[ol8_baseos_latest] krb5-pkinit-1.18.2-25.0.1.el8_8.aarch64

Kerberos is a network authentication system. The krb5-pkinit
package contains the PKINIT plugin, which allows clients
to obtain initial credentials from a KDC using a private key and a
certificate.

Changelog (Show File list) (Show related packages)

• Fri Jul 14 2023 Akshata Konala <akshata.konala@oracle.com> - 1.18.2-25.0.1

  - Fixed race condition in krb5_set_password() [Orabug: 33609767]

• Thu Jul 06 2023 Julien Rische <jrische@redhat.com> - 1.18.2-25

  - Bump release number

• Wed Jul 05 2023 Julien Rische <jrische@redhat.com> - 1.18.2-24

  - Remove downloadable source signature file
  - Resolves: rhbz#2219654

• Wed May 31 2023 Julien Rische <jrische@redhat.com> - 1.18.2-23

  - Support PAC with KDC extended signature and without ticket signature
  - Resolves: rhbz#2169477

• Tue Nov 08 2022 Julien Rische <jrische@redhat.com> - 1.18.2-22

  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140968

• Fri Jul 01 2022 Julien Rische <jrische@redhat.com> - 1.18.2-21

  - Backport fix of memory use after free during libkrad cleanup
  - Backport support for larger RADIUS attributes in libkrad
  - Resolves: rhbz#2103125

• Wed Apr 27 2022 Julien Rische <jrische@redhat.com> - 1.18.2-19

  - Try harder to avoid password change replay errors
  - Resolves: #2077563

• Wed Apr 13 2022 Julien Rische <jrische@redhat.com> - 1.18.2-18

  - Fix kprop for propagating dump files larger than 4GB
  - Resolves: #2026462

• Mon Mar 21 2022 Julien Rische <jrische@redhat.com> - 1.18.2-15

  - Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
  - Resolves: #2066316

• Wed Aug 25 2021 Robbie Harwood <rharwood@redhat.com> - 1.18.2-14

  - Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
  - Resolves: #1997601