--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-30fd5a80a8
2022-11-25 01:03:15.551582
--------------------------------------------------------------------------------
Name : heimdal
Product : Fedora EPEL 7
Version : 7.7.1
Release : 1.el7
URL :
http://www.heimdal.software/
Summary : A Kerberos 5 implementation without export restrictions
Description :
Kerberos 5 is a network authentication and single sign-on system.
Heimdal is a free Kerberos 5 implementation without export restrictions
written from the spec (rfc1510 and successors) including advanced features
like thread safety, IPv6, master-slave replication of Kerberos Key
Distribution Center server and support for ticket delegation (S4U2Self,
S4U2Proxy).
This package can coexist with MIT Kerberos 5 packages. Hesiod is disabled
by default since it is deemed too big a security risk by the packager.
--------------------------------------------------------------------------------
Update Information:
This release fixes the following Security Vulnerabilities: * CVE-2022-42898 PAC
parse integer overflows * CVE-2022-3437 Overflows and non-constant time leaks in
DES{,3} and arcfour * CVE-2022-41916 Fix Unicode normalization read of 1 bytes
past end of array * CVE-2021-44758 NULL dereference DoS in SPNEGO acceptors *
CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ
* CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec Note that
CVE-2022-44640 is a severe vulnerability, possibly a 10.0 on the Common
Vulnerability Scoring System (CVSS) v3.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 16 2022 Alexander Bostr��m <abo(a)root.snowtree.se> - 7.7.1-1
- Update to 7.7.1
- Remove upstreamed patch
- Replace patch with sed command
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.7.0-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.7.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.7.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Apr 13 2021 Alexander Bostr��m <abo(a)root.snowtree.se> - 7.7.0-9
- Backport autoconf-2.70 fix
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.7.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.7.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Mar 31 2020 Alexander Bostr��m <abo(a)root.snowtree.se> - 7.7.0-6
- Do not buildrequire openldap-servers on RHEL8+
* Sat Mar 21 2020 Alexander Bostr��m <abo(a)root.snowtree.se> - 7.7.0-5
- Add Python 3 code patch
- Use Python 3 binary path
- BuildRequire Python 3
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.7.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Fri Jan 17 2020 Jeff Law <law(a)redhat.com> - 7.7.0-3
- Fix configure tests compromised by LTO
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update heimdal' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------