Fabrice Fontaine b1c3ba5d8b package/libkrb5: fix CVE-2021-37750 ...

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before
1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in
kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit b9646b18bf)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2021-09-27 21:31:06 +02:00

..

0001-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch

…

Config.in

…

libkrb5.hash

…

libkrb5.mk

…