| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: krb5-workstation | Distribution: CentOS |
| Version: 1.21.1 | Vendor: CentOS |
| Release: 1.el9 | Build date: Wed Aug 9 11:02:48 2023 |
| Group: Unspecified | Build host: x86-04.stream.rdu2.redhat.com |
| Size: 3003830 | Source RPM: krb5-1.21.1-1.el9.src.rpm |
| Packager: builder@centos.org | |
| Url: https://web.mit.edu/kerberos/www/ | |
| Summary: Kerberos 5 programs for use on workstations | |
Kerberos is a network authentication system. The krb5-workstation package contains the basic Kerberos programs (kinit, klist, kdestroy, kpasswd). If your network uses Kerberos, this package should be installed on every workstation.
MIT
* Tue Aug 08 2023 Julien Rische <jrische@redhat.com> - 1.21.1-1
- New upstream version (1.21.1)
- Fix double-free in KDC TGS processing (CVE-2023-39975)
- Add support for "pac_privsvr_enctype" KDB string attribute
Resolves: rhbz#2060421
* Thu Jun 08 2023 Julien Rische <jrische@redhat.com> - 1.20.1-9
- Do not disable PKINIT if some of the well-known DH groups are unavailable
Resolves: rhbz#2187722
- Make PKINIT CMS SHA-1 signature verification available in FIPS mode
Resolves: rhbz#2155607
- Allow to set PAC ticket signature as optional
Resolves: rhbz#2178298
* Wed Feb 22 2023 Julien Rische <jrische@redhat.com> - 1.20.1-8
- Fix datetime parsing in kadmin on s390x
Resolves: rhbz#2169985
* Tue Feb 14 2023 Julien Rische <jrische@redhat.com> - 1.20.1-7
- Fix double free on kdb5_util key creation failure
Resolves: rhbz#2166603
* Tue Jan 31 2023 Julien Rische <jrische@redhat.com> - 1.20.1-6
- Add support for MS-PAC extended KDC signature (CVE-2022-37967)
Resolves: rhbz#2165827
* Thu Jan 19 2023 Julien Rische <jrische@redhat.com> - 1.20.1-5
- Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
- Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
Resolves: rhbz#2162461
* Thu Jan 12 2023 Julien Rische <jrische@redhat.com> - 1.20.1-4
- Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
- Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
Resolves: rhbz#2068535
* Tue Jan 10 2023 Julien Rische <jrische@redhat.com> - 1.20.1-2
- Strip debugging data from ksu executable file
Resolves: rhbz#2159643
* Wed Dec 07 2022 Julien Rische <jrische@redhat.com> - 1.20.1-1
- Make tests compatible with sssd-client
Resolves: rhbz#2151513
- Remove invalid password expiry warning
Resolves: rhbz#2121099
- Update error checking for OpenSSL CMS_verify
Resolves: rhbz#2063838
- New upstream version (1.20.1)
Resolves: rhbz#2016312
- Fix integer overflows in PAC parsing (CVE-2022-42898)
Resolves: rhbz#2140971
* Tue Oct 18 2022 Julien Rische <jrische@redhat.com> - 1.19.1-23
- Fix kprop for propagating dump files larger than 4GB
Resolves: rhbz#2133014
* Fri Jul 08 2022 Julien Rische <jrische@redhat.com> - 1.19.1-22
- Restore "supportedCMSTypes" attribute in PKINIT preauth requests
- Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
Resolves: rhbz#2068935
* Thu Jun 23 2022 Julien Rische <jrische@redhat.com> - 1.19.1-21
- Fix libkrad client cleanup
- Allow use of larger RADIUS attributes in krad library
Resolves: rhbz#2100351
* Thu May 12 2022 Julien Rische <jrische@redhat.com> - 1.19.1-20
- Fix OpenSSL 3 MD5 encyption in FIPS mode
- Allow libkrad UDP/TCP connection to localhost in FIPS mode
Resolves: rhbz#2068458
* Mon May 02 2022 Julien Rische <jrische@redhat.com> - 1.19.1-19
- Use p11-kit as default PKCS11 module
Resolves: rhbz#2030981
* Tue Apr 26 2022 Julien Rische <jrische@redhat.com> - 1.19.1-18
- Try harder to avoid password change replay errors
