summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | - fix included in 1.9Nalin Dahyabhai2010-12-061-333/+0
| |
* | - fix included in 1.9Nalin Dahyabhai2010-12-061-42/+0
| |
* | - fix included in 1.9Nalin Dahyabhai2010-12-061-25/+0
| |
* | - fix included in 1.9Nalin Dahyabhai2010-12-061-28/+0
| |
* | - update to apply to 1.9Nalin Dahyabhai2010-12-061-1/+1
| |
* | - update to match current context in krb5.conf(5)Nalin Dahyabhai2010-12-062-219/+0
| |
* | - fix context for applying to krb5.conf(5)Nalin Dahyabhai2010-12-061-0/+195
| |
* | - right, renamed the patchNalin Dahyabhai2010-11-301-1/+1
| |
* | go with the final patchNalin Dahyabhai2010-11-301-17/+16
| |
* | add upstream patch to fix various issues from MITKRB5-SA-2010-007Nalin Dahyabhai2010-11-302-1/+210
|/
* - incorporate upstream patch to fix uninitialized pointer crash in the KDC's ↵Nalin Dahyabhai2010-10-052-1/+41
| | | | authorization data handling (CVE-2010-1322, #636335)
* - pull down patches from trunk to implement k5login_authoritative and ↵krb5-1.8.3-7.fc15Nalin Dahyabhai2010-10-041-1/+10
| | | | k5login_directory settings for krb5.conf (#539423)
* - pull down patches from trunk to implement k5login_authoritative andkrb5-1.8.3-6.fc15Nalin Dahyabhai2010-10-041-0/+333
| | | | k5login_directory settings for krb5.conf (#539423)
* - Rebuilt for gcc bug 634757Jesse Keating2010-09-291-1/+4
|
* - fix reading of keyUsage extensions when attempting to select pkinit client ↵krb5-1.8.3-4.fc15Nalin Dahyabhai2010-09-161-1/+11
| | | | | | certs (part of #629022, RT#6775) - fix selection of pkinit client certs when one or more don't include a subjectAltName extension (part of #629022, RT#6774)
* - fix reading of keyUsage extensions when attempting to select pkinit client ↵Nalin Dahyabhai2010-09-161-0/+25
| | | | certs (part of #629022, RT#6775)
* - fix selection of pkinit client certs when one or more don't include a ↵Nalin Dahyabhai2010-09-161-0/+42
| | | | subjectAltName extension (part of #629022, RT#6774)
* - build with -fstack-protector-all instead of the default -fstack-protector,krb5-1.8.3-3.fc15Nalin Dahyabhai2010-09-031-1/+3
| | | | so that we add checking to more functions (i.e., all of them) (#629950)
* - also link binaries with -Wl,-z,relro,-z,now (part of #629950)Nalin Dahyabhai2010-09-032-5/+9
|
* - fix a logic bug in computing key expiration times (RT#6762, #627022)krb5-1.8.3-2.fc15Nalin Dahyabhai2010-08-242-1/+34
|
* - update patch noteNalin Dahyabhai2010-08-121-1/+3
|
* - update to 1.8.3krb5-1.8.3-1.fc15Nalin Dahyabhai2010-08-046-176/+16
| | | | | | - drop backports of fixes for gss context expiration and error table registration/deregistration mismatch - drop patch for upstream #6750
* dist-git conversionFedora Release Engineering2010-07-282-21/+0
|
* - fix a typo in the changelogNalin Dahyabhai2010-07-151-1/+1
|
* - fix parsing of the pidfile option in the KDC (upstream #6750)krb5-1_8_2-3_fc14Nalin Dahyabhai2010-07-072-0/+16
|
* - add logrotate configuration files for krb5kdc and kadmind (#462658)Nalin Dahyabhai2010-07-073-0/+33
|
* - tell krb5kdc and kadmind to create pid files, since they canNalin Dahyabhai2010-07-073-3/+10
|
* - libgssapi: pull in patch from svn to stop returning context-expiredkrb5-1_8_2-2_fc14Nalin Dahyabhai2010-06-212-1/+146
