f5676fd New upstream version (1.21.2)

Authored and Committed by jrische 9 months ago
18 files changed. 743 lines added. 386 lines removed.
.gitignore
file modified
+2 -0
0001-Revert-Don-t-issue-session-keys-with-deprecated-enct.patch
file added
+309
0002-downstream-ksu-pam-integration.patch0001-downstream-ksu-pam-integration.patch
file renamed
+2 -2
0003-downstream-SELinux-integration.patch0002-downstream-SELinux-integration.patch
file renamed
+3 -3
0004-downstream-fix-debuginfo-with-y.tab.c.patch0003-downstream-fix-debuginfo-with-y.tab.c.patch
file renamed
+2 -2
0005-downstream-Remove-3des-support.patch0004-downstream-Remove-3des-support.patch
file renamed
+32 -59
0006-downstream-FIPS-with-PRNG-and-RADIUS-and-MD4.patch0005-downstream-FIPS-with-PRNG-and-RADIUS-and-MD4.patch
file renamed
+4 -4
0007-downstream-Allow-krad-UDP-TCP-localhost-connection-w.patch0006-downstream-Allow-krad-UDP-TCP-localhost-connection-w.patch
file renamed
+2 -2
0008-downstream-Make-tests-compatible-with-sssd_krb5_loca.patch0007-downstream-Make-tests-compatible-with-sssd_krb5_loca.patch
file renamed
+2 -2
0009-downstream-Include-missing-OpenSSL-FIPS-header.patch0008-downstream-Include-missing-OpenSSL-FIPS-header.patch
file renamed
+2 -2
0010-downstream-Do-not-set-root-as-ksu-file-owner.patch0009-downstream-Do-not-set-root-as-ksu-file-owner.patch
file renamed
+2 -2
0011-downstream-Allow-KRB5KDF-MD5-and-MD4-in-FIPS-mode.patch0010-downstream-Allow-KRB5KDF-MD5-and-MD4-in-FIPS-mode.patch
file renamed
+2 -2
0012-downstream-Allow-to-set-PAC-ticket-signature-as-opti.patch0011-downstream-Allow-to-set-PAC-ticket-signature-as-opti.patch
file renamed
+4 -4
0013-downstream-Make-PKINIT-CMS-SHA-1-signature-verificat.patch0012-downstream-Make-PKINIT-CMS-SHA-1-signature-verificat.patch
file renamed
+2 -2
0014-Enable-PKINIT-if-at-least-one-group-is-available.patch0013-Enable-PKINIT-if-at-least-one-group-is-available.patch
file renamed
+2 -2
0015-Replace-ssl.wrap_socket-for-tests.patch
file added
+64
krb5.spec
file modified
+305 -296
sources
file modified
+2 -2
    New upstream version (1.21.2)
    
    - Fix double-free in KDC TGS processing (CVE-2023-39975)
      Resolves: rhbz#2229113
    - Make tests compatible with Python 3.12
      Resolves: rhbz#2224013
    
    Signed-off-by: Julien Rische <jrische@redhat.com>
    
        
file modified
+2 -0
0002-downstream-ksu-pam-integration.patch 0001-downstream-ksu-pam-integration.patch
file renamed
+2 -2
0003-downstream-SELinux-integration.patch 0002-downstream-SELinux-integration.patch
file renamed
+3 -3
0004-downstream-fix-debuginfo-with-y.tab.c.patch 0003-downstream-fix-debuginfo-with-y.tab.c.patch
file renamed
+2 -2
0005-downstream-Remove-3des-support.patch 0004-downstream-Remove-3des-support.patch
file renamed
+32 -59
0006-downstream-FIPS-with-PRNG-and-RADIUS-and-MD4.patch 0005-downstream-FIPS-with-PRNG-and-RADIUS-and-MD4.patch
file renamed
+4 -4
0007-downstream-Allow-krad-UDP-TCP-localhost-connection-w.patch 0006-downstream-Allow-krad-UDP-TCP-localhost-connection-w.patch
file renamed
+2 -2
0008-downstream-Make-tests-compatible-with-sssd_krb5_loca.patch 0007-downstream-Make-tests-compatible-with-sssd_krb5_loca.patch
file renamed
+2 -2
0009-downstream-Include-missing-OpenSSL-FIPS-header.patch 0008-downstream-Include-missing-OpenSSL-FIPS-header.patch
file renamed
+2 -2
0010-downstream-Do-not-set-root-as-ksu-file-owner.patch 0009-downstream-Do-not-set-root-as-ksu-file-owner.patch
file renamed
+2 -2
0011-downstream-Allow-KRB5KDF-MD5-and-MD4-in-FIPS-mode.patch 0010-downstream-Allow-KRB5KDF-MD5-and-MD4-in-FIPS-mode.patch
file renamed
+2 -2
0012-downstream-Allow-to-set-PAC-ticket-signature-as-opti.patch 0011-downstream-Allow-to-set-PAC-ticket-signature-as-opti.patch
file renamed
+4 -4
0013-downstream-Make-PKINIT-CMS-SHA-1-signature-verificat.patch 0012-downstream-Make-PKINIT-CMS-SHA-1-signature-verificat.patch
file renamed
+2 -2
0014-Enable-PKINIT-if-at-least-one-group-is-available.patch 0013-Enable-PKINIT-if-at-least-one-group-is-available.patch
file renamed
+2 -2
file modified
+305 -296
file modified
+2 -2