Xin LI f18a38a40c MFC r320906: MFV r320905: Import upstream fix for CVE-2017-11103. ...

In _krb5_extract_ticket() the KDC-REP service name must be obtained from
encrypted version stored in 'enc_part' instead of the unencrypted version
stored in 'ticket'.  Use of the unecrypted version provides an
opportunity for successful server impersonation and other attacks.

Submitted by:	hrs
Obtained from:	Heimdal
Security:	FreeBSD-SA-17:05.heimdal
Security:	CVE-2017-11103

2017-07-12 07:26:07 +00:00

..

asn1

…

com_err

…

gssapi

…

hdb

…

heimdal

…

hx509

MFC r304624: Remove duplicate symbol from libhx509 version-script.map

2017-04-03 19:57:05 +00:00

ipc

…

kadm5

…

kafs

…

krb5

MFC r320906: MFV r320905: Import upstream fix for CVE-2017-11103.

2017-07-12 07:26:07 +00:00

ntlm

…

roken

MFC r303156: Remove duplicate symbols from libroken version-script.map

2017-04-03 17:37:41 +00:00

sl

…

sqlite

…

vers

…

wind

…

Makefile.am

…

Makefile.in

…