| | | | | errors when the ticket which was used to set up the context expires (#605366, upstream #6739)
* - pull up fix for upstream #6745, in which the gssapi library would add theNalin Dahyabhai2010-06-212-0/+21
| | | | wrong error table but subsequently attempt to unload the right one
* - this shouldn't be here -> krb5-applNalin Dahyabhai2010-06-101-38/+0
|
* - update to 1.8.2krb5-1_8_2-1_fc14Nalin Dahyabhai2010-06-105-49/+13
| | | | - drop patches for CVE-2010-1320, CVE-2010-1321
* - reference the right bug -- this wasn't a problem until the revisionNalin Dahyabhai2010-05-271-1/+1
|
* don't skip the PAM account check for root or the same user (more ofNalin Dahyabhai2010-05-272-1/+29
| | | | #477033)
* - ksu: move session management calls to before we drop privileges, like suNalin Dahyabhai2010-05-272-37/+41
| | | | does (#596887)
* - that -fno-strict-aliasing change merits a rebuildkrb5-1_8_1-6_fc14Nalin Dahyabhai2010-05-241-2/+2
|
* - go back to building without strict aliasing (compiler warnings in gssrpc)Nalin Dahyabhai2010-05-241-1/+2
|
* - drop explicit linking with libtinfo for applications that use libss, nowNalin Dahyabhai2010-05-241-1/+4
| | | | | that readline itself links with libtinfo (as of readline-5.2-3, since fedora 7 or so)
* - make krb5-server-ldap also depend on the same version-release ofNalin Dahyabhai2010-05-241-0/+6
| | | | | krb5-libs, as the other subpackages do, if only to make it clearer than it is when we just do it through krb5-server
* - add patch to correct GSSAPI library null pointer dereference which couldkrb5-1_8_1-5_fc14Nalin Dahyabhai2010-05-182-1/+25
| | | | be triggered by malformed client requests (CVE-2010-1321, #582466)
* - fix output of kprop's init script's "status" and "reload" commandskrb5-1_8_1-4_fc14Nalin Dahyabhai2010-05-042-4/+11
| | | | (#588222)
* - incorporate patch to fix double-free in the KDC (CVE-2010-1320, #581922)krb5-1_8_1-3_fc14Nalin Dahyabhai2010-04-202-1/+26
|
* - fix a typo in kerberos.ldifkrb5-1_8_1-2_fc14Nalin Dahyabhai2010-04-141-1/+12
|
* - update to 1.8.1krb5-1_8_1-1_fc14Nalin Dahyabhai2010-04-098-281/+16
| | | | | | | - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628 - replace buildrequires on tetex-latex with one on texlive-latex, which is the package that provides it now
* - kdc.conf: no more need to suggest a v4 mode, or listening on the v4 portNalin Dahyabhai2010-04-082-2/+4
|
* - drop patch to suppress key expiration warnings sent from the KDC in theNalin Dahyabhai2010-04-082-22/+5
| | | | | last-req field, as the KDC is expected to just be configured to either send them or not as a particular key approaches expiration (#556495)
* - note why we're going to drop this patchNalin Dahyabhai2010-04-081-1/+4
|
* - add bug numbers for the fix for CVE-2010-0628Nalin Dahyabhai2010-03-231-1/+1
|
* - kdc.conf: no more need to suggest keeping keys with v4-compatible saltingkrb5-1_8-5_fc14Nalin Dahyabhai2010-03-232-1/+2
|
* - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628)Nalin Dahyabhai2010-03-232-7/+79
|
* - remove the krb5-appl bits (the -workstation-clients andkrb5-1_8-4_fc14Nalin Dahyabhai2010-03-1930-2779/+10
| | | | -workstation-servers subpackages) now that krb5-appl is its own package