| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search | 
| Name: krb5-server-ldap | Distribution: AlmaLinux | 
| Version: 1.21.1 | Vendor: AlmaLinux | 
| Release: 8.el9_6 | Build date: Tue Jun 24 14:43:47 2025 | 
| Group: Unspecified | Build host: ppc64le-builder01.almalinux.org | 
| Size: 421384 | Source RPM: krb5-1.21.1-8.el9_6.src.rpm | 
| Packager: AlmaLinux Packaging Team <packager@almalinux.org> | |
| Url: https://web.mit.edu/kerberos/www/ | |
| Summary: The LDAP storage plugin for the Kerberos 5 KDC | |
Kerberos is a network authentication system. The krb5-server package contains the programs that must be installed on a Kerberos 5 key distribution center (KDC). If you are installing a Kerberos 5 KDC, and you wish to use a directory server to store the data for your realm, you need to install this package.
MIT
* Fri Apr 18 2025 Julien Rische <jrische@redhat.com> - 1.21.1-9
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647
* Tue Mar 25 2025 Julien Rische <jrische@redhat.com> - 1.21.1-7
  - Add dedicated tests sub-package
* Wed Jan 29 2025 Julien Rische <jrische@redhat.com> - 1.21.1-6
  - Prevent overflow when calculating ulog block size (CVE-2025-24528)
    Resolves: RHEL-76759
* Fri Jan 17 2025 Julien Rische <jrische@redhat.com> - 1.21.1-5
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902
* Thu Oct 17 2024 Julien Rische <jrische@redhat.com> - 1.21.1-4
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323
* Fri Jul 05 2024 Julien Rische <jrische@redhat.com> - 1.21.1-3
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392
* Wed Mar 20 2024 Julien Rische <jrische@redhat.com> - 1.21.1-2
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132
* Tue Aug 08 2023 Julien Rische <jrische@redhat.com> - 1.21.1-1
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421
* Thu Jun 08 2023 Julien Rische <jrische@redhat.com> - 1.20.1-9
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298
/usr/lib/.build-id /usr/lib/.build-id/54 /usr/lib/.build-id/54/1336b74983fc3752d531e52e500f21ed32aec5 /usr/lib/.build-id/cd /usr/lib/.build-id/cd/44937866ecdaf60050069dac8a0afda46bd919 /usr/lib/.build-id/d8 /usr/lib/.build-id/d8/21d691f5b1b2e6e90e0389b52ecac0fc228c82 /usr/lib64/krb5 /usr/lib64/krb5/plugins /usr/lib64/krb5/plugins/kdb /usr/lib64/krb5/plugins/kdb/kldap.so /usr/lib64/libkdb_ldap.so /usr/lib64/libkdb_ldap.so.1 /usr/lib64/libkdb_ldap.so.1.0 /usr/sbin/kdb5_ldap_util /usr/share/doc/krb5-server-ldap /usr/share/doc/krb5-server-ldap/60kerberos.ldif /usr/share/doc/krb5-server-ldap/kerberos.ldif /usr/share/doc/krb5-server-ldap/kerberos.schema /usr/share/man/man8/kdb5_ldap_util.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Oct 31 09:41:56 2025