From 3631c963d5d69d7e27c885208f268cfbc9f424eca662652f4411469344dbed8d Mon Sep 17 00:00:00 2001 From: OBS User autobuild Date: Tue, 25 May 2010 08:35:35 +0000 Subject: [PATCH] Accepting request 40365 from network checked in (request 40365) OBS-URL: https://build.opensuse.org/request/show/40365 OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=24 --- krb5-MITKRB5-SA-2010-005.dif | 18 ------------------ krb5-mini.changes | 6 ------ krb5-mini.spec | 4 +--- krb5.changes | 6 ------ krb5.spec | 2 -- 5 files changed, 1 insertion(+), 35 deletions(-) delete mode 100644 krb5-MITKRB5-SA-2010-005.dif diff --git a/krb5-MITKRB5-SA-2010-005.dif b/krb5-MITKRB5-SA-2010-005.dif deleted file mode 100644 index 1cceed7..0000000 --- a/krb5-MITKRB5-SA-2010-005.dif +++ /dev/null @@ -1,18 +0,0 @@ -Index: krb5-1.8.1/src/lib/gssapi/krb5/accept_sec_context.c -=================================================================== ---- krb5-1.8.1.orig/src/lib/gssapi/krb5/accept_sec_context.c -+++ krb5-1.8.1/src/lib/gssapi/krb5/accept_sec_context.c -@@ -647,6 +647,13 @@ kg_accept_krb5(minor_status, context_han - goto fail; - } - -+ if (authdat->checksum == NULL) { -+ /* missing checksum counts as "inappropriate type" */ -+ code = KRB5KRB_AP_ERR_INAPP_CKSUM; -+ major_status = GSS_S_FAILURE; -+ goto fail; -+ } -+ - /* verify that the checksum is correct */ - - /* diff --git a/krb5-mini.changes b/krb5-mini.changes index 6fc48ec..32d8015 100644 --- a/krb5-mini.changes +++ b/krb5-mini.changes @@ -1,9 +1,3 @@ -------------------------------------------------------------------- -Wed May 19 14:27:19 CEST 2010 - mc@suse.de - -- fix GSS-API library null pointer dereference - CVE-2010-1321, MITKRB5-SA-2010-005 (bnc#596826) - ------------------------------------------------------------------- Wed Apr 14 11:36:32 CEST 2010 - mc@suse.de diff --git a/krb5-mini.spec b/krb5-mini.spec index 36b5478..6162c53 100644 --- a/krb5-mini.spec +++ b/krb5-mini.spec @@ -1,5 +1,5 @@ # -# spec file for package krb5 (Version 1.8.1) +# spec file for package krb5-mini (Version 1.8.1) # # Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. # @@ -56,7 +56,6 @@ Patch6: krb5-1.6.3-kpasswd_tcp.patch Patch7: krb5-1.6.3-ktutil-manpage.dif Patch8: krb5-1.6.3-fix-ipv6-query.dif Patch9: krb5-1.7-MITKRB5-SA-2010-004.dif -Patch10: krb5-MITKRB5-SA-2010-005.dif BuildRoot: %{_tmppath}/%{name}-%{version}-build PreReq: mktemp, grep, /bin/touch, coreutils PreReq: %insserv_prereq %fillup_prereq @@ -205,7 +204,6 @@ Authors: %patch7 -p1 %patch8 -p1 %patch9 -p1 -%patch10 -p1 # Rename the man pages so that they'll get generated correctly. pushd src cat %{SOURCE10} | while read manpage ; do diff --git a/krb5.changes b/krb5.changes index 6fc48ec..32d8015 100644 --- a/krb5.changes +++ b/krb5.changes @@ -1,9 +1,3 @@ -------------------------------------------------------------------- -Wed May 19 14:27:19 CEST 2010 - mc@suse.de - -- fix GSS-API library null pointer dereference - CVE-2010-1321, MITKRB5-SA-2010-005 (bnc#596826) - ------------------------------------------------------------------- Wed Apr 14 11:36:32 CEST 2010 - mc@suse.de diff --git a/krb5.spec b/krb5.spec index 376f339..b0de780 100644 --- a/krb5.spec +++ b/krb5.spec @@ -56,7 +56,6 @@ Patch6: krb5-1.6.3-kpasswd_tcp.patch Patch7: krb5-1.6.3-ktutil-manpage.dif Patch8: krb5-1.6.3-fix-ipv6-query.dif Patch9: krb5-1.7-MITKRB5-SA-2010-004.dif -Patch10: krb5-MITKRB5-SA-2010-005.dif BuildRoot: %{_tmppath}/%{name}-%{version}-build PreReq: mktemp, grep, /bin/touch, coreutils PreReq: %insserv_prereq %fillup_prereq @@ -205,7 +204,6 @@ Authors: %patch7 -p1 %patch8 -p1 %patch9 -p1 -%patch10 -p1 # Rename the man pages so that they'll get generated correctly. pushd src cat %{SOURCE10} | while read manpage ; do