回合上游社区补丁,补丁数量：5

<table><tbody><tr><td>软件包</td><td>commitid</td><td>描述</td><td>分析人</td></tr><tr><td>openEuler:krb5</td><td>6f8292ca20bddf1de23b9f525e54a3a674c46b8b</td><td>Fix typo in AS-REQ client code
Add a missing else to init_creds_step_request. The mistake washarmless because optimistic preauth can only be present for the firststep, and the other conditions can only be true after the statemachine has processed an error reply.

Ensure that xdr_krb5_key_data

【是否新引入rpm包，是否进行了安全编译选项扫描】

否

【定位分析】

回合社区补丁

<table><tbody><tr><td>软件包</td><td>commitid</td><td>描述</td></tr><tr><td>openEuler:krb5</td><td>6f8292ca20bddf1de23b9f525e54a3a674c46b8b</td><td>Fix typo in AS-REQ client code
Add a missing else to init_creds_step_request. The mistake washarmless because optimistic preauth can only be present for the firststep, and the other conditions can only be true after the statemachine has processed an error reply.
[ghudson@mit.edu: rewrote commit message]</td></tr><tr><td>openEuler:krb5</td><td>e195747d2f8a8e1cd1694d768dba9265439228d0</td><td>Check lengths in xdr_krb5_key_data
Ensure that xdr_krb5_key_data
ticket: 9172 
Ensure that kadm5_chpass_principal_3</td></tr><tr><td>openEuler:krb5</td><td>8456b1f0f55fbb42f983df1418c65bef9c71ad66</td><td>Fix correctness in LDAP delegation ACL checking
The LDAP KDB module synthesizes KR_TL_CONSTRAINED_DELEGATION_ACLtl-data when fetching a principal entry, and checks against thosevalues in krb5_ldap_check_allowed_to_delegate on thevalue.</td></tr><tr><td>openEuler:krb5</td><td>edbd493a3ea5fcba195f65e142509a3cd1d73e83</td><td>Fix kdb5_util ark with no -e option
Avoid passing NULL to krb5_string_to_keysalt andcrashes.</td></tr></tbody></table>

【对外部是否有影响】

否

【是否修改引入】

<table><tbody><tr><td>该问题在当前版本是否修改引入可填写</td><td>写明引入单的DTS号并在此单关联，且立即知会版本经理或测试经理可填写</td></tr><tr><td>否</td><td>不涉及</td></tr></tbody></table>

**二、缺陷分析结构反馈**
影响性分析说明：

缺陷严重等级:(Critical/High/Moderate/Low)

缺陷根因说明:

受影响版本排查(受影响/不受影响):
openEuler-20.03-LTS-SP4
openEuler-22.03-LTS-SP3
openEuler-22.03-LTS-SP4
openEuler-24.03-LTS
openEuler-24.03-LTS-SP1
openEuler-24.03-LTS-SP2

修复是否涉及abi变化(是/否):
openEuler-20.03-LTS-SP4
openEuler-22.03-LTS-SP3
openEuler-22.03-LTS-SP4
openEuler-24.03-LTS
openEuler-24.03-LTS-SP1
openEuler-24.03-LTS-SP2

src-openEuler/krb5

Content Risk Flag

Comments (4)

src-openEuler/krb5 .gitee-modal { width: 500px !important; }

Content Risk Flag