diff options
author | Nalin Dahyabhai <nalin@redhat.com> | 2012-08-30 14:22:23 -0400 |
---|---|---|
committer | Nalin Dahyabhai <nalin@redhat.com> | 2012-08-30 14:22:23 -0400 |
commit | 7f06579f48a238553ed5c22938aa9f1d7574ad49 (patch) | |
tree | 3ebac8c4f84701b073b3f6eb74d241a1ac81e559 /krb5.spec | |
parent | ec0380bcae3bc86674d0b991c012c6575ba177d6 (diff) | |
download | krb5-7f06579f48a238553ed5c22938aa9f1d7574ad49.tar.gz krb5-7f06579f48a238553ed5c22938aa9f1d7574ad49.tar.xz krb5-7f06579f48a238553ed5c22938aa9f1d7574ad49.zip |
backport patch from RT#7229krb5-1.10.3-3.fc19krb5-1.10.3-3.fc18
- backport patch to disable replay detection in krb5_verify_init_creds()
while reading the AP-REQ that's generated in the same function (RT#7229)
Diffstat (limited to 'krb5.spec')
-rw-r--r-- | krb5.spec | 8 |
1 files changed, 7 insertions, 1 deletions
@@ -29,7 +29,7 @@ Summary: The Kerberos network authentication system Name: krb5 Version: 1.10.3 -Release: 2%{?dist} +Release: 3%{?dist} # Maybe we should explode from the now-available-to-everybody tarball instead? # http://web.mit.edu/kerberos/dist/krb5/1.10/krb5-1.10.3-signed.tar Source0: krb5-%{version}.tar.gz @@ -81,6 +81,7 @@ Patch103: krb5-1.10-gcc47.patch Patch105: krb5-kvno-230379.patch Patch106: krb5-1.10.2-keytab-etype.patch Patch107: krb5-trunk-pkinit-anchorsign.patch +Patch108: krb5-1.10.2-replay.patch License: MIT URL: http://web.mit.edu/kerberos/www/ @@ -269,6 +270,7 @@ ln -s NOTICE LICENSE %patch105 -p1 -b .kvno %patch106 -p1 -b .keytab-etype %patch107 -p1 -b .pkinit-anchorsign +%patch108 -p1 -b .replay rm src/lib/krb5/krb/deltat.c gzip doc/*.ps @@ -837,6 +839,10 @@ exit 0 %{_sbindir}/uuserver %changelog +* Thu Aug 30 2012 Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3 +- backport patch to disable replay detection in krb5_verify_init_creds() + while reading the AP-REQ that's generated in the same function (RT#7229) + * Thu Aug 30 2012 Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2 - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6 - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename |