Debian Patches

Status for heimdal/7.8.git20221117.28daf24+dfsg-8

Patch Description Author Forwarded Bugs Origin Last update
nfs_des nfs_des
=== modified file 'kdc/kerberos5.c'
Brian May <bam@debian.org> no 2017-04-26
021_debian Debian
=== modified file 'doc/setup.texi'
Brian May <bam@debian.org> no 2017-04-26
022_openafs OpenAFS
===================================================================
Brian May <bam@debian.org> no 2017-04-26
025_krb5-config-paths krb5-config-paths
=== modified file 'a/tools/krb5-config.in'
Brian May <bam@debian.org> no 2017-04-26
025_pthreads pthreads
=== modified file 'cf/pthreads.m4'
Brian May <bam@debian.org> no 2017-04-26
030_pkg-config-paths pkg-config-paths
=== modified file 'tools/heimdal-gssapi.pc.in'
Brian May <bam@debian.org> no 2017-04-26
installsh installsh
===================================================================
Brian May <bam@debian.org> no 2017-04-26
041_hurd_maxhostnamelen hurd_maxhostnamelen Brian May <bam@debian.org> no 2017-04-26
042_hurd_path_max hurd_path_max Brian May <bam@debian.org> no 2017-04-26
046_hurd_sundevdata hurd sundevdata Brian May <bam@debian.org> no 2017-04-26
047_link_gssapi Link Gssapi
Link against just build gssapi, instead of the system one this resolves
FTBFS when gssapi adds new symbols.
Dimitri John Ledkov <xnox@ubuntu.com> no 2017-04-26
060_no_build_string No build string
Remove hostname and build time from version as they make the build
unreproducible
Jelmer Vernooij <jelmer@debian.org> no 2017-04-26
parallel-build Parallel build Brian May <bam@debian.org> no 2017-04-26
disable_iprop Disable iprop Brian May <bam@debian.org> no 2017-04-26
disable_rpath Disable use of rpath in krb5-config.heimdal
See https://bugs.debian.org/868840

This also solves another issue:

Disable use of @CANONICAL_HOST@, which is not reproducible.
https://github.com/heimdal/heimdal/issues/237
Brian May <bam@debian.org> no 2017-04-26
0016-Add-back-in-base64_encode-and-base64_decode.patch Add back in base64_encode and base64_decode
These functions were removed upstream. See
https://github.com/heimdal/heimdal/issues/107

Unfortunately the SONAME was not incremented for libroken. This could
cause breakage. This change reintroduces the old names until the SONAME
can be incremented.
Brian May <brian@linuxpenguins.xyz> no 2017-04-26
fix-missing-headers fix-missing-headers
===================================================================
Brian May <bam@debian.org> no 2019-12-16
0018-Increment-roken-library-version.patch Increment roken library version Brian May <bam@debian.org> no 2022-11-24
0019-Increment-hcrypto-library-version.patch Increment hcrypto library version Brian May <bam@debian.org> no 2022-11-24
CVE-2022-45142-gsskrb5-fix-accidental-logic-inversio.patch [PATCH] CVE-2022-45142: gsskrb5: fix accidental logic inversions
The referenced commit attempted to fix miscompilations with gcc-9 and
gcc-10 by changing `memcmp(...)` to `memcmp(...) != 0`. Unfortunately,
it also inverted the result of the comparison in two occasions. This
inversion happened during backporting the patch to 7.7.1 and 7.8.0.

for arcfour unwrap")
Helmut Grohne <helmut@subdivi.de> no 2023-02-05
0021-Add-missing-initialization-of-kdc_offset-in-kcm.patch Add missing initialization of kdc_offset in kcm
In KCM, when allocating new kcm_ccache struct, there is missing inicialization
of kdc_offset. It is getting random values in my case and stored tickets are
unusable, last time I got this value to "klist -v": KDC time offset: 61 years
11 months 2 weeks 3 days 5 hours 28 minutes 32 seconds This commit seems to
correct it.
Pavel Semerad <semeradp@gmail.com> no 2018-07-16
0022-Always-build-rk_strlcat-and-rk_strlcpy-symbols.patch Always build rk_strlcat and rk_strlcpy symbols Brian May <bam@debian.org> no 2023-12-22
0023-cf-Include-string.h-for-memset-in-AC_HAVE_STRUCT_FIE.patch cf: Include <string.h> for memset in AC_HAVE_STRUCT_FIELD
Otherwise, the check relies on an implicit function declaration,
and will fail unconditionally with compilers that do not support
them.
Florian Weimer <fweimer@redhat.com> no 2023-04-13
0024-cf-Do-not-use-headers-and-argument-lists-in-AC_FIND_.patch cf: Do not use headers and argument lists in AC_FIND_FUNC_NO_LIBS2
The callers of this macro generally do not supply this information.
Without it, the checks rely on compiler support for implicit function
declarations. It would be possible to supply this information in
the callers. But even then, with the existing macro interface, it
would be necessary to pass eg. null pointers where they trigger
undefined behavior. Therefore, use the same kludge that autoconf
uses to make up prototypes, avoiding those implicit function
declarations.

The includes/arguments macro parameters are now ignored, but preserved
for interface compatibility.
Florian Weimer <fweimer@redhat.com> no 2023-04-13
add-include-support-1.patch add-include-support-1
commit fe43be85587f834266623adb0ecf2793d212a7ca

Add include/includedir directives for krb5.conf
Nicolas Williams <nico@twosigma.com> no debian upstream, https://github.com/heimdal/heimdal/commit/fe43be85587f834266623adb0ecf2793d212a7ca 2024-07-01
add-include-support-2.patch add-include-support-2
commit 0259f1c44927ab8f5906212804693dec48c9a04a

Fix CR comments on include/includedir
Nicolas Williams <nico@twosigma.com> no debian upstream, https://github.com/heimdal/heimdal/commit/0259f1c44927ab8f5906212804693dec48c9a04a 2024-07-05
add-include-support-3.patch add-include-support-3
commit 23ee804e9d23ed83a3a502501dbe5fe50ab9094a

lib/krb5: krb5_config_parse_file_multi use after free

If the file is not a regular file, the 'fname' buffer will be freed
before it is passed to the krb5_set_error_message() routine. That
this is true is not obvious from code inspection but 'newfname'
and 'fname' refer to the same memory.

Change-Id: I7780eae9ceaf01b245df488a2f7d7f406770864f
Jeffrey Altman <jaltman@secure-endpoints.com> no debian upstream, https://github.com/heimdal/heimdal/commit/23ee804e9d23ed83a3a502501dbe5fe50ab9094a 2024-07-05
add-include-support-4.patch add-include-support-4
commit 96641e12ba61806201f420fe880888047ebd5402

Canonicalize $srcdir in configure.ac

For krb5.conf include/includedir we want to reject non-absolute paths,
but then we need to make sure that we use absolute paths in the tests,
otherwise they fail. Of course ./configure has been defaulting to
relative paths for $srcdir and $objdir. This commit canonicalizes
$srcdir; eventually, no doubt, we'll have to canonicalize $objdir too.
Nicolas Williams <nico@twosigma.com> no debian upstream, https://github.com/heimdal/heimdal/commit/96641e12ba61806201f420fe880888047ebd5402 2024-07-05
fix-build-with-autoconf-272.patch [PATCH] cf/largefile.m4: Fix build with autoconf-2.72
Fixes https://github.com/heimdal/heimdal/issues/1201
Bernd Kuhls <bernd@kuhls.net> no 2024-02-10

All known versions for source package 'heimdal'

Links