[ol8_baseos_latest] krb5-pkinit-1.18.2-14.0.1.el8.x86_64

Kerberos is a network authentication system. The krb5-pkinit
package contains the PKINIT plugin, which allows clients
to obtain initial credentials from a KDC using a private key and a
certificate.

Changelog (Show File list) (Show related packages)

• Wed Mar 30 2022 Nishant Nayan <nishant.nayan@oracle.com> - 1.18.2-14.0.1

  - Try harder to avoid password change replay errors [Orabug: 33609767]
  - Reverting the initial fix as this fix is MIT approved.
  - Initial fix was to toggle between udp and tcp using change_pw_no_udp option.

• Wed Aug 25 2021 Robbie Harwood <rharwood@redhat.com> - 1.18.2-14

  - Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
  - Resolves: #1997601

• Tue Jul 20 2021 Robbie Harwood <rharwood@redhat.com> - 1.18.2-13

  - Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
  - Resolves: #1983729

• Thu Jun 10 2021 Robbie Harwood <rharwood@redhat.com> - 1.18.2-12

  - Backport KCM performance enablements
  - Resolves: #1956388

• Thu Jun 10 2021 Robbie Harwood <rharwood@redhat.com> - 1.18.2-11

  - Add APIs for marshalling credentials
  - Resolves: #1964619

• Mon May 03 2021 Robbie Harwood <rharwood@redhat.com> - 1.18.2-10

  - Update tmpfiles dropin to use /run instead of /var/run
  - Resolves: #1945679

• Tue Apr 20 2021 Robbie Harwood <rharwood@redhat.com> - 1.18.2-9

  - Add support for start_realm cache config
  - Resolves: #1901195

• Wed Dec 16 2020 Robbie Harwood <rharwood@redhat.com> - 1.18.2-8

  - Add recursion limit for ASN.1 indefinite lengths (CVE-2020-28196)
  - Resolves: #1906492

• Tue Nov 24 2020 Robbie Harwood <rharwood@redhat.com> - 1.18.2-7

  - Document -k option in kvno(1) synopsis
  - Resolves: #1869055

• Wed Oct 21 2020 Robbie Harwood <rharwood@redhat.com> - 1.18.2-6

  - Enable MD5 override for FIPS RADIUS
  - Resolves: #1872689