File not found: krb5-1.7-MITKRB5-SA-2010-004.dif

MIT Kerberos5 Implementation--Libraries

Edit Package krb5

Kerberos V5 is a trusted-third-party network authentication system,
which can improve your network's security by eliminating the insecure
practice of clear text passwords.

Refresh
Refresh
Source Files
Filename Size Changed
0001-ksu-pam-integration.patch 0000022537 22 KB
0002-krb5-1.9-manpaths.patch 0000000976 976 Bytes
0003-Adjust-build-configuration.patch 0000003503 3.42 KB
0004-krb5-1.6.3-gssapi_improve_errormessages.patch 0000001058 1.03 KB
0005-krb5-1.6.3-ktutil-manpage.patch 0000001043 1.02 KB
0006-krb5-1.12-api.patch 0000001455 1.42 KB
0007-SELinux-integration.patch 0000032806 32 KB
0008-krb5-1.9-debuginfo.patch 0000001537 1.5 KB
0009-Fix-three-memory-leaks.patch 0000006751 6.59 KB
_multibuild 0000000059 59 Bytes
baselibs.conf 0000000094 94 Bytes
krb5-1.21.3.tar.gz 0009136145 8.71 MB
krb5-1.21.3.tar.gz.asc 0000000833 833 Bytes
krb5-mini.changes 0000087333 85.3 KB
krb5-mini.spec 0000012848 12.5 KB
krb5-rpmlintrc 0000000434 434 Bytes
krb5.changes 0000092420 90.3 KB
krb5.keyring 0000003900 3.81 KB
krb5.spec 0000018141 17.7 KB
krb5.tmpfiles 0000000452 452 Bytes
ksu-pam.d 0000000329 329 Bytes
vendor-files.tar.bz2 0000182932 179 KB
Latest Revision
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1185764 from Samuel Cabrero's avatar Samuel Cabrero (scabrero) (revision 174)
- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
    * CVE-2024-37370, bsc#1227186
    * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch
- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772
- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
    * CVE-2024-37370, bsc#1227186
    * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch
Comments 2

Samu Voutilainen's avatar

Hi,

You may want to update krb5-server.logrotate file inside vendor-files.tar.bz2 to reload using systemd instead of /etc/init.d/ scripts. At least on my setup I have no legacy init.d scripts available.

For what it’s worth, this also applies to Leap 15.1 and probably 15.2.


Samuel Cabrero's avatar

Hi,

it is pending for approval https://build.opensuse.org/request/show/812027

The updates for Leap will follow soon.

Thanks

openSUSE Build Service is sponsored by