[ol7_latest] krb5-workstation-1.15.1-55.0.7.el7_9.x86_64

Name:	krb5-workstation
Version:	1.15.1
Release:	55.0.7.el7_9
Architecture:	x86_64
Group:	System Environment/Base
Size:	2651471
License:	MIT
RPM:	krb5-workstation-1.15.1-55.0.7.el7_9.x86_64.rpm
Source RPM:	krb5-1.15.1-55.0.7.el7_9.src.rpm
Build Date:	Thu Nov 28 2024
Build Host:	build-ol7-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://web.mit.edu/kerberos/www/
Summary:	Kerberos 5 programs for use on workstations
Description:	Kerberos is a network authentication system. The krb5-workstation package contains the basic Kerberos programs (kinit, klist, kdestroy, kpasswd). If your network uses Kerberos, this package should be installed on every workstation.

Changelog (Show File list) (Show related packages)

Mon Nov 11 2024 Sourav Sharma <sourav.ss.sharma@oracle.com> - 1.15.1-55.0.7

- libkrad: implement support for Message-Authenticator (CVE-2024-3596) [Orabug: 37241077]

Wed Oct 30 2024 Mridula Shastry <mridula.c.shastry@oracle.com> - 1.15.1-55.0.5
```
- Add CVE numbers to the changelog entry for version 1.15.1-55.0.3
```

Mon Aug 19 2024 Mridula Shastry <mridula.c.shastry@oracle.com> - 1.15.1-55.0.3

- Length check when parsing GSS token encapsulation [Orabug: 36927256]
- Add a simple DER support header [Orabug: 36927256]
- Fix vulnerabilities in GSS message token handling [Orabug: 36927256] (CVE-2024-37370 CVE-2024-37371)

Mon Nov 28 2022 Darren Archibald <darren.archibald@oracle.com> - 1.15.1-55.0.1
```
- Add recursion limit for ASN.1 indefinite lengths [Orabug: 32582360]
```

Tue Nov 08 2022 Julien Rische <jrische@redhat.com> - 1.15.1-55

- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961

Wed Apr 27 2022 Julien Rische <jrische@redhat.com> - 1.15.1-54

- Try harder to avoid password change replay errors
- Resolves: #2063163

Thu Apr 07 2022 Julien Rische <jrische@redhat.com> - 1.15.1-53

- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319

Wed Oct 20 2021 Antonio Torres <antorres@redhat.com> - 1.15.1-51

- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599

Mon Apr 06 2020 Robbie Harwood <rharwood@redhat.com> - 1.15.1-50

- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492

Mon Apr 06 2020 Robbie Harwood <rharwood@redhat.com> - 1.15.1-49

- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492