Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

krb5-libs-1.17-54.fc32 RPM for x86_64

From Fedora Rawhide for x86_64 / k

Name: krb5-libs Distribution: Fedora Project
Version: 1.17 Vendor: Fedora Project
Release: 54.fc32 Build date: Fri Dec 6 19:47:39 2019
Group: Unspecified Build host: buildhw-07.phx2.fedoraproject.org
Size: 2262371 Source RPM: krb5-1.17-54.fc32.src.rpm
Packager: Fedora Project
Url: https://web.mit.edu/kerberos/www/
Summary: The non-admin shared libraries used by Kerberos 5
Kerberos is a network authentication system. The krb5-libs package
contains the shared libraries needed by Kerberos 5. If you are using
Kerberos, you need to install this package.

Provides

Requires

License

MIT

Changelog

* Fri Dec 06 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-54
  - Qualify short hostnames when not using DNS
* Wed Nov 27 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-53
  - Various gssalloc fixes
* Thu Nov 21 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-52
  - Turns out openssl has an epoch
* Wed Nov 20 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-51
  - Fix runtime openssl version to actually propogate
* Wed Nov 20 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-50
  - Add runtime openssl version requirement too
* Wed Nov 20 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-49
  - Fix kadmin addprinc -randkey -kvno
* Tue Nov 19 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-48
  - Use OpenSSL's backported KDFs
  - Restore MD4 in FIPS mode (for samba)
* Fri Nov 08 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-47
  - Add default_principal_flags to example kdc.conf
* Wed Oct 02 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-46
  - Log unknown enctypes as unsupported in KDC
* Wed Sep 25 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-45
  - Fix KDC crash when logging PKINIT enctypes (CVE-2019-14844)
* Thu Sep 12 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-44
  - Static analyzer appeasement
* Tue Aug 27 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-43
  - Simplify krb5_dbe_def_search_enctype()
* Thu Aug 22 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-42
  - Update FIPS patches to remove SPAKE
* Thu Aug 15 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-41
  - Fix KCM client time offset propagation
* Fri Aug 09 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-40
  - Initialize life/rlife in kdcpolicy interface
* Tue Aug 06 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-39
  - Fix memory leaks in soft-pkcs11 code
* Tue Jul 30 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-38
  - Add soft-pkcs11 and use it for testing
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.17-37
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jul 18 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-36
  - Filter enctypes in gss_set_allowable_enctypes()
* Mon Jul 15 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-35
  - Don't error on invalid enctypes in keytab
  - Resolves: #1724380
* Tue Jul 02 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-34
  - Remove now-unused checksum functions
* Wed Jun 26 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-33
  - Fix typo in 3des commit
* Wed Jun 26 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-32
  - Remove PKINIT draft9 support (compat with EOL, pre-2008 Windows)
* Mon Jun 10 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-31
  - Remove strerror() calls from k5_get_error()
* Fri Jun 07 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-30
  - Remove 3des from kdc.conf example
* Mon Jun 03 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-29
  - Remove 3DES support
* Mon Jun 03 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-28
  - Remove 3des support
* Thu May 30 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-27
  - Remove krb5int_c_combine_keys() and no-flags SAM-2 preauth
* Tue May 28 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-26
  - Remove support for single-DES and CRC
* Wed May 22 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-25
  - Add missing newlines to deprecation warnings
  - Switch to upstream's ksu path patch
* Tue May 21 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-24
  - Update default krb5kdc mkey manual-entry enctype
  - Also update account lockout patch to upstream version
* Mon May 20 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-23
  - Test & docs fixes in preparation for DES removal
* Wed May 15 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-22
  - Drop krb5_realm_compare() etc. NULL check patches
* Wed May 15 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-21
  - Re-provide krb5-kdb-version in -devel as well (IPA wants it)
* Tue May 14 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-20
  - (Patch consolidation; hopefully no changes)
* Tue May 14 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-19
  - Remove checksum type profile variables
* Fri May 10 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-18
  - Pull in 2019-05-02 static analysis updates
* Fri May 03 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-17
  - Move krb5-kdb-version provide into krb5-server for freeipa
* Wed May 01 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-16
  - Use secure_getenv() where appropriate
* Wed Apr 24 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-15
  - Fix us up real nice with rpmlint
* Wed Apr 24 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-14
  - Add dns_canonicalize_hostname=fallback support
* Wed Apr 24 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-13
  - Check more errors in OpenSSL crypto backend
* Mon Apr 22 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-12
  - Fix potential close(-1) in cc_file.c
* Wed Apr 17 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-11
  - Remove ovsec_adm_export and confvalidator
* Wed Apr 17 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-10
  - Fix config realm change logic in FILE remove_cred
* Thu Apr 11 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-9
  - Remove Kerberos v4 support vestiges (including ktany support)
* Thu Apr 11 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-8
  - Implement krb5_cc_remove_cred for remaining types
  - Resolves: #1693836
* Mon Apr 01 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-7
  - FIPS-aware SPAKE group negotiation
* Mon Feb 25 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-6
  - Fix memory leak in 'none' replay cache type
  - Silence a coverity warning while we're here.
* Fri Feb 01 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-5
  - Update FIPS blocking for RC4
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.17-4
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Jan 17 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-3
  - enctype logging and explicit_bzero()
* Tue Jan 08 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-2
  - New upstream version (1.17)
* Fri Jan 04 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-1.beta2.6
  - Use openssl's PRNG in FIPS mode
* Fri Jan 04 2019 Robbie Harwood <rharwood@redhat.com> - 1.17-1.beta2.5
  - Address some optimized-out memset() calls
