krb5-client-1.6.3-132.7.1<>,9K,I/=„dt ?keH֛u ,Ty42oUWs:'ۓ,7ve-"5M:>v.V-Ld`Na[T7M;am#ɔ_ΘJ؛}.a%qȲCf4m4ҫJ C$X&qKԫ0;BUr2ܶuM}*9 .^mi/_ P<=T2YK%źIZ.JrzX*2@,웺F91+?1d  K =^dl  <  ^  ( , w( 8 89 8:8B,F,G-H-hI-X-Y-Z.[.\.].|^/wb/c0d0e0f0k0l0z1 Ckrb5-client1.6.3132.7.1MIT Kerberos5 implementation - client programsKerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. This package includes some required client programs, like kinit, kadmin, ... Authors: -------- The MIT Kerberos Team Sam Hartman Ken Raeburn Tom Yu KldrnekopenSUSE 11.1openSUSEX11/MIThttp://bugs.opensuse.orgProductivity/Networking/Securityhttp://web.mit.edu/kerberos/www/linuxi586&PWPV&x&`6z0G  C8 lAAA큤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../lib/mit/bin/kinit../lib/mit/bin/klistrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkrb5-1.6.3-132.7.1.src.rpmheimdal-toolsheimdal-x11krb5-clientJJ@@@@@@@@@@@@@@@@@@@@@@@@@@Jrpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)/bin/shlibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libcom_err.so.2libdes425.so.3libdl.so.2libgssapi_krb5.so.2libgssrpc.so.4libk5crypto.so.3libk5crypto.so.3(k5crypto_3_MIT)libkadm5clnt.so.5libkadm5clnt.so.5(kadm5clnt_5_MIT)libkeyutils.so.1libkrb4.so.2libkrb4.so.2(krb4_2_MIT)libkrb5.so.3libkrb5.so.3(krb5_3_MIT)libkrb5support.so.0libkrb5support.so.0(krb5support_0_MIT)libresolv.so.2libss.so.2rpmlib(PayloadIsLzma)4.0-13.0.4-14.4.2-14.4.2.3KP@K?I@I3IImIAI?@I HHH@HXH*@G@GGhGbp@GUA@G0W@G@FwF@FFޚ@F^FF@FFq-Fm9@FAF9F,F&@F#e@FF @E@E݅Eّ@Eb@EEE@E@E@EI@EO#EAEDDq@D+@DĶ@Dmc@suse.demc@suse.demc@suse.demc@suse.demc@suse.deolh@suse.demc@suse.deolh@suse.deolh@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.dero@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.desschober@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.demc@suse.de- fix kadmind denial of service (bnc#591049) CVE-2010-0629- fix integer underflow in AES and RC4 decryption CVE-2009-4212, MITKRB5-SA-2009-004 (bnc#561351)- integrate new patches for CVE-2009-0844 and CVE-2009-0845 (bnc#486722)- more Kerberos denial of service issue fixed (bnc#486722) CVE-2009-0844, CVE-2009-0847 (integrate krb5-1.6-fix-DoS-CVE-2009-0845.dif into krb5-1.6-MITKRB5-SA-2009-001.dif) - fix krb5 code exec (bnc#486723) CVE-2009-0846- fix Kerberos denial of service issue (bnc#485894) CVE-2009-0845- obsolete also old heimdal-lib-XXbit and heimdal-devel-XXbit- do not query IPv6 addresses if no IPv6 address exists on this host [bnc#449143]- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293)- obsolete old -XXbit packages (bnc#437293)- in case we use ldap as database backend, ldap should be started before krb5kdc- add new fixes to post 1.6.3 patch * fix mem leak in krb5_gss_accept_sec_context() * keep minor_status * kadm5_decrypt_key: A ktype of -1 is documented as meaning "to be ignored" * Reject socket fds > FD_SETSIZE- add patches from SVN post 1.6.3 * krb5_string_to_keysalts: Fix an infinite loop * fix some mutex issues * better recovery from corrupt rcache files * some more small fixes- add case-insensitive.dif (FATE#300771) - minor fixes for ktutil man page - reduce rpmlint warnings- Fall back to TCP on kdc-unresolvable/unreachable errors. - restore valid sequence number before generating requests (fix changing passwords in mixed ipv4/ipv6 enviroments)- added baselibs.conf file to build xxbit packages for multilib support- modify krb5-config to not output rpath and cflags in --libs (bnc#378270)- fix two security bugs: * MITKRB5-SA-2008-001(CVE-2008-0062, CVE-2008-0063) fix double free [bnc#361373] * MITKRB5-SA-2008-002(CVE-2008-0947, CVE-2008-0948) Memory corruption while too many open file descriptors [bnc#363151] - change default config file. Comment out the examples.