<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-openembedded.git/meta-oe/recipes-connectivity/krb5, branch sumo</title>
<subtitle>Mirror of git.openembedded.org/meta-openembedded</subtitle>
<id>https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=sumo</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=sumo'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/'/>
<updated>2018-06-15T02:35:29+00:00</updated>
<entry>
<title>krb5: support environment setting on systemd</title>
<updated>2018-06-15T02:35:29+00:00</updated>
<author>
<name>Hongxu Jia</name>
<email>hongxu.jia@windriver.com</email>
</author>
<published>2018-05-02T09:31:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=b70793830593f1eaf1441574d8b49eca2413e46d'/>
<id>urn:sha1:b70793830593f1eaf1441574d8b49eca2413e46d</id>
<content type='text'>
Let krb5 support environment setting on systemd startup.
Here is one requirement of environment setting from upstream krb5
...
https://web.mit.edu/kerberos/krb5-1.16/doc/admin/conf_files/kdc_conf.html
|Normally, the kdc.conf file is found in the KDC state directory,
LOCALSTATEDIR/krb5kdc. You can override the default location by
setting the environment variable KRB5_KDC_PROFILE.
...

The fix of (krb5-admin-server.service/krb5-kdc.service) refers ubuntu 1604

Variable RUN_KADMIND is sysvinit, move it out from default/krb5-admin-server

Signed-off-by: Hongxu Jia &lt;hongxu.jia@windriver.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
(cherry picked from commit 7eb04ba6772272a30c4a184702d039d145ec7799)
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>krb5: refresh 0001-aclocal-Add-parameter-to-disable-keyutils-detection.patch</title>
<updated>2018-04-09T00:00:06+00:00</updated>
<author>
<name>Andreas Müller</name>
<email>schnitzeltony@gmail.com</email>
</author>
<published>2018-03-20T15:56:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=b0b1fbed352323020dbdbde35ddb7744763157af'/>
<id>urn:sha1:b0b1fbed352323020dbdbde35ddb7744763157af</id>
<content type='text'>
Signed-off-by: Andreas Müller &lt;schnitzeltony@gmail.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>krb5: Correctly specify configure option --with-crypto-impl</title>
<updated>2018-03-29T23:51:07+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2018-03-20T03:59:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=fafb973ec06eb238457c0cd1f999e58978ea4a85'/>
<id>urn:sha1:fafb973ec06eb238457c0cd1f999e58978ea4a85</id>
<content type='text'>
Fixes
QA Issue: krb5: configure was passed unrecognised options: --with-pkinit-crypto-impl [unknown-configure-option]

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>krb5: Add -D_REENTRANT -pthread to CFLAGS on risc-v</title>
<updated>2018-03-29T23:50:38+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2018-03-20T03:59:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=3d90f703f43fb9f043051f4ea1710530a5cd407a'/>
<id>urn:sha1:3d90f703f43fb9f043051f4ea1710530a5cd407a</id>
<content type='text'>
This is not defined by gcc for risc-v, probably a bug in
gcc but until then insulate ourselves

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>krb5: remove PACKAGECONFIG for openssl</title>
<updated>2018-03-22T01:34:04+00:00</updated>
<author>
<name>Martin Jansa</name>
<email>martin.jansa@gmail.com</email>
</author>
<published>2018-03-13T12:12:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=c8085418644f49e167272d170ebad8c25b2e22f2'/>
<id>urn:sha1:c8085418644f49e167272d170ebad8c25b2e22f2</id>
<content type='text'>
* --with-pkinit-crypto-impl option was removed in 1.16 by this commit;
  https://github.com/krb5/krb5/commit/3e2344a14fad828dee624af0ae7ba2d12aec2c81#diff-f543b6d8715dcf859ebec297c750c370

Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>krb5: 1.15.1 -&gt; 1.16</title>
<updated>2018-03-12T16:59:35+00:00</updated>
<author>
<name>Huang Qiyu</name>
<email>huangqy.fnst@cn.fujitsu.com</email>
</author>
<published>2018-03-05T05:48:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=5172944a06c2632f66d6f356693e21362168e73c'/>
<id>urn:sha1:5172944a06c2632f66d6f356693e21362168e73c</id>
<content type='text'>
1.Upgrade krb5 from 1.15.1 to 1.16
2.Update the checksum of LIC_FILES_CHKSUM, since krb5 has been changed. But lincese remains the same.just modify the following.
  -Copyright (C) 1985-2016 by the Massachusetts Institute of Technology.
  +Copyright (C) 1985-2017 by the Massachusetts Institute of Technology.

  -The KCM Mach RPC definition file used on OS X has the following
  +The KCM Mach RPC definition file used on macOS has the following

Signed-off-by: Huang Qiyu &lt;huangqy.fnst@cn.fujitsu.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>krb5: CVE-2017-11462</title>
<updated>2017-09-18T08:18:12+00:00</updated>
<author>
<name>Catalin Enache</name>
<email>catalin.enache@windriver.com</email>
</author>
<published>2017-09-15T09:45:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=532b5cbb40d58ef1d17a8555bf615c1304ef9dcc'/>
<id>urn:sha1:532b5cbb40d58ef1d17a8555bf615c1304ef9dcc</id>
<content type='text'>
Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to
have unspecified impact via vectors involving automatic deletion of
security contexts on error.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-11462

Upstream patch:
https://github.com/krb5/krb5/commit/56f7b1bc95a2a3eeb420e069e7655fb181ade5cf

Signed-off-by: Catalin Enache &lt;catalin.enache@windriver.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>krb5: fix CVE-2017-11368</title>
<updated>2017-09-07T08:59:56+00:00</updated>
<author>
<name>Kai Kang</name>
<email>kai.kang@windriver.com</email>
</author>
<published>2017-08-28T13:59:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=d9f7ef40d74659a0348248841efadaf120d52c30'/>
<id>urn:sha1:d9f7ef40d74659a0348248841efadaf120d52c30</id>
<content type='text'>
Backport patch to fix CVE-2017-11368 for krb5.

Signed-off-by: Kai Kang &lt;kai.kang@windriver.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>krb5_1.15.1.bb: set CVE_PRODUCT to kerberos</title>
<updated>2017-07-24T16:58:54+00:00</updated>
<author>
<name>Mikko Rapeli</name>
<email>mikko.rapeli@bmw.de</email>
</author>
<published>2017-07-21T07:03:16+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=236ca5e37c5368cdaf95e02d395f6e2479cd98b3'/>
<id>urn:sha1:236ca5e37c5368cdaf95e02d395f6e2479cd98b3</id>
<content type='text'>
It is used in NVD database for CVE's like:

https://nvd.nist.gov/vuln/detail/CVE-2016-3120

Signed-off-by: Mikko Rapeli &lt;mikko.rapeli@bmw.de&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>krb5: 1.13.6 -&gt; 1.15.1</title>
<updated>2017-04-26T18:13:31+00:00</updated>
<author>
<name>Huang Qiyu</name>
<email>huangqy.fnst@cn.fujitsu.com</email>
</author>
<published>2017-04-24T07:46:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=7e4166e80b6994d8ea1a4eacffa4fe9d386c72ec'/>
<id>urn:sha1:7e4166e80b6994d8ea1a4eacffa4fe9d386c72ec</id>
<content type='text'>
1) Upgrade krb5 from 1.13.6 to 1.15.1.
2) License checksum changed,since the copyright years were updated.
3) Fix error in the step of do_configure.
   | ERROR: krb5-1.15.1-r0 do_package: QA Issue: krb5: Files/directories were installed but not shipped in any package:
   |  /usr/lib/krb5/plugins/preauth/test.so

Signed-off-by: Huang Qiyu &lt;huangqy.fnst@cn.fujitsu.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
</feed>