* Thu Dec 20 2018 Robbie Harwood <rharwood@redhat.com> - 1.17-1.beta2.4
  - Remove incorrect KDC assertion
* Thu Dec 20 2018 Robbie Harwood <rharwood@redhat.com> - 1.17-1.beta2.3
  - Fix syntax on pkinit_anchors field in default krb5.conf
* Mon Dec 17 2018 Robbie Harwood <rharwood@redhat.com> - 1.17-1.beta2.2
  - Restore pdfs source file
  - Resolves: #1659716
* Thu Dec 06 2018 Robbie Harwood <rharwood@redhat.com> - 1.17-1.beta2.1
  - New upstream release (1.17-beta2)
  - Drop pdfs source file
* Thu Nov 29 2018 Robbie Harwood <rharwood@redhat.com> - 1.17-1.beta1.3
  - Add tests for KCM ccache type
* Mon Nov 12 2018 Robbie Harwood <rharwood@redhat.com> - 1.17-1.beta1.2
  - Gain FIPS awareness
* Thu Nov 08 2018 Robbie Harwood <rharwood@redhat.com> - 1.17-1.beta1.1
  - Fix spurious errors from kcmio_unix_socket_write
  - Resolves: #1645912
* Thu Nov 01 2018 Robbie Harwood <rharwood@redhat.com> - 1.17-0.beta1.1
  - New upstream beta release
* Wed Oct 24 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-25
  - Update man pages to reference kerberos(7)
  - Resolves: #1143767
* Wed Oct 17 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-24
  - Use port-sockets.h macros in cc_kcm, sendto_kdc
  - Resolves: #1631998
* Wed Oct 17 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-23
  - Correct kpasswd_server description in krb5.conf(5)
  - Resolves: #1640272
* Mon Oct 15 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-22
  - Prefer TCP to UDP for password changes
  - Resolves: #1637611
* Tue Oct 09 2018 Adam Williamson <awilliam@redhat.com> - 1.16.1-21
  - Revert the patch from -20 for now as it seems to make FreeIPA worse
* Tue Oct 02 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-20
  - Fix bugs with concurrent use of MEMORY ccaches
* Wed Aug 01 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-19
  - In FIPS mode, add plaintext fallback for RC4 usages and taint
* Thu Jul 26 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-18
  - Fix k5test prompts for Python 3
* Thu Jul 19 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-17
  - Remove outdated note in krb5kdc man page
* Thu Jul 19 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-16
  - Make krb5kdc -p affect TCP ports
* Thu Jul 19 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-15
  - Eliminate preprocessor-disabled dead code
* Wed Jul 18 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-14
  - Fix some broken tests for Python 3
* Mon Jul 16 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-13
  - Zap copy of secret in RC4 string-to-key
* Thu Jul 12 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-12
  - Convert Python tests to Python 3
* Wed Jul 11 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-11
  - Add build dependency on gcc
* Tue Jul 10 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-10
  - Use SHA-256 instead of MD5 for audit ticket IDs
* Fri Jul 06 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-9
  - Add BuildRequires on python2 so we can run tests at build-time
* Fri Jul 06 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-8
  - Explicitly look for python2 in configure.in
* Thu Jun 14 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-7
  - Add flag to disable encrypted timestamp on client
* Thu Jun 14 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-6
  - Switch to python3-sphinx for docs
  - Resolves: #1590928
* Thu Jun 14 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-5
  - Make docs build python3-compatible
  - Resolves: #1590928
* Thu Jun 07 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-4
  - Update includedir processing to match upstream
* Fri Jun 01 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-3
  - Log when non-root ksu authorization fails
  - Resolves: #1575771
* Fri May 04 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-2
  - Remove "-nodes" option from make-certs scripts
* Fri May 04 2018 Robbie Harwood <rharwood@redhat.com> - 1.16.1-1
  - New upstream release - 1.16.1
* Thu May 03 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-27
  - Fix configuration of default ccache name to match file indentation
* Mon Apr 30 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-26
  - Set error message on KCM get_princ failure
* Mon Apr 30 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-25
  - Set error message on KCM get_princ failure
* Tue Apr 24 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-24
  - Fix KDC null dereference on large TGS replies
* Mon Apr 23 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-23
  - Explicitly use openssl rather than builtin crypto
  - Resolves: #1570910
* Tue Apr 17 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-22
  - Merge duplicate subsections in profile library
* Mon Apr 09 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-21
  - Restrict pre-authentication fallback cases
* Tue Apr 03 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-20
  - Be more careful asking for AS key in SPAKE client
* Mon Apr 02 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-19
  - Zap data when freeing krb5_spake_factor
* Thu Mar 29 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-18
  - Continue after KRB5_CC_END in KCM cache iteration
* Tue Mar 27 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-17
  - Fix SPAKE memory leak
* Tue Mar 27 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-16
  - Fix gitignore problem with previous patchset
* Tue Mar 27 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-15
  - Add SPAKE support
  - Improve protections on internal sensitive buffers
  - Improve internal hex encoding/decoding
* Tue Mar 20 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-14
  - Fix problem with ccache_name logic in previous build
* Tue Mar 20 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-13
  - Add pkinit_anchors default value to krb5.conf
  - Reindent krb5.conf to not be terrible
* Tue Mar 20 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-12
  - Log preauth names in trace output
  - Misc bugfixes from upstream
* Mon Mar 19 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-11
  - Add PKINIT KDC support for freshness token
* Wed Mar 14 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-10
  - Exit with status 0 from kadmind
* Tue Mar 13 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-9
  - Fix hex conversion of PKINIT certid strings
* Wed Mar 07 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-8
  - Fix capaths "." values on client
  - Resolves: 1551099
* Tue Feb 13 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-7
  - Fix flaws in LDAP DN checking
  - CVE-2018-5729, CVE-2018-5730
* Mon Feb 12 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-6
  - Fix a leak in the previous commit
  - Restore dist macro that was accidentally removed
  - Resolves: #1540939
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.16-5
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Feb 03 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1.16-4
  - Switch to %ldconfig_scriptlets
* Mon Jan 29 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-3
  - Process included directories in alphabetical order
* Tue Dec 12 2017 Robbie Harwood <rharwood@redhat.com> - 1.16-2
  - Fix network service dependencies
  - Resolves: #1525230

Files

/etc/gss
/etc/gss/mech.d
/etc/krb5.conf
/etc/krb5.conf.d
/etc/krb5.conf.d/crypto-policies
/usr/lib/.build-id
/usr/lib/.build-id/07
/usr/lib/.build-id/07/a0910e074525e2ca89278d7e14982345d40e89
/usr/lib/.build-id/1b
/usr/lib/.build-id/1b/691f82510bade321f88a657152d999090b2fb7
/usr/lib/.build-id/34
/usr/lib/.build-id/34/20360581509a8683559e63e006f483abb6f082
/usr/lib/.build-id/46
/usr/lib/.build-id/46/48301c70ee37eaf4916972225b7b4ba0c06270
/usr/lib/.build-id/54
/usr/lib/.build-id/54/4b405bdee9d937c769dea2d1c441ead7dc48b1
/usr/lib/.build-id/55
/usr/lib/.build-id/55/7212f399e581cda2d0dff8ad8a9c45d1dd7b78
/usr/lib/.build-id/74
/usr/lib/.build-id/74/9fd90d32b2717ad36427bf87ff71a293b84a38
/usr/lib/.build-id/90
/usr/lib/.build-id/90/321941d17d6bca72e38fddd9bec79a884e03f1
/usr/lib/.build-id/c4
/usr/lib/.build-id/c4/288d5b56d83a415e7076473b8debece3828fa2
/usr/lib64/krb5
/usr/lib64/krb5/plugins
/usr/lib64/krb5/plugins/authdata
/usr/lib64/krb5/plugins/kdb
/usr/lib64/krb5/plugins/libkrb5
/usr/lib64/krb5/plugins/preauth
/usr/lib64/krb5/plugins/preauth/spake.so
/usr/lib64/krb5/plugins/tls
/usr/lib64/krb5/plugins/tls/k5tls.so
/usr/lib64/libgssapi_krb5.so.2
/usr/lib64/libgssapi_krb5.so.2.2
/usr/lib64/libgssrpc.so.4
/usr/lib64/libgssrpc.so.4.2
/usr/lib64/libk5crypto.so.3
/usr/lib64/libk5crypto.so.3.1
/usr/lib64/libkdb5.so.9
/usr/lib64/libkdb5.so.9.0
/usr/lib64/libkrad.so.0
/usr/lib64/libkrad.so.0.0
/usr/lib64/libkrb5.so.3
/usr/lib64/libkrb5.so.3.3
/usr/lib64/libkrb5support.so.0
/usr/lib64/libkrb5support.so.0.1
/usr/share/doc/krb5-libs
/usr/share/doc/krb5-libs/NOTICE
/usr/share/doc/krb5-libs/README
/usr/share/licenses/krb5-libs
/usr/share/licenses/krb5-libs/LICENSE
/usr/share/locale/de/LC_MESSAGES/mit-krb5.mo
/usr/share/locale/en_US/LC_MESSAGES/mit-krb5.mo
/usr/share/man/man5/.k5identity.5.gz
/usr/share/man/man5/.k5login.5.gz
/usr/share/man/man5/k5identity.5.gz
/usr/share/man/man5/k5login.5.gz
/usr/share/man/man5/krb5.conf.5.gz
/usr/share/man/man7/kerberos.7.gz
/var/kerberos
/var/kerberos/krb5
/var/kerberos/krb5/user


Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Dec 12 01:32:44 2019