summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNalin Dahyabhai <nalin@fedoraproject.org>2007-05-04 18:10:01 +0000
committerNalin Dahyabhai <nalin@fedoraproject.org>2007-05-04 18:10:01 +0000
commita321e486d27f96720facbe1821fb2a9151647ffa (patch)
treee44a8edfe8f009a5a0fdae22bc0a0b70a7162428
parent446760b8bfd900ec1218028d1f19b51afdf117bd (diff)
downloadkrb5-a321e486d27f96720facbe1821fb2a9151647ffa.tar.gz
krb5-a321e486d27f96720facbe1821fb2a9151647ffa.tar.xz
krb5-a321e486d27f96720facbe1821fb2a9151647ffa.zip
- fix an uninitialized length value which could cause a crash when parsingkrb5-1_6-4
key data coming from a directory server - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")
-rw-r--r--krb5.spec11
1 files changed, 10 insertions, 1 deletions
diff --git a/krb5.spec b/krb5.spec
index da49e9b..6204323 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -15,7 +15,7 @@
Summary: The Kerberos network authentication system.
Name: krb5
Version: 1.6
-Release: 3
+Release: 4
# Maybe we should explode from the now-available-to-everybody tarball instead?
# http://web.mit.edu/kerberos/dist/krb5/1.5/krb5-1.5-signed.tar
Source0: krb5-%{version}.tar.gz
@@ -79,6 +79,8 @@ Patch47: krb5-1.6-sort-of-static.patch
Patch48: krb5-1.6-CVE-2007-0956-prelim.patch
Patch49: krb5-1.6-CVE-2007-0957-prelim.patch
Patch50: krb5-1.6-CVE-2007-1216-prelim.patch
+Patch51: krb5-1.6-ldap-init.patch
+Patch52: krb5-1.6-ldap-man.patch
License: MIT, freely distributable.
URL: http://web.mit.edu/kerberos/www/
@@ -193,6 +195,11 @@ installed on systems which are meant provide these services.
%endif
%changelog
+* Fri May 4 2007 Nalin Dahyabhai <nalin@redhat.com>
+- fix an uninitialized length value which could cause a crash when parsing
+ key data coming from a directory server
+- correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")
+
* Fri Apr 13 2007 Nalin Dahyabhai <nalin@redhat.com>
- move the default acl_file, dict_file, and admin_keytab settings to
the part of the default/example kdc.conf where they'll actually have
@@ -1092,6 +1099,8 @@ installed on systems which are meant provide these services.
%patch48 -p0 -b .CVE-2007-0956
%patch49 -p0 -b .CVE-2007-0957
%patch50 -p0 -b .CVE-2007-1216
+%patch51 -p0 -b .ldap_init
+%patch52 -p0 -b .ldap_man
cp src/krb524/README README.krb524
gzip doc/*.ps