1ea059ff9cAccepting request 501409 from network
Dominique Leuenberger
2017-06-15 09:19:29 +0000
1d1e68ea09- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355 krb5: denial of service in krb5_read_message - bug#912002 owned by varkoly@suse.com: VUL-0 CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423: krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token - bug#910458 owned by varkoly@suse.com: VUL-1 CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries - bug#928978 owned by varkoly@suse.com: VUL-0 CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass - bug#910457 owned by varkoly@suse.com: VUL-1 CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy name as a password policy name - bug#991088 owned by hguo@suse.com: VUL-1 CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted - bug#992853 owned by hguo@suse.com: krb5: bogus prerequires - [fate#320326](https://fate.suse.com/320326) - bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference from \cite
Howard Guo
2017-06-06 13:39:13 +0000
5f40336666Accepting request 486278 from network
Dominique Leuenberger
2017-04-29 08:47:05 +0000
7566d42d93Accepting request 486033 from home:kukuk:branches:networkMarcus Meissner2017-04-07 06:22:42 +0000
d7f7cda6ffAccepting request 478948 from network
Yuchen Lin
2017-03-29 11:20:32 +0000
4205fb7129Accepting request 478048 from home:stroeder:branches:network
Howard Guo
2017-03-13 08:48:12 +0000
a0dc13d8eeAccepting request 405706 from home:fcrozat:branches:network
Ismail Dönmez
2016-07-02 07:38:07 +0000
f423fdf030------------------------------------------------------------------ - Remove source file ccapi/common/win/OldCC/autolock.hxx that is not needed and does not carry an acceptable license. (bsc#968111) ------------------------------------------------------------------ - Remove source file ccapi/common/win/OldCC/autolock.hxx that is not needed and does not carry an acceptable license. (bsc#968111)
Howard Guo
2016-06-13 12:41:05 +0000
4c53150c83Accepting request 392051 from network
Dominique Leuenberger
2016-05-02 08:43:55 +0000
f73cb2534dAccepting request 392049 from home:stroeder:branches:network
Ismail Dönmez
2016-04-29 08:00:03 +0000
4817f926f7Accepting request 382782 from network
Dominique Leuenberger
2016-04-06 09:50:34 +0000
9f56699b06- Upgrade from 1.14 to 1.14.1: * Remove expired patches: 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch krbdev.mit.edu-8301.patch * Replace source archives: krb5-1.14.tar.gz -> krb5-1.14.1.tar.gz krb5-1.14.tar.gz.asc -> krb5-1.14.1.tar.gz.asc * Adjust line numbers in: krb5-fix_interposer.patch
Howard Guo
2016-04-01 07:50:43 +0000
1a837358cbAccepting request 378714 from network
Dominique Leuenberger
2016-03-29 07:53:21 +0000
fcaedabd68add credits to patch
Howard Guo
2016-03-23 13:33:17 +0000
83e7befa84Accepting request 378678 from home:guohouzuo:branches:network
Howard Guo
2016-03-23 13:16:38 +0000
9edf221a87Accepting request 360110 from network
Dominique Leuenberger
2016-02-25 20:52:19 +0000
f8868d141aAccepting request 359629 from home:guohouzuo:branches:networkMarcus Meissner2016-02-18 11:50:30 +0000
802c8f6effAccepting request 357310 from network
Dominique Leuenberger
2016-02-12 10:20:54 +0000
e206af5319Accepting request 357309 from home:guohouzuo:branches:network
Ismail Dönmez
2016-02-02 08:54:49 +0000
7d356ebc8eAccepting request 353069 from network
Dominique Leuenberger
2016-01-13 21:43:58 +0000
b9ca4cd2ca- Add two patches from Fedora, fixing two crashes: * krb5-fix_interposer.patch * krb5-mechglue_inqure_attrs.patch
Ismail Dönmez
2016-01-11 12:39:08 +0000
8103840325* Add client support for the Kerberos Cache Manager protocol. If the host * Add support for doing unlocked database dumps for the DB2 KDC back end, * krb5-1.7-doublelog.patchMarcus Meissner2015-05-22 09:22:57 +0000
e1506944cc- buffer overrun in kadmind with LDAP backend CVE-2014-4345 (bnc#891082) krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
Christian Kornacker
2014-08-11 11:01:01 +0000
be8887f4d7Accepting request 243586 from network
Stephan Kulow
2014-08-06 09:42:15 +0000
