summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJeremy Olexa <darkside@gentoo.org>2010-04-30 22:17:14 +0000
committerJeremy Olexa <darkside@gentoo.org>2010-04-30 22:17:14 +0000
commitcc23c30774e835d83b33c35da72426d06172c0c7 (patch)
tree9f7770aee5287744dda745f44f441344f8520d1e /app-crypt/mit-krb5/files
parentAutomated update of use.local.desc (diff)
downloadhistorical-cc23c30774e835d83b33c35da72426d06172c0c7.tar.gz
historical-cc23c30774e835d83b33c35da72426d06172c0c7.tar.bz2
historical-cc23c30774e835d83b33c35da72426d06172c0c7.zip
Version bump by Eray Aslan, security bug 312481
Package-Manager: portage-2.1.8.3/cvs/Linux armv7l
Diffstat (limited to 'app-crypt/mit-krb5/files')
-rw-r--r--app-crypt/mit-krb5/files/CVE-2010-1320.patch20
1 files changed, 20 insertions, 0 deletions
diff --git a/app-crypt/mit-krb5/files/CVE-2010-1320.patch b/app-crypt/mit-krb5/files/CVE-2010-1320.patch
new file mode 100644
index 000000000000..bb6261f48144
--- /dev/null
+++ b/app-crypt/mit-krb5/files/CVE-2010-1320.patch
@@ -0,0 +1,20 @@
+diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c
+index b2f0655..76ca94a 100644
+--- a/src/kdc/do_tgs_req.c
++++ b/src/kdc/do_tgs_req.c
+@@ -543,6 +543,7 @@ tgt_again:
+ to the caller */
+ ticket_reply = *(header_ticket);
+ enc_tkt_reply = *(header_ticket->enc_part2);
++ enc_tkt_reply.authorization_data = NULL;
+ clear(enc_tkt_reply.flags, TKT_FLG_INVALID);
+ }
+
+@@ -554,6 +555,7 @@ tgt_again:
+ to the caller */
+ ticket_reply = *(header_ticket);
+ enc_tkt_reply = *(header_ticket->enc_part2);
++ enc_tkt_reply.authorization_data = NULL;
+
+ old_life = enc_tkt_reply.times.endtime - enc_tkt_reply.times.starttime;
+