linux/meta-openembedded.git/meta-oe/recipes-connectivity/krb5, branch walnascar

krb5: Backport additional fixes to build on clang

2025-03-26T01:30:53+00:00

Enabling additional warning tightens the function prototype checks and clang goes a step ahead to flag void foo() as well it should be void foo(void) Signed-off-by: Khem Raj Cc: Martin Jansa

krb5: fix build with gcc-15

2025-03-25T21:57:20+00:00

* fixes: http://errors.yoctoproject.org/Errors/Details/848727/ ss_internal.h:88:6: error: conflicting types for 'ss_delete_info_dir'; have 'void(void)' 88 | void ss_delete_info_dir(); | ^~~~~~~~~~~~~~~~~~ ... Signed-off-by: Martin Jansa Signed-off-by: Khem Raj

krb5: fix CVE-2025-24528

2025-03-25T21:57:20+00:00

In MIT krb5 release 1.7 and later with incremental propagation enabled, an authenticated attacker can cause kadmind to write beyond the end of the mapped region for the iprop log file, likely causing a process crash. Reference: https://security-tracker.debian.org/tracker/CVE-2025-24528 Upstream-patch: https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0 Signed-off-by: Divya Chellam Signed-off-by: Khem Raj

krb5: fix CVE-2024-26458 and CVE-2024-26461

2024-08-24T05:35:10+00:00

CVE-2024-26458: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. CVE-2024-26461: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c. References: https://nvd.nist.gov/vuln/detail/CVE-2024-26458 https://nvd.nist.gov/vuln/detail/CVE-2024-26461 Upstream Patch: https://github.com/krb5/krb5/commit/c5f9c816107f70139de11b38aa02db2f1774ee0d Signed-off-by: Yogita Urade Signed-off-by: Khem Raj

krb5: upgrade 1.21.2 -> 1.21.3

2024-07-04T03:20:16+00:00

CVEs Fixed CVE-2024-37370, CVE-2024-37371 Release Notes: https://web.mit.edu/kerberos/krb5-1.21/krb5-1.21.3.html Signed-off-by: Vijay Anusuri Signed-off-by: Khem Raj

recipes: Start WORKDIR -> UNPACKDIR transition

2024-05-23T15:44:44+00:00

Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj

krb5: upgrade 1.20.2 -> 1.21.2

2024-03-02T00:37:55+00:00

License-Update: Update copyright years to 2023 Release Notes: https://web.mit.edu/kerberos/krb5-1.21/README-1.21.2.txt Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

krb5: use PACKAGE_BEFORE_PN

2024-01-04T19:17:26+00:00

The 'krb5-config' tool should be in ${PN}-dev (as intented by binconfig class). Use PACKAGE_BEFORE_PN for extra packages so that -dev is handled before -user. Signed-off-by: Enrico Scholz Signed-off-by: Khem Raj

krb5: Upgrade 1.20.1 -> 1.20.2

2023-09-07T15:22:43+00:00

Release Notes: https://web.mit.edu/kerberos/krb5-1.20/krb5-1.20.2.html - Fix potential uninitialized pointer free in kadm5 XDR parsing [CVE-2023-36054]. - Fix read overruns in SPNEGO parsing. - Compatibility fix for autoconf 2.72. License-Update: Update copyright years to 2023 [https://github.com/krb5/krb5/commit/a273d4d1987dba088e51001d4119759b32b89190] Removed patch - 0001-Fix-aclocal.m4-syntax-error-for-autoconf-2.72.patch as it is fixed in upgraded version. Signed-off-by: Soumya Sambu Signed-off-by: Khem Raj

krb5: Fix build with autoconf 2.72

2023-03-31T17:42:43+00:00

Fixes checking for IPv6 compile-time support without -DINET6... ./configure: line 10004: syntax error near unexpected token `;;' Signed-off-by: Khem Raj