diff --git a/0009-Fix-null-dereference-qualifying-short-hostnames.patch b/0009-Fix-null-dereference-qualifying-short-hostnames.patch deleted file mode 100644 index 486cae6..0000000 --- a/0009-Fix-null-dereference-qualifying-short-hostnames.patch +++ /dev/null @@ -1,43 +0,0 @@ -From 96d0ee0760a1c7cf735d04fbddf095a4c01ef190 Mon Sep 17 00:00:00 2001 -From: Greg Hudson -Date: Tue, 3 Mar 2020 12:27:02 -0500 -Subject: [PATCH] Fix null dereference qualifying short hostnames - -Fix the dnsglue.c PRIMARY_DOMAIN macro not to call strdup() with a -null pointer if no DNS search path is configured. - -ticket: 8881 -tags: pullup -target_version: 1.18-next - -(cherry picked from commit cd82bf377e7fad2409c76bf8b241920692f34fda) ---- - src/lib/krb5/os/dnsglue.c | 5 +++-- - 1 file changed, 3 insertions(+), 2 deletions(-) - -diff --git a/src/lib/krb5/os/dnsglue.c b/src/lib/krb5/os/dnsglue.c -index e35ca9d76..0cd213fdd 100644 ---- a/src/lib/krb5/os/dnsglue.c -+++ b/src/lib/krb5/os/dnsglue.c -@@ -91,7 +91,7 @@ static int initparse(struct krb5int_dns_state *); - #define DECLARE_HANDLE(h) struct __res_state h - #define INIT_HANDLE(h) (memset(&h, 0, sizeof(h)), res_ninit(&h) == 0) - #define SEARCH(h, n, c, t, a, l) res_nsearch(&h, n, c, t, a, l) --#define PRIMARY_DOMAIN(h) strdup(h.dnsrch[0]) -+#define PRIMARY_DOMAIN(h) ((h.dnsrch[0] == NULL) ? NULL : strdup(h.dnsrch[0])) - #if HAVE_RES_NDESTROY - #define DESTROY_HANDLE(h) res_ndestroy(&h) - #else -@@ -104,7 +104,8 @@ static int initparse(struct krb5int_dns_state *); - #define DECLARE_HANDLE(h) - #define INIT_HANDLE(h) (res_init() == 0) - #define SEARCH(h, n, c, t, a, l) res_search(n, c, t, a, l) --#define PRIMARY_DOMAIN(h) strdup(_res.defdname) -+#define PRIMARY_DOMAIN(h) \ -+ ((_res.defdname == NULL) ? NULL : strdup(_res.defdname)) - #define DESTROY_HANDLE(h) - - #endif --- -2.25.1 - diff --git a/krb5-1.18.1.tar.gz b/krb5-1.18.1.tar.gz new file mode 100644 index 0000000..5360c6c --- /dev/null +++ b/krb5-1.18.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:02a4e700f10936f937cd1a4c303cab8687a11abecc6107bd4b706b9329cd5400 +size 8711772 diff --git a/krb5-1.18.1.tar.gz.asc b/krb5-1.18.1.tar.gz.asc new file mode 100644 index 0000000..505d2b9 --- /dev/null +++ b/krb5-1.18.1.tar.gz.asc @@ -0,0 +1,17 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1 + +iQIcBAABAgAGBQJelH+/AAoJEAy6CFdfg3LfsAgQAKqIHkJsMCnK84eMIycowsLL +5liDzi8VVO4Cl3mYCT3P+tbdukOgemiAoa3VUN8kvSTD+jYJ3phg1YieLWsoPIG5 +ouidxZNdG3sc6i4hdqviKJkLV/UR1uFO4UTHvYdFrFjK2GTM7NOfBfyNW7BvQkIS +K7qri9um8E8U3OdUpwZE/DcovqWr4u7PY6etqfOolxBK91jgUq4f02MpMoO8FSu1 +2MqmHcjAZfVlSEx5xioplWBcL+1m9Z2ZT4Edwk6F/CwGKLPWDhP8Ks7iLwUemtuS +nDlBs81ADGpYjE7j/j4YFfUTgICqmThukAXCEWYFT2y624BkO1a2HzHJP1857mU+ +UjD8Z5Zb5/pSYvXxizV4/Yulq+f4CyFC8Gvp/8W0W8zB1LpzYzrnID8lu5jq2WFE +MpPYxlyWPbMKqFYf3mhv+BnHTNKsEKSU373plWj4ruNEd5kEYwTecxFq4rhMgL1E +1bp//5uZGAmVBSLzvdnzsNUiQOyHR4DGEf2oNSSVAKt2aZy8kI0ifTZj40rSIrUa +6BDzuW5Qb83T6FkJPDT+KP9Y1YMqCZuD4+WlWodOQTn+q+wDYR6SUaECu7kDlS1Q +ZFr8vW53u5mZBIvotbiy/1qYLHucW4IXVGjOHf+hZ7/r9RMYJIZEvL/6It8F+i7v +6XrAjAbGqs8Cvndogqp4 +=VRAC +-----END PGP SIGNATURE----- diff --git a/krb5-1.18.tar.gz b/krb5-1.18.tar.gz deleted file mode 100644 index d15e9b4..0000000 --- a/krb5-1.18.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:73913934d711dcf9d5f5605803578edb44b9a11786df3c1b2711f4e1752f2c88 -size 8706395 diff --git a/krb5-1.18.tar.gz.asc b/krb5-1.18.tar.gz.asc deleted file mode 100644 index fe90030..0000000 --- a/krb5-1.18.tar.gz.asc +++ /dev/null @@ -1,17 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v1 - -iQIcBAABAgAGBQJeREfJAAoJEAy6CFdfg3Lf0sQP/3CCIesW9hqBxbcy9E7RYpfD -P/MPZ7WpCfOlvgzo3BuDvQGp1WTV+53RP0RPvttSeFnI0clEd6Er4oYE9MmcLjc7 -URyNttUT/vIDbUDHR7ac6zdHM313Z3h30vKL8aEtClg3BhIOI4GJUilEaBeRgEY8 -KYxGvH5M4mmBYDSkELayp/a1El8QEia1sivSerBs/zZQjqUoogmQ0f1pqZUx0nTC -A+GowpYniz6FEkIRpGVRFuOFbFEuHWMLU33OSxpvHAf/0x1D5wkRJ4EHFFcYhrLu -T1FvOQGSbUVUXi81bzOhwQOVzZdPk0rc5Q8SLqTefcjNjTIJ+MAxCV1qxv8xpM/X -VtuyrtJLrDTcqa2hqhHfMVQUcRwSnmotic81GJ1BFowMZCNRgyaCWP+K7KI7OCLF -ajPmG+Yr/eDao3JavCME6OdLLS/ARTK/JtR1YOS+kPeaBKjkVtXM9y6kGsUuzXIR -8cyAvlBAIKiFrLWhV44emOEDhzxS9bbgTGQEEQNP6blDjMcNe5PpbZ1opDv9F3kc -Ga4h0/XZmYrijn0NvzG1szBD8j+vatHlQVaQtw7t7Rt+jMF9TtOTgQy8MD+h3hSx -1J8GDFlXHGbYdnRnBZWGHeJ1fZaqTpY4D4erDfOHXjH4kCm3Y7Zlaj6eDb0NMzkr -umorBypPT9mnce2aS43h -=jxUB ------END PGP SIGNATURE----- diff --git a/krb5-mini.changes b/krb5-mini.changes index 9267f69..fcd28e5 100644 --- a/krb5-mini.changes +++ b/krb5-mini.changes @@ -1,3 +1,21 @@ +------------------------------------------------------------------- +Mon May 4 09:24:21 UTC 2020 - Samuel Cabrero + +- Upgrade to 1.18.1 + * Fix a crash when qualifying short hostnames when the system has + no primary DNS domain. + * Fix a regression when an application imports "service@" as a GSS + host-based name for its acceptor credential handle. + * Fix KDC enforcement of auth indicators when they are modified by + the KDB module. + * Fix removal of require_auth string attributes when the LDAP KDB + module is used. + * Fix a compile error when building with musl libc on Linux. + * Fix a compile error when building with gcc 4.x. + * Change the KDC constrained delegation precedence order for consistency + with Windows KDCs. +- Remove 0009-Fix-null-dereference-qualifying-short-hostnames.patch + ------------------------------------------------------------------- Wed Apr 29 08:06:31 UTC 2020 - Dominique Leuenberger diff --git a/krb5-mini.spec b/krb5-mini.spec index 8573b16..8dba7af 100644 --- a/krb5-mini.spec +++ b/krb5-mini.spec @@ -24,7 +24,7 @@ %define _fillupdir %{_localstatedir}/adm/fillup-templates %endif Name: krb5-mini -Version: 1.18 +Version: 1.18.1 Release: 0 Summary: MIT Kerberos5 implementation and libraries with minimal dependencies License: MIT @@ -44,7 +44,6 @@ Patch5: 0005-krb5-1.6.3-ktutil-manpage.patch Patch6: 0006-krb5-1.12-api.patch Patch7: 0007-SELinux-integration.patch Patch8: 0008-krb5-1.9-debuginfo.patch -Patch9: 0009-Fix-null-dereference-qualifying-short-hostnames.patch BuildRequires: autoconf BuildRequires: bison BuildRequires: keyutils diff --git a/krb5.changes b/krb5.changes index 301dda5..b185ad7 100644 --- a/krb5.changes +++ b/krb5.changes @@ -1,3 +1,21 @@ +------------------------------------------------------------------- +Mon May 4 09:24:21 UTC 2020 - Samuel Cabrero + +- Upgrade to 1.18.1 + * Fix a crash when qualifying short hostnames when the system has + no primary DNS domain. + * Fix a regression when an application imports "service@" as a GSS + host-based name for its acceptor credential handle. + * Fix KDC enforcement of auth indicators when they are modified by + the KDB module. + * Fix removal of require_auth string attributes when the LDAP KDB + module is used. + * Fix a compile error when building with musl libc on Linux. + * Fix a compile error when building with gcc 4.x. + * Change the KDC constrained delegation precedence order for consistency + with Windows KDCs. +- Remove 0009-Fix-null-dereference-qualifying-short-hostnames.patch + ------------------------------------------------------------------- Wed Apr 29 08:04:32 UTC 2020 - Dominique Leuenberger diff --git a/krb5.spec b/krb5.spec index 536bfa6..da27c74 100644 --- a/krb5.spec +++ b/krb5.spec @@ -21,7 +21,7 @@ %define _fillupdir %{_localstatedir}/adm/fillup-templates %endif Name: krb5 -Version: 1.18 +Version: 1.18.1 Release: 0 Summary: MIT Kerberos5 implementation License: MIT @@ -42,7 +42,6 @@ Patch5: 0005-krb5-1.6.3-ktutil-manpage.patch Patch6: 0006-krb5-1.12-api.patch Patch7: 0007-SELinux-integration.patch Patch8: 0008-krb5-1.9-debuginfo.patch -Patch9: 0009-Fix-null-dereference-qualifying-short-hostnames.patch BuildRequires: autoconf BuildRequires: bison BuildRequires: keyutils