FEDORA-2022-8050ab2c35 — security update for krb5

obsolete

krb5-1.20.1-1.fc38

FEDORA-2022-8050ab2c35 created by jrische a year ago for Fedora 38

Automatic update for krb5-1.20.1-1.fc38.

Changelog

* Wed Nov 23 2022 Julien Rische <jrische@redhat.com> - 1.20.1-1
- New upstream version (1.20.1)
- Resolves: rhbz#2124463
- Restore "supportedCMSTypes" attribute in PKINIT preauth requests
- Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
- Resolves: rhbz#2114766
- Update error checking for OpenSSL CMS_verify
- Resolves: rhbz#2119704
- Remove invalid password expiry warning
- Resolves: rhbz#2129113
* Wed Nov  9 2022 Julien Rische <jrische@redhat.com> - 1.19.2-13
- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2143011
* Tue Aug  2 2022 Andreas Schneider <asn@redhat.com> - 1.19.2-12
- Use baserelease to set the release number
- Do not define netlib, but use autoconf detection for res_* functions
- Add missing BR for resolv_wrapper to run t_discover_uri.py

This update was automatically created

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

adamwill commented & provided feedback a year ago

karma

this wasn't meant to be on mainline yet, per @ab .

kalev provided feedback a year ago

karma

decathorpe provided feedback a year ago

karma

This update has been obsoleted.

a year ago

mohanboddu provided feedback a year ago

karma

abbra commented & provided feedback a year ago

A proper update is https://bodhi.fedoraproject.org/updates/FEDORA-2022-311128dd7e which includes krb5, samba, and freeipa.

This update's test gating status has been changed to 'failed'.

a year ago

Please login to add feedback.

Metadata

Type

security

Karma

-4

Signed

Content Type

RPM

Test Gating

failed

Builds

krb5-1.20.1-1.fc38

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

0 days

Dates

submitted

a year ago

in testing

a year ago

BZ#2114766 MIT krb5 client does not set "supportedCMSTypes" for pkinit and therefore Heimdal KDC uses SHA1 for CMS signature [fedora-rawhide]

BZ#2119704 Mishandling of CMS_verify() errors in PKINIT plugin [fedora-all]

BZ#2124463 Rebase krb5 to latest upstream release 1.20 [fedora-rawhide]

BZ#2129113 Incorrect password expiration handling [fedora-rawhide]

BZ#2143011 CVE-2022-42898 krb5: integer overflow vulnerabilities in PAC parsing [fedora-37]

krb5-1.20.1-1.fc38

Automated Test Results

For help debugging failed Fedora CI tests (fedora-ci.*), contact the Fedora CI team.
For help debugging failed Fedora CoreOS tests (coreos.*), contact the Fedora CoreOS team.
For help debugging failed openQA tests (update.*), contact the Fedora Quality team, who will usually investigate and diagnose all failures within 24 hours.

failed