[ol9_u1_baseos_base] krb5-server-1.19.1-22.0.1.el9.x86_64

Name:	krb5-server
Version:	1.19.1
Release:	22.0.1.el9
Architecture:	x86_64
Group:	Unspecified
Size:	776024
License:	MIT
RPM:	krb5-server-1.19.1-22.0.1.el9.x86_64.rpm
Source RPM:	krb5-1.19.1-22.0.1.el9.src.rpm
Build Date:	Tue Oct 04 2022
Build Host:	build-ol9-x86_64.oracle.com
Vendor:	Oracle America
URL:	https://web.mit.edu/kerberos/www/
Summary:	The KDC and related programs for Kerberos 5
Description:	Kerberos is a network authentication system. The krb5-server package contains the programs that must be installed on a Kerberos 5 key distribution center (KDC). If you are installing a Kerberos 5 KDC, you need to install this package (in other words, most people should NOT install this package).

Changelog (Show File list) (Show related packages)

Thu Sep 29 2022 EL Errata <el-errata_ww@oracle.com> - 1.19.1-22.0.1
```
- Fixed race condition in krb5_set_password() [Orabug: 33609767]
```

Fri Jul 08 2022 Julien Rische <jrische@redhat.com> - 1.19.1-22

- Restore "supportedCMSTypes" attribute in PKINIT preauth requests
- Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
- Resolves: rhbz#2068935

Thu Jun 23 2022 Julien Rische <jrische@redhat.com> - 1.19.1-21

- Fix libkrad client cleanup
- Allow use of larger RADIUS attributes in krad library
- Resolves: rhbz#2100351

Thu May 12 2022 Julien Rische <jrische@redhat.com> - 1.19.1-20

- Fix OpenSSL 3 MD5 encyption in FIPS mode
- Allow libkrad UDP/TCP connection to localhost in FIPS mode
- Resolves: rhbz#2068458

Mon May 02 2022 Julien Rische <jrische@redhat.com> - 1.19.1-19

- Use p11-kit as default PKCS11 module
- Resolves: rhbz#2030981

Tue Apr 26 2022 Julien Rische <jrische@redhat.com> - 1.19.1-18

- Try harder to avoid password change replay errors
- Resolves: rhbz#2075186

Mon Mar 14 2022 Julien Rische <jrische@redhat.com> - 1.19.1-15
```
- Use SHA-256 instead of SHA-1 for PKINIT CMS digest
```

Thu Feb 24 2022 Julien Rische <jrische@redhat.com> - 1.19.1-14

- Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
- Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode

Fri Dec 17 2021 Antonio Torres <antorres@redhat.com> - 1.19.1-13
```
- Remove -specs= from krb5-config output
- Resolves #1997021
```

Wed Oct 20 2021 Antonio Torres <antorres@redhat.com> - 1.19.1-12

- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997602