f2e853070c- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697) krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch Fix null deref in SPNEGO acceptor [CVE-2014-4344] krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
Christian Kornacker
2014-07-28 09:58:41 +0000
ec41724c92Accepting request 241736 from network
Stephan Kulow
2014-07-27 06:25:40 +0000
3ac7b19a80Accepting request 241590 from home:posophe:branches:network
Christian Kornacker
2014-07-21 12:42:45 +0000
3f646c425e- denial of service flaws when handling RFC 1964 tokens (bnc#886016) krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch - start krb5kdc after slapd (bnc#886102) - obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674) similar functionality is provided by krb5-plugin-preauth-pkinit
Christian Kornacker
2014-07-15 08:18:37 +0000
76cd6119cfAccepting request 222761 from network
Stephan Kulow
2014-02-19 10:39:16 +0000
5f3b47a9fc- don't deliver SysV init files to systemd distributions
Christian Kornacker
2014-02-18 17:40:34 +0000
8dcb675a57Accepting request 215374 from network
Stephan Kulow
2014-01-29 06:15:26 +0000
869a682f2d- update to version 1.12.1 * Make KDC log service principal names more consistently during some error conditions, instead of "<unknown server>" * Fix several bugs related to building AES-NI support on less common configurations * Fix several bugs related to keyring credential caches - upstream obsoletes: krb5-1.12-copy_context.patch krb5-1.12-enable-NX.patch krb5-1.12-pic-aes-ni.patch krb5-master-no-malloc0.patch krb5-master-ignore-empty-unnecessary-final-token.patch
Christian Kornacker
2014-01-21 15:06:23 +0000
79d8b3686aAccepting request 214093 from network
Stephan Kulow
2014-01-17 15:40:41 +0000
673bd84f01extended changelog for Factory
Christian Kornacker
2014-01-16 13:19:42 +0000
03254981cbAccepting request 213903 from home:ckornacker:branches:network
Michael Calmer
2014-01-15 14:14:20 +0000
10b96098f3Accepting request 210105 from home:neilbrown:branches:networkMarcus Meissner2013-12-10 09:48:22 +0000
a487b00b55Accepting request 208686 from network
Stephan Kulow
2013-11-28 06:27:28 +0000
3e0687cac7Accepting request 207746 from home:ckornacker:branches:networkMarcus Meissner2013-11-20 12:36:50 +0000
36be5ba0feAccepting request 180770 from network
Stephan Kulow
2013-06-25 07:22:45 +0000
6ca487dd65- install and enable systemd service files also in -mini package
Michael Calmer
2013-06-24 16:22:21 +0000
071b9cc1bdAccepting request 180374 from home:elvigia:branches:network
Michael Calmer
2013-06-21 12:43:11 +0000
59b4e7e8a9Accepting request 178349 from network
Stephan Kulow
2013-06-11 04:34:35 +0000
62c3aa1413fix mini spec and changes
Michael Calmer
2013-06-09 14:26:32 +0000
eaff141ce0- update to version 1.11.3 - Fix a UDP ping-pong vulnerability in the kpasswd (password changing) service. [CVE-2002-2443] - Improve interoperability with some Windows native PKINIT clients. - install translation files - remove outdated configure options
Michael Calmer
2013-06-09 14:19:29 +0000
7fb60032c6Accepting request 176881 from network
Stephan Kulow
2013-06-05 09:53:15 +0000
0e86d6c70fAccepting request 174393 from network
Stephan Kulow
2013-05-03 11:37:02 +0000
be7c32c3a0- let krb5-mini conflict with all main packages
Michael Calmer
2013-05-03 07:44:44 +0000
d494e8c485- add conflicts between krb5-mini and krb5-server
Michael Calmer
2013-05-02 14:44:19 +0000
bb6c75aaa8package new man page
Michael Calmer
2013-04-28 15:33:40 +0000
703aff2fdd- update to version 1.11.2 * Incremental propagation could erroneously act as if a slave's database were current after the slave received a full dump that failed to load. * gss_import_sec_context incorrectly set internal state that identifies whether an imported context is from an interposer mechanism or from the underlying mechanism. - upstream fix obsolete krb5-lookup_etypes-leak.patch
Michael Calmer
2013-04-28 15:20:13 +0000
afa52a69f9Accepting request 162619 from network
Stephan Kulow
2013-04-05 07:26:17 +0000
fe67473a6d- add conflicts between krb5-mini-devel and krb5-devel
Michael Calmer
2013-04-04 13:10:58 +0000
91ad28ede3- add conflicts between krb5-mini and krb5 and krb5-client
Michael Calmer
2013-04-02 15:33:04 +0000