summaryrefslogtreecommitdiffstats
path: root/krb5.spec
diff options
context:
space:
mode:
authorNathaniel McCallum <nathaniel@themccallums.org>2012-02-21 15:40:50 -0500
committerNathaniel McCallum <nathaniel@themccallums.org>2012-02-21 15:40:50 -0500
commitb44189a932c0a52574afcf79d3aabfab19e5653c (patch)
tree2711c757fa110a42fae9fbbd51d75ac52b9842ba /krb5.spec
parent1b8eb90a4fb6436cb4be9a575e27aa6e6b4658fa (diff)
downloadkrb5-b44189a932c0a52574afcf79d3aabfab19e5653c.tar.gz
krb5-b44189a932c0a52574afcf79d3aabfab19e5653c.tar.xz
krb5-b44189a932c0a52574afcf79d3aabfab19e5653c.zip
Fix string RPC ACLs (RT#7093); CVE-2012-1012
Diffstat (limited to 'krb5.spec')
-rw-r--r--krb5.spec7
1 files changed, 6 insertions, 1 deletions
diff --git a/krb5.spec b/krb5.spec
index 1180d82..aeffc3f 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -15,7 +15,7 @@
Summary: The Kerberos network authentication system
Name: krb5
Version: 1.10
-Release: 3%{?dist}
+Release: 4%{?dist}
# Maybe we should explode from the now-available-to-everybody tarball instead?
# http://web.mit.edu/kerberos/dist/krb5/1.10/krb5-1.10-signed.tar
Source0: krb5-%{version}.tar.gz
@@ -64,6 +64,7 @@ Patch103: krb5-1.10-gcc47.patch
Patch104: krb5-1.10-crashfix.patch
Patch105: krb5-kvno-230379.patch
Patch106: krb5-1.10-lookaside.patch
+Patch107: krb5-1.10-string-rpc-acl-fix.patch
License: MIT
URL: http://web.mit.edu/kerberos/www/
@@ -236,6 +237,7 @@ ln -s NOTICE LICENSE
%patch104 -p1 -b .crashfix
%patch105 -p1 -b .kvno
%patch106 -p1 -b .7082
+%patch107 -p1 -b .7093
rm src/lib/krb5/krb/deltat.c
gzip doc/*.ps
@@ -747,6 +749,9 @@ exit 0
%{_sbindir}/uuserver
%changelog
+* Tue Feb 21 2012 Nathaniel McCallum <nathaniel@natemccallum.com> - 1.10-4
+- Fix string RPC ACLs (RT#7093); CVE-2012-1012
+
* Tue Jan 31 2012 Nathaniel McCallum <nathaniel@natemccallum.com> - 1.10-3
- Add upstream lookaside cache behavior fix (RT#7082)