- fix several security bugs: * CVE-2007-5894 apparent uninit length * CVE-2007-5902 integer overflow * CVE-2007-5971 free of non-heap pointer and double-free * CVE-2007-5972 double fclose() [#346745, #346748, #346746, #346749, #346747]- improve GSSAPI error messages- add coreutils to PreReq- update to krb5 version 1.6.3 * fix CVE-2007-3999, CVE-2007-4743 svc_auth_gss.c buffer overflow * fix CVE-2007-4000 modify_policy vulnerability * Add PKINIT support - remove patches which are upstream now - enhance init scripts and xinetd profiles- update krb5-1.6.2-post.dif * If a KDC returns KDC_ERR_SVC_UNAVAILABLE, it appears that that the client library will not failover to the next KDC. [#310540]- update krb5-1.6.2-post.dif * new -S sname option for kvno * read_entropy_from_device on partial read will not fill buffer * Bail out if encoded "ticket" doesn't decode correctly. * patch for referrals loop- fix a problem with the originally published patch for MITKRB5-SA-2007-006 - CVE-2007-3999 [#302377]- fix execute arbitrary code (MITKRB5-SA-2007-006 - CVE-2007-3999,2007-4000) [#302377]- add krb5-1.6.2-post.dif * during the referrals loop, check to see if the session key enctype of a returned credential for the final service is among the enctypes explicitly selected by the application, and retry with old_use_conf_ktypes if it is not. * If mkstemp() is available, the new ccache file gets created but the subsequent open(O_CREAT|O_EXCL) call fails because the file was already created by mkstemp(). Apply patch from Apple to keep the file descriptor open.- update to version 1.6.2 - remove krb5-1.6.1-post.dif all fixes are included in this release- change requires to libcom_err-devel- update krb5-1.6.1-post.dif * fix leak in krb5_walk_realm_tree * rd_req_decoded needs to deal with referral realms * fix buffer overflow in kadmind (MITKRB5-SA-2007-005 - CVE-2007-2798) [#278689] * fix kadmind code execution bug (MITKRB5-SA-2007-004 - CVE-2007-2442 - CVE-2007-2443) [#271191]- fix unstripped-binary-or-object rpmlint warning- fixing rpmlint warnings and errors: * merged logrotate scripts kadmin and krb5kdc into a single file krb5-server. * moved heimdal2mit-DumpConvert.pl and simple_convert_krb5conf.pl from /usr/share/doc/packages/krb5 to /usr/lib/mit/helper. adapted krb5.spec and README.ConvertHeimdalMIT accordingly. * added surpression filter for "devel-file-in-non-devel-package /usr/lib/libgssapi_krb5.so" (see [#147912]). * set default runlevel of init scripts in chkconfig line to 3 and 5- fix uninitialized salt length - add extra check for keytab file- adding krb5-1.6.1-post.dif * fix segfault in krb5_get_init_creds_password * remove debug output in ftp client * profile stores empty string values without double quotes- update to final 1.6.1 version- add plugin directories to main package- update to version 1.6.1 Beta1 - remove obsolete patches (krb5-1.6-post.dif, krb5-1.6-patchlevel.dif) - rework compile_pie patch- update krb5-1.6-post.dif * fix kadmind stack overflow in krb5_klog_syslog (MITKRB5-SA-2007-002 - CVE-2007-0957) [#253548] * fix double free attack in the RPC library (MITKRB5-SA-2007-003 - CVE-2007-1216) [#252487] * fix krb5 telnetd login injection (MIT-SA-2007-001 - CVE-2007-0956) [#247765]- add ncurses-devel and bison to BuildRequires - rework some patches- move SuSEFirewall service definitions to /etc/sysconfig/SuSEfirewall2.d/services- add firewall definition to krb5-server, FATE #300687- update krb5-1.6-post.dif - move some applications into the right package- update krb5-1.6-post.dif- krb5-1.6-fix-passwd-tcp.dif and krb5-1.6-fix-sendto_kdc-memset.dif are now upstream. Remove patches. - fix leak in krb5_kt_resolve and krb5_kt_wresolve- fix "local variable used before set" in ftp.c [#237684]- krb5-devel should require keyutils-devel- update to version 1.6 * Major changes in 1.6 include * Partial client implementation to handle server name referrals. * Pre-authentication plug-in framework, donated by Red Hat. * LDAP KDB plug-in, donated by Novell. - remove obsolete patches- fix for kadmind (via RPC library) calls uninitialized function pointer (CVE-2006-6143)(Bug #225990) krb5-1.5-MITKRB5-SA-2006-002-fix-code-exec.dif - fix for kadmind (via GSS-API mechglue) frees uninitialized pointers (CVE-2006-6144)(Bug #225992) krb5-1.5-MITKRB5-SA-2006-003-fix-free-of-uninitialized-pointer.dif- Fix Requires in krb5-devel [Bug #231008]- fix "local variable used before set" [#217692] - fix strncat warning- add a default kadm5.dict file - require $network on daemon start- fix function call with too few arguments [#203837]- update to version 1.5.1 - remove obsolete patches which are now included upstream * krb5-1.4.3-MITKRB5-SA-2006-001-setuid-return-checks.dif * trunk-fix-uninitialized-vars.dif- krb5 setuid return check fixes krb5-1.4.3-MITKRB5-SA-2006-001-setuid-return-checks.dif [#182351]- remove update-messages- add check for krb5_prop in services to kpropd init script. [#192446]- update to version 1.5 * KDB abstraction layer, donated by Novell. * plug-in architecture, allowing for extension modules to be loaded at run-time. * multi-mechanism GSS-API implementation ("mechglue"), donated by Sun Microsystems * Simple and Protected GSS-API negotiation mechanism ("SPNEGO") implementation, donated by Sun Microsystems - remove obsolete patches and add some newheimdal-toolsheimdal-x11drnek 1270115506[k[iZZ\[[[[[Z[[[[(["[&[9Z[[$[4[B[.[*Z1.6.3-132.7.1kinitklistmitbinkdestroykinitklistkpasswdkrb524initkvnosbink5srvutilkadminktutilkdestroy.1.gzkerberos.1.gzkinit.1.gzklist.1.gzkpasswd.1.gzkrb524init.1.gzkvno.1.gz.k5login.5.gzkrb5.conf.5.gzk5srvutil.8.gzkadmin.8.gzktutil.8.gz/usr/bin//usr/lib//usr/lib/mit//usr/lib/mit/bin//usr/lib/mit/sbin//usr/share/man/man1//usr/share/man/man5//usr/share/man/man8/-march=i586 -mtune=i686 -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.suse.de/SUSE:openSUSE:11.1:Update:Test/standard/8af9a8ca5b87ebe4c56c19f6ca484ca6-krb5cpiolzma2i586i586-suse-linuxW+T7Ps5 X?p]"k%rv^/ꎝIR(,4r@jUSwխƛ?5ߏκ&`ˤTGtM`fT .5g+ϒ_.:|C6nDWNqH6C[ѺʇL֦h1g߱=SNDBZoȇr>M(aRԓDNɛWIv}v?RU4(4Jq"Gټ:,v9ؖ@2?2O\XDҠyL؛gS!6m#"Q_;ldMet%OURN|x;9k3El䲹4O-cGU⤑:T->m8M_%-@C r#"ȓ,w)Zlh&?i.1TLkf(:ɓ"G.#d3x7NG)'z׺uŋoxL{cE}::Ou vʟ dzOyt[&fGǂ3H(vV lz-C2_h| c8S+ '&]}+cAgOz?_`/Дӥ#` ܞF^^pVRKAcV2#SVAu{ fKTHog灄'G(.unSQ2[g4^8s2Lg9 f! br~>$@ *_fR}%kەܓVͧ 7$zFI )E3*g%t.gFƪ .=ej۵O<< m$(jvZM~C_F\ҍtxAA.rJǷe?BxTnvFLp/Zq̩n rE]Cm< ЅE 1c:dBr@Fy!erBZa`"!"`XBɉ/j šfn{bSVy8.tzV<|43^0