[ol9_baseos_latest] libkadm5-1.21.1-2.0.1.el9_4.aarch64

Name:	libkadm5
Version:	1.21.1
Release:	2.0.1.el9_4
Architecture:	aarch64
Group:	Unspecified
Size:	271662
License:	MIT
RPM:	libkadm5-1.21.1-2.0.1.el9_4.aarch64.rpm
Source RPM:	krb5-1.21.1-2.0.1.el9_4.src.rpm
Build Date:	Tue Sep 03 2024
Build Host:	build-ol9-aarch64.oracle.com
Vendor:	Oracle America
URL:	https://web.mit.edu/kerberos/www/
Summary:	Kerberos 5 Administrative libraries
Description:	Kerberos is a network authentication system. The libkadm5 package contains only the libkadm5clnt and libkadm5serv shared objects. This interface is not considered stable.

Changelog (Show File list) (Show related packages)

Tue Sep 03 2024 EL Errata <el-errata_ww@oracle.com> - 1.21.1-2.0.1
```
- Fixed race condition in krb5_set_password() [Orabug: 33609767]
```

Mon Jul 01 2024 Julien Rische <jrische@redhat.com> - 1.21.1-2

- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45401 RHEL-45390

Tue Aug 08 2023 Julien Rische <jrische@redhat.com> - 1.21.1-1

- New upstream version (1.21.1)
- Fix double-free in KDC TGS processing (CVE-2023-39975)
- Add support for "pac_privsvr_enctype" KDB string attribute
  Resolves: rhbz#2060421

Thu Jun 08 2023 Julien Rische <jrische@redhat.com> - 1.20.1-9

- Do not disable PKINIT if some of the well-known DH groups are unavailable
  Resolves: rhbz#2187722
- Make PKINIT CMS SHA-1 signature verification available in FIPS mode
  Resolves: rhbz#2155607
- Allow to set PAC ticket signature as optional
  Resolves: rhbz#2178298

Wed Feb 22 2023 Julien Rische <jrische@redhat.com> - 1.20.1-8

- Fix datetime parsing in kadmin on s390x
  Resolves: rhbz#2169985

Tue Feb 14 2023 Julien Rische <jrische@redhat.com> - 1.20.1-7

- Fix double free on kdb5_util key creation failure
  Resolves: rhbz#2166603

Tue Jan 31 2023 Julien Rische <jrische@redhat.com> - 1.20.1-6

- Add support for MS-PAC extended KDC signature (CVE-2022-37967)
  Resolves: rhbz#2165827

Thu Jan 19 2023 Julien Rische <jrische@redhat.com> - 1.20.1-5

- Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
- Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  Resolves: rhbz#2162461

Thu Jan 12 2023 Julien Rische <jrische@redhat.com> - 1.20.1-4

- Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
- Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  Resolves: rhbz#2068535

Tue Jan 10 2023 Julien Rische <jrische@redhat.com> - 1.20.1-2

- Strip debugging data from ksu executable file
  Resolves: rhbz#2159643