FEDORA-2016-1d28afd486 — bugfix update for krb5

stable

krb5-1.14.3-8.fc25

FEDORA-2016-1d28afd486 created by rharwood 9 years ago for Fedora 25

Misc samba and sssd-related bugfixes.

OTP fixups for KDC

Require krb5 to set the "Host:" header when speaking KKDCPP. This fixes use of TLS with SNI.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-1d28afd486

This update has been submitted for testing by rharwood.

9 years ago

This update has obsoleted krb5-1.14.3-6.fc25, and has inherited its bugs and notes.

9 years ago

This update has been pushed to testing.

9 years ago

heikoada commented & provided feedback 9 years ago

karma

LGTM

This update has been submitted for stable by bodhi.

9 years ago

kalev commented & provided feedback 9 years ago

karma

No regressions noted

This update has been pushed to stable.

9 years ago

Please log in to add feedback.

Metadata

Type

bugfix

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-2

Stable by Karma

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

9 years ago

Builds

krb5-1.14.3-8.fc25

BZ#1365028 MS-KKDCP with TLS SNI requires HTTP Host header

BZ#1365029 MS-KKDCP with TLS SNI requires HTTP Host header

BZ#1365030 MS-KKDCP with TLS SNI requires HTTP Host header

BZ#1370072 Fix KDC return code and set prompt types for OTP client preauth

BZ#1370622 Cannot authenticate with sssd-1.14 if there is no pre-auth

BZ#1370980 Guess Samba client mutual flag using ap_options in gssapi krb5 mech

krb5-1.14.3-8.fc25

Automated Test Results

None