Fabrice Fontaine 5b4b4d16e1 package/libkrb5: fix CVE-2021-37750 ...

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before
1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in
kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit b9646b18bf46a91b9b3b21b41d8b89fd9f4d5d52)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2021-09-27 21:31:41 +02:00

..

0001-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch

package/libkrb5: fix CVE-2021-37750

2021-09-27 21:31:41 +02:00

Config.in

…

libkrb5.hash

…

libkrb5.mk

package/libkrb5: fix CVE-2021-37750

2021-09-27 21:31:41 +02:00