freebsd-src/crypto/heimdal
Cy Schubert f8041e3628 Heimdal: Fix transit path validation CVE-2017-6594
Apply upstream b1e699103. This fixes a bug introduced by upstream
f469fc6 which may in some cases enable bypass of capath policy.

Upstream writes in their commit log:

    Note, this may break sites that rely on the bug.  With the bug some
    incomplete [capaths] worked, that should not have.  These may now break
    authentication in some cross-realm configurations.

Reported by:	emaste
Security:	CVE-2017-6594
Obtained from:	upstream b1e699103
MFC after:	1 week
2024-02-15 13:27:54 -08:00
..
admin heimdal: Fix multiple security vulnerabilities 2022-11-15 13:12:37 -08:00
appl Correct three typos in manuals. 2024-01-04 21:35:25 +01:00
base
doc heimdal: Fix man page and documentation typos 2024-01-04 10:35:59 -08:00
etc
include
kadmin heimdal: Properly ix bus fault when zero-length request received 2022-12-09 06:09:54 -08:00
kcm Correct three typos in manuals. 2024-01-04 21:35:25 +01:00
kdc Heimdal: Fix transit path validation CVE-2017-6594 2024-02-15 13:27:54 -08:00
kpasswd
kuser heimdal: Fix multiple security vulnerabilities 2022-11-15 13:12:37 -08:00
lib kerberos: Fix numerous segfaults when using weak crypto 2024-01-17 23:46:57 -08:00
tools
acinclude.m4
aclocal.m4
autogen.sh
ChangeLog
ChangeLog.1998
ChangeLog.1999
ChangeLog.2000
ChangeLog.2001
ChangeLog.2002
ChangeLog.2003
ChangeLog.2004
ChangeLog.2005
ChangeLog.2006
compile
config.guess
config.sub
configure
FREEBSD-Xlist
install-sh
krb5.conf
LICENSE
ltmain.sh
Makefile.am
Makefile.am.common
Makefile.in
missing
NEWS
README

Heimdal is a Kerberos 5 implementation.

For information how to install see <http://www.h5l.org/compile.html>.

There are briefer man pages for most of the commands.

Bug reports and bugs are appreciated, see more under Bug reports in
the manual on how we prefer them: <heimdal-bugs@h5l.org>.

For more information see the web-page at
<http://www.h5l.org/> or the mailing lists:

heimdal-announce@sics.se	low-volume announcement
heimdal-discuss@sics.se		high-volume discussion

send a mail to heimdal-announce-request@sics.se and
heimdal-discuss-request@sics.se respectively to subscribe.