Wenzong Fan 4a78e6772c krb5: fix CVE-2014-5351 ...

The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c
in kadmind in MIT Kerberos 5 (aka krb5) before 1.13 sends old keys in a
response to a -randkey -keepold request, which allows remote authentic-
ated users to forge tickets by leveraging administrative access.

This back-ported patch fixes CVE-2014-5351.

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>

2014-11-24 11:59:48 +01:00

..

daq

daq fix compilation

2014-06-10 12:35:54 +02:00

gammu

gammu: Add missing glib-2.0 and udev build dependencies

2014-07-22 00:02:00 +02:00

gateone

gateone: Updated to version 1.2

2014-05-04 17:14:11 +02:00

gnokii

gnokii: Fix floating runtime dependencies

2014-07-22 00:01:59 +02:00

gnuradio/gnuradio

gnuradio: Remove recipes. Now lives in meta-sdr.

2013-11-18 23:12:32 +01:00

hostapd

hostapd: use ${PN} for SYSTEMD_SERVICE

2014-09-26 05:41:53 +02:00

irssi

irssi: add --with-ncurses option

2014-07-15 15:02:28 +02:00

iw

iw: uprev to version 3.15

2014-08-21 21:35:07 +02:00

krb5

krb5: fix CVE-2014-5351

2014-11-24 11:59:48 +01:00

libimobiledevice

emacs, mplayer2, gnome-mplayer, xbmc, libimobiledevice, ifuse, tk: blacklist recipes failing in world builds

2014-05-09 14:59:01 +02:00

libmtp

libmtp: Fix build with glibc 2.20

2014-10-04 00:28:29 +02:00

libnet

libnet: fix build issue with package upgrade

2014-06-21 10:32:30 +02:00

libtorrent

meta-oe: use BPN in SRC_URI

2014-07-15 14:56:55 +02:00

linuxptp

linuxptp: Use environment compiler settings

2014-07-15 15:02:28 +02:00

loudmouth

recipes: add missing gtk-doc class dependencies

2014-06-21 13:06:13 +02:00

mosh

mosh: Perl module dependencies were missing

2013-12-21 19:16:51 +01:00

networkmanager

networkmanager: make shared connections work

2014-10-27 12:50:00 +01:00

obex

openobex: remove unrecognized configure options

2014-08-11 10:59:22 +02:00

obexftp

obexftp: Create 0.23 version

2014-03-15 15:25:27 +01:00

phonet-utils

phonet-utils: Fix build with B!=S

2014-07-15 14:53:31 +02:00

rabbitmq-c

rabbitmq-c: update to v0.5.2.

2014-11-19 15:21:03 +01:00

rfkill

meta-oe: use BPN in SRC_URI

2014-07-15 14:56:55 +02:00

rtorrent

rtorrent: add ncurses dependency

2014-07-22 00:01:58 +02:00

samba

samba: fix error messages when startup samba service

2014-11-24 11:58:30 +01:00

ser2net

ser2net: change file used in LIC_FILES_CHKSUM

2014-07-22 00:01:59 +02:00

soft66

libftdi, soft66: Blacklist, because of libftdi is broken without libusb-config

2014-06-21 12:20:21 +02:00

usbmuxd

usbmuxd: fix unpackaged files

2013-07-30 11:17:11 +02:00

wvdial

wvstreams: Add missing dbus/readline DEPENDS and use autotools-brokensep

2014-07-22 00:01:56 +02:00

zeroc-ice

zeroc-ice: blacklist, because it's not compatible with default db-6* version

2014-07-24 15:31:50 +02:00

zeromq

zeromq: following ptest formatting

2014-09-26 05:42:53 +02:00