The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c
in kadmind in MIT Kerberos 5 (aka krb5) before 1.13 sends old keys in a
response to a -randkey -keepold request, which allows remote authentic-
ated users to forge tickets by leveraging administrative access.
This back-ported patch fixes CVE-2014-5351.
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Otherwise do_unpack failed when multilib:
tar (child): /path/to/lib32-krb5-1.12.2.tar.gz: Cannot open: No such file or directory
And do_patch error:
ERROR: Command Error: exit status: 1 Output:
Applying patch 0001-aclocal-Add-parameter-to-disable-keyutils-detection.patch
can't find file to patch at input line 15
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Changed:
* Add init scripts and default configs based on debian
* Add a patch for crosscompile nm
* Add a patch to suppress /usr/lib in krb5-config
* Add DESCRIPTION
* Remove blacklist and inherit autotools-brokensep
* Add PACKAGECONFIG for ldap and readline
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Fixed SRC_URI:
* ${PN} -> ${BPN}, use ${BP} if it was ${PN}-${PV}
* ${P} -> ${BP}
Otherwise we would meet do_fetch errors when we do the multilib, native
or nativesdk build.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Changes:
- rename SUMMARY with length > 80 to DESCRIPTION
- rename DESCRIPTION with length < 80 to (non present tag) SUMMARY
- drop final point character at the end of SUMMARY string
- remove trailing whitespace of SUMMARY line
Note: don't bump PR
Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* 1.11 is often failing with:
| common.o: file not recognized: File truncated
| collect2: ld returned 1 exit status
| make[2]: *** [t_export_name] Error 1
when higher parallelism is used
1.11.2 and newer have fix for that:
http://krbdev.mit.edu/rt/Ticket/Display.html?id=7587
* LIC_FILES_CHKSUM is only from year update
< Copyright (C) 1985-2012 by the Massachusetts Institute of Technology.
---
> Copyright (C) 1985-2013 by the Massachusetts Institute of Technology.
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Krb5 needs libcom_err from e2fsprogs to be built. It looks like
in some cases if e2fsprogs was built before krb5 this would
silently pass.
* add that e2fsprogs dependency explicitly.
* added back the PR and updated its value to r1.
Signed-off-by: Ian Reinhart Geiser <igeiser@devonit.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* drop PR
* fix FILES_${PN}-doc
* fix QA warnings:
WARNING: QA Issue: krb5: Files/directories were installed but not
shipped
/usr/share/gnats
/usr/share/gnats/mit
and RPATH entries
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
