rpm/krb5
SHA256
1
0
Fork 0
forked from pool/krb5
Code Pull Requests Activity

Accepting request 40365 from network

Browse Source 
Copy from network/krb5 based on submit request 40365 from user mcalmer

OBS-URL: https://build.opensuse.org/request/show/40365
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/krb5?expand=0&rev=51
This commit is contained in:
OBS User autobuild 2010-05-25 08:35:36 +00:00 committed by Git OBS Bridge
commit 57a4966c89
6 changed files with 37 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
krb5-MITKRB5-SA-2010-005.dif Normal file
View File

@ -0,0 +1,18 @@
Index: krb5-1.8.1/src/lib/gssapi/krb5/accept_sec_context.c
===================================================================
--- krb5-1.8.1.orig/src/lib/gssapi/krb5/accept_sec_context.c
+++ krb5-1.8.1/src/lib/gssapi/krb5/accept_sec_context.c
@@ -647,6 +647,13 @@ kg_accept_krb5(minor_status, context_han
goto fail;
}
+ if (authdat->checksum == NULL) {
+ /* missing checksum counts as "inappropriate type" */
+ code = KRB5KRB_AP_ERR_INAPP_CKSUM;
+ major_status = GSS_S_FAILURE;
+ goto fail;
+ }
+
/* verify that the checksum is correct */
/*

2
krb5-doc.spec
View File

@ -21,7 +21,7 @@
Name: krb5-doc
BuildRequires: ghostscript-library latex2html texlive
Version: 1.8.1
Release: 2
Release: 3
%define srcRoot krb5-1.8.1
Summary: MIT Kerberos5 Implementation--Documentation
License: MIT License (or similar)

6
krb5-mini.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Wed May 19 14:27:19 CEST 2010 - mc@suse.de
- fix GSS-API library null pointer dereference
CVE-2010-1321, MITKRB5-SA-2010-005 (bnc#596826)
-------------------------------------------------------------------
Wed Apr 14 11:36:32 CEST 2010 - mc@suse.de

4
krb5-mini.spec
View File

@ -28,7 +28,7 @@ Url: http://web.mit.edu/kerberos/www/
BuildRequires: bison libcom_err-devel ncurses-devel
BuildRequires: keyutils keyutils-devel
Version: 1.8.1
Release: 2
Release: 3
%if ! 0%{?build_mini}
BuildRequires: libopenssl-devel openldap2-devel
# bug437293
@ -56,6 +56,7 @@ Patch6: krb5-1.6.3-kpasswd_tcp.patch
Patch7: krb5-1.6.3-ktutil-manpage.dif
Patch8: krb5-1.6.3-fix-ipv6-query.dif
Patch9: krb5-1.7-MITKRB5-SA-2010-004.dif
Patch10: krb5-MITKRB5-SA-2010-005.dif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: mktemp, grep, /bin/touch, coreutils
PreReq: %insserv_prereq %fillup_prereq
@ -204,6 +205,7 @@ Authors:
%patch7 -p1
%patch8 -p1
%patch9 -p1
%patch10 -p1
# Rename the man pages so that they'll get generated correctly.
pushd src
cat %{SOURCE10} | while read manpage ; do

6
krb5.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Wed May 19 14:27:19 CEST 2010 - mc@suse.de
- fix GSS-API library null pointer dereference
CVE-2010-1321, MITKRB5-SA-2010-005 (bnc#596826)
-------------------------------------------------------------------
Wed Apr 14 11:36:32 CEST 2010 - mc@suse.de

4
krb5.spec
View File

@ -28,7 +28,7 @@ Url: http://web.mit.edu/kerberos/www/
BuildRequires: bison libcom_err-devel ncurses-devel
BuildRequires: keyutils keyutils-devel
Version: 1.8.1
Release: 2
Release: 3
%if ! 0%{?build_mini}
BuildRequires: libopenssl-devel openldap2-devel
# bug437293
@ -56,6 +56,7 @@ Patch6: krb5-1.6.3-kpasswd_tcp.patch
Patch7: krb5-1.6.3-ktutil-manpage.dif
Patch8: krb5-1.6.3-fix-ipv6-query.dif
Patch9: krb5-1.7-MITKRB5-SA-2010-004.dif
Patch10: krb5-MITKRB5-SA-2010-005.dif
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: mktemp, grep, /bin/touch, coreutils
PreReq: %insserv_prereq %fillup_prereq
@ -204,6 +205,7 @@ Authors:
%patch7 -p1
%patch8 -p1
%patch9 -p1
%patch10 -p1
# Rename the man pages so that they'll get generated correctly.
pushd src
cat %{SOURCE10} | while read manpage ; do