Resolves: rhbz#2075186
* Mon Mar 14 2022 Julien Rische <jrische@redhat.com> - 1.19.1-15
- Use SHA-256 instead of SHA-1 for PKINIT CMS digest
* Thu Feb 24 2022 Julien Rische <jrische@redhat.com> - 1.19.1-14
- Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
- Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
* Fri Dec 17 2021 Antonio Torres <antorres@redhat.com> - 1.19.1-13
- Remove -specs= from krb5-config output
- Resolves rhbz#1997021
* Wed Oct 20 2021 Antonio Torres <antorres@redhat.com> - 1.19.1-12
- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
Resolves: rhbz#1997602
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.19.1-11.1
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
/etc/pam.d/ksu /usr/bin/k5srvutil /usr/bin/kadmin /usr/bin/kdestroy /usr/bin/kinit /usr/bin/klist /usr/bin/kpasswd /usr/bin/ksu /usr/bin/kswitch /usr/bin/ktutil /usr/bin/kvno /usr/lib/.build-id /usr/lib/.build-id/00 /usr/lib/.build-id/00/9a4d4dd1a326ca6ef48e403ee17fc452f7cc02 /usr/lib/.build-id/63 /usr/lib/.build-id/63/229788508848df8252f3996bbb5c8ce4d35f4c /usr/lib/.build-id/9b /usr/lib/.build-id/9b/d2e299ad64a3ef3af869b999a329a0de286ffe /usr/lib/.build-id/9c /usr/lib/.build-id/9c/5a9ac97a2a16b2a7f7c23241f2e165c3eacc37 /usr/lib/.build-id/aa /usr/lib/.build-id/aa/9a2ff48be43b152a95e70e52a75ca61712c410 /usr/lib/.build-id/b8 /usr/lib/.build-id/b8/acf784d15a6749c4c2501d689ccc451dc7854e /usr/lib/.build-id/e4 /usr/lib/.build-id/e4/0e8b9dbfe6ab46a8823e208a10415ebfaf7ac7 /usr/lib/.build-id/ee /usr/lib/.build-id/ee/4fd736134bc56ba3664733f1f5aeb837852254 /usr/lib/.build-id/f8 /usr/lib/.build-id/f8/c18ae302c54a910e894a4f5d43a5534c1e9610 /usr/share/doc/krb5-workstation /usr/share/doc/krb5-workstation/_static /usr/share/doc/krb5-workstation/_static/agogo.css /usr/share/doc/krb5-workstation/_static/basic.css /usr/share/doc/krb5-workstation/_static/bgfooter.png /usr/share/doc/krb5-workstation/_static/bgtop.png /usr/share/doc/krb5-workstation/_static/doctools.js /usr/share/doc/krb5-workstation/_static/documentation_options.js /usr/share/doc/krb5-workstation/_static/file.png /usr/share/doc/krb5-workstation/_static/jquery-3.5.1.js /usr/share/doc/krb5-workstation/_static/jquery.js /usr/share/doc/krb5-workstation/_static/kerb.css /usr/share/doc/krb5-workstation/_static/language_data.js /usr/share/doc/krb5-workstation/_static/minus.png /usr/share/doc/krb5-workstation/_static/plus.png /usr/share/doc/krb5-workstation/_static/pygments.css /usr/share/doc/krb5-workstation/_static/searchtools.js /usr/share/doc/krb5-workstation/_static/underscore-1.3.1.js /usr/share/doc/krb5-workstation/_static/underscore.js /usr/share/doc/krb5-workstation/about.html /usr/share/doc/krb5-workstation/admin /usr/share/doc/krb5-workstation/admin/admin_commands /usr/share/doc/krb5-workstation/admin/admin_commands/index.html /usr/share/doc/krb5-workstation/admin/admin_commands/k5srvutil.html /usr/share/doc/krb5-workstation/admin/admin_commands/kadmin_local.html /usr/share/doc/krb5-workstation/admin/admin_commands/kadmind.html /usr/share/doc/krb5-workstation/admin/admin_commands/kdb5_ldap_util.html /usr/share/doc/krb5-workstation/admin/admin_commands/kdb5_util.html /usr/share/doc/krb5-workstation/admin/admin_commands/kprop.html /usr/share/doc/krb5-workstation/admin/admin_commands/kpropd.html /usr/share/doc/krb5-workstation/admin/admin_commands/kproplog.html /usr/share/doc/krb5-workstation/admin/admin_commands/krb5kdc.html /usr/share/doc/krb5-workstation/admin/admin_commands/ktutil.html /usr/share/doc/krb5-workstation/admin/admin_commands/sserver.html /usr/share/doc/krb5-workstation/admin/advanced /usr/share/doc/krb5-workstation/admin/advanced/index.html /usr/share/doc/krb5-workstation/admin/advanced/retiring-des.html /usr/share/doc/krb5-workstation/admin/appl_servers.html /usr/share/doc/krb5-workstation/admin/auth_indicator.html /usr/share/doc/krb5-workstation/admin/backup_host.html /usr/share/doc/krb5-workstation/admin/conf_files /usr/share/doc/krb5-workstation/admin/conf_files/index.html /usr/share/doc/krb5-workstation/admin/conf_files/kadm5_acl.html /usr/share/doc/krb5-workstation/admin/conf_files/kdc_conf.html /usr/share/doc/krb5-workstation/admin/conf_files/krb5_conf.html /usr/share/doc/krb5-workstation/admin/conf_ldap.html /usr/share/doc/krb5-workstation/admin/database.html /usr/share/doc/krb5-workstation/admin/dbtypes.html /usr/share/doc/krb5-workstation/admin/dictionary.html /usr/share/doc/krb5-workstation/admin/enctypes.html /usr/share/doc/krb5-workstation/admin/env_variables.html /usr/share/doc/krb5-workstation/admin/host_config.html /usr/share/doc/krb5-workstation/admin/https.html /usr/share/doc/krb5-workstation/admin/index.html /usr/share/doc/krb5-workstation/admin/install.html /usr/share/doc/krb5-workstation/admin/install_appl_srv.html /usr/share/doc/krb5-workstation/admin/install_clients.html /usr/share/doc/krb5-workstation/admin/install_kdc.html /usr/share/doc/krb5-workstation/admin/lockout.html /usr/share/doc/krb5-workstation/admin/otp.html /usr/share/doc/krb5-workstation/admin/pkinit.html /usr/share/doc/krb5-workstation/admin/princ_dns.html /usr/share/doc/krb5-workstation/admin/realm_config.html /usr/share/doc/krb5-workstation/admin/spake.html /usr/share/doc/krb5-workstation/admin/troubleshoot.html /usr/share/doc/krb5-workstation/admin/various_envs.html /usr/share/doc/krb5-workstation/appdev /usr/share/doc/krb5-workstation/appdev/gssapi.html /usr/share/doc/krb5-workstation/appdev/h5l_mit_apidiff.html /usr/share/doc/krb5-workstation/appdev/index.html /usr/share/doc/krb5-workstation/appdev/init_creds.html /usr/share/doc/krb5-workstation/appdev/princ_handle.html /usr/share/doc/krb5-workstation/appdev/refs /usr/share/doc/krb5-workstation/appdev/refs/api /usr/share/doc/krb5-workstation/appdev/refs/api/index.html /usr/share/doc/krb5-workstation/appdev/refs/index.html /usr/share/doc/krb5-workstation/appdev/refs/macros /usr/share/doc/krb5-workstation/appdev/refs/macros/index.html /usr/share/doc/krb5-workstation/appdev/refs/types /usr/share/doc/krb5-workstation/appdev/refs/types/index.html /usr/share/doc/krb5-workstation/appdev/refs/types/krb5_int32.html /usr/share/doc/krb5-workstation/appdev/refs/types/krb5_ui_4.html /usr/share/doc/krb5-workstation/appdev/y2038.html /usr/share/doc/krb5-workstation/basic /usr/share/doc/krb5-workstation/basic/ccache_def.html /usr/share/doc/krb5-workstation/basic/date_format.html /usr/share/doc/krb5-workstation/basic/index.html /usr/share/doc/krb5-workstation/basic/keytab_def.html /usr/share/doc/krb5-workstation/basic/rcache_def.html /usr/share/doc/krb5-workstation/basic/stash_file_def.html /usr/share/doc/krb5-workstation/build /usr/share/doc/krb5-workstation/build/directory_org.html /usr/share/doc/krb5-workstation/build/doing_build.html /usr/share/doc/krb5-workstation/build/index.html /usr/share/doc/krb5-workstation/build/options2configure.html /usr/share/doc/krb5-workstation/build/osconf.html /usr/share/doc/krb5-workstation/build_this.html /usr/share/doc/krb5-workstation/convert-config-files /usr/share/doc/krb5-workstation/copyright.html /usr/share/doc/krb5-workstation/formats /usr/share/doc/krb5-workstation/formats/ccache_file_format.html /usr/share/doc/krb5-workstation/formats/cookie.html /usr/share/doc/krb5-workstation/formats/freshness_token.html /usr/share/doc/krb5-workstation/formats/index.html /usr/share/doc/krb5-workstation/formats/keytab_file_format.html /usr/share/doc/krb5-workstation/formats/rcache_file_format.html /usr/share/doc/krb5-workstation/genindex-K.html /usr/share/doc/krb5-workstation/genindex-R.html /usr/share/doc/krb5-workstation/genindex-all.html /usr/share/doc/krb5-workstation/genindex.html /usr/share/doc/krb5-workstation/index.html /usr/share/doc/krb5-workstation/krb5.conf /usr/share/doc/krb5-workstation/mitK5defaults.html /usr/share/doc/krb5-workstation/mitK5features.html /usr/share/doc/krb5-workstation/mitK5license.html /usr/share/doc/krb5-workstation/objects.inv /usr/share/doc/krb5-workstation/plugindev /usr/share/doc/krb5-workstation/plugindev/ccselect.html /usr/share/doc/krb5-workstation/plugindev/certauth.html /usr/share/doc/krb5-workstation/plugindev/clpreauth.html /usr/share/doc/krb5-workstation/plugindev/general.html /usr/share/doc/krb5-workstation/plugindev/gssapi.html /usr/share/doc/krb5-workstation/plugindev/hostrealm.html /usr/share/doc/krb5-workstation/plugindev/index.html /usr/share/doc/krb5-workstation/plugindev/internal.html /usr/share/doc/krb5-workstation/plugindev/kadm5_auth.html /usr/share/doc/krb5-workstation/plugindev/kadm5_hook.html /usr/share/doc/krb5-workstation/plugindev/kdcpolicy.html /usr/share/doc/krb5-workstation/plugindev/kdcpreauth.html /usr/share/doc/krb5-workstation/plugindev/localauth.html /usr/share/doc/krb5-workstation/plugindev/locate.html /usr/share/doc/krb5-workstation/plugindev/profile.html /usr/share/doc/krb5-workstation/plugindev/pwqual.html /usr/share/doc/krb5-workstation/resources.html /usr/share/doc/krb5-workstation/search.html /usr/share/doc/krb5-workstation/searchindex.js /usr/share/doc/krb5-workstation/services.append /usr/share/doc/krb5-workstation/user /usr/share/doc/krb5-workstation/user/index.html /usr/share/doc/krb5-workstation/user/pwd_mgmt.html /usr/share/doc/krb5-workstation/user/tkt_mgmt.html /usr/share/doc/krb5-workstation/user/user_commands /usr/share/doc/krb5-workstation/user/user_commands/index.html /usr/share/doc/krb5-workstation/user/user_commands/kdestroy.html /usr/share/doc/krb5-workstation/user/user_commands/kinit.html /usr/share/doc/krb5-workstation/user/user_commands/klist.html /usr/share/doc/krb5-workstation/user/user_commands/kpasswd.html /usr/share/doc/krb5-workstation/user/user_commands/krb5-config.html /usr/share/doc/krb5-workstation/user/user_commands/ksu.html /usr/share/doc/krb5-workstation/user/user_commands/kswitch.html /usr/share/doc/krb5-workstation/user/user_commands/kvno.html /usr/share/doc/krb5-workstation/user/user_commands/sclient.html /usr/share/doc/krb5-workstation/user/user_config /usr/share/doc/krb5-workstation/user/user_config/index.html /usr/share/doc/krb5-workstation/user/user_config/k5identity.html /usr/share/doc/krb5-workstation/user/user_config/k5login.html /usr/share/doc/krb5-workstation/user/user_config/kerberos.html /usr/share/man/man1/k5srvutil.1.gz /usr/share/man/man1/kadmin.1.gz /usr/share/man/man1/kdestroy.1.gz /usr/share/man/man1/kinit.1.gz /usr/share/man/man1/klist.1.gz /usr/share/man/man1/kpasswd.1.gz /usr/share/man/man1/ksu.1.gz /usr/share/man/man1/kswitch.1.gz /usr/share/man/man1/ktutil.1.gz /usr/share/man/man1/kvno.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Apr 24 05:07:23 2024