4d3d3 Accepting request 1042600 from home:scabrero:branches:network Marcus Meissner 2022-12-14 09:47:16 +00:00
  • b5b0a704c9 Accepting request 1036481 from network Dominique Leuenberger 2022-11-18 14:42:33 +00:00
  • a12e1a505e Accepting request 1036481 from network Dominique Leuenberger 2022-11-18 14:42:33 +00:00
  • 6580e8c91a Accepting request 1036182 from home:scabrero:branches:network Dirk Mueller 2022-11-17 16:22:59 +00:00
  • 3f2ff6bed8 Accepting request 1036182 from home:scabrero:branches:network Dirk Mueller 2022-11-17 16:22:59 +00:00
  • a6457936b4 Accepting request 981266 from network Dominique Leuenberger 2022-06-18 20:05:50 +00:00
  • 940fc6d15b Accepting request 981266 from network Dominique Leuenberger 2022-06-18 20:05:50 +00:00
  • 40f0f666d9 Accepting request 980314 from home:scabrero:branches:network Dirk Mueller 2022-06-02 08:10:43 +00:00
  • 0bc5c214f5 Accepting request 980314 from home:scabrero:branches:network Dirk Mueller 2022-06-02 08:10:43 +00:00
  • 7383de009b Accepting request 979732 from home:dirkmueller:Factory Samuel Cabrero 2022-05-31 11:34:39 +00:00
  • 913d6d7781 Accepting request 979732 from home:dirkmueller:Factory Samuel Cabrero 2022-05-31 11:34:39 +00:00
  • 5bc3270864 Accepting request 970776 from network Dominique Leuenberger 2022-04-23 17:44:51 +00:00
  • b52582017d Accepting request 970776 from network Dominique Leuenberger 2022-04-23 17:44:51 +00:00
  • ff3493d16b Accepting request 967999 from home:dirkmueller:Factory Marcus Meissner 2022-04-19 12:10:56 +00:00
  • ebc5784a7d Accepting request 967999 from home:dirkmueller:Factory Marcus Meissner 2022-04-19 12:10:56 +00:00
  • 75d2ffca36 Accepting request 949613 from network Dominique Leuenberger 2022-02-07 22:36:47 +00:00
  • 835704dab9 Accepting request 949613 from network Dominique Leuenberger 2022-02-07 22:36:47 +00:00
  • e6222c3074 Accepting request 949610 from home:scabrero:branches:network Samuel Cabrero 2022-01-28 09:04:21 +00:00
  • 9a1164f3ef Accepting request 949610 from home:scabrero:branches:network Samuel Cabrero 2022-01-28 09:04:21 +00:00
  • 1bc05687c3 Accepting request 949537 from home:dmulder:Bug1109830 Samuel Cabrero 2022-01-28 08:48:41 +00:00
  • cfdc077d12 Accepting request 949537 from home:dmulder:Bug1109830 Samuel Cabrero 2022-01-28 08:48:41 +00:00
  • 76bd4abcdd Accepting request 922420 from network Dominique Leuenberger 2021-09-30 21:43:26 +00:00
  • b50150f4e5 Accepting request 922420 from network Dominique Leuenberger 2021-09-30 21:43:26 +00:00
  • 10dc124f2d Accepting request 921724 from home:scabrero:branches:network Samuel Cabrero 2021-09-30 16:39:57 +00:00
  • cb375e32fa Accepting request 921724 from home:scabrero:branches:network Samuel Cabrero 2021-09-30 16:39:57 +00:00
  • 0c7c29efce Accepting request 917690 from network Dominique Leuenberger 2021-09-12 18:09:33 +00:00
  • 37590fa3d2 Accepting request 917690 from network Dominique Leuenberger 2021-09-12 18:09:33 +00:00
  • cba0a3d8f7 Accepting request 915042 from home:scabrero:branches:network Samuel Cabrero 2021-09-09 09:25:27 +00:00
  • dbf7a50339 Accepting request 915042 from home:scabrero:branches:network Samuel Cabrero 2021-09-09 09:25:27 +00:00
  • b8e090719d Accepting request 910805 from network Richard Brown 2021-08-18 06:55:06 +00:00