|
 |
3f7738 |
Name: gssntlmssp
|
|
|
3f7738 |
Version: 1.2.0
|
|
|
3f7738 |
Release: 1%{?dist}
|
|
|
3f7738 |
Summary: GSSAPI NTLMSSP Mechanism
|
|
|
c165a5 |
|
|
|
3f7738 |
Group: System Environment/Libraries
|
|
|
3f7738 |
License: LGPLv3+
|
|
|
3f7738 |
URL: https://github.com/gssapi/gss-ntlmssp
|
|
|
3f7738 |
Source0: https://github.com/gssapi/gss-ntlmssp/releases/download/v%{version}/%{name}-%{version}.tar.gz
|
|
|
c165a5 |
|
|
|
3f7738 |
Patch01: 0001-Fix-potential-crash-when-no-target-name-is-present.patch
|
|
|
c165a5 |
|
|
|
3f7738 |
Requires: krb5-libs%{?_isa} >= 1.18.2-22
|
|
|
c165a5 |
|
|
|
c165a5 |
BuildRequires: autoconf
|
|
|
c165a5 |
BuildRequires: automake
|
|
|
c165a5 |
BuildRequires: libtool
|
|
|
c165a5 |
BuildRequires: m4
|
|
|
c165a5 |
BuildRequires: libxslt
|
|
|
c165a5 |
BuildRequires: libxml2
|
|
|
c165a5 |
BuildRequires: docbook-style-xsl
|
|
|
c165a5 |
BuildRequires: doxygen
|
|
|
c165a5 |
BuildRequires: gettext-devel
|
|
|
c165a5 |
BuildRequires: pkgconfig
|
|
|
3f7738 |
BuildRequires: krb5-devel >= 1.18.2-22
|
|
|
c165a5 |
BuildRequires: libunistring-devel
|
|
|
c165a5 |
BuildRequires: openssl-devel
|
|
|
c165a5 |
BuildRequires: pkgconfig(wbclient)
|
|
|
3f7738 |
BuildRequires: zlib-devel
|
|
|
3f7738 |
BuildRequires: make
|
|
|
c165a5 |
|
|
|
c165a5 |
%description
|
|
|
c165a5 |
A GSSAPI Mechanism that implements NTLMSSP
|
|
|
c165a5 |
|
|
|
c165a5 |
%package devel
|
|
|
c165a5 |
Summary: Development header for GSSAPI NTLMSSP
|
|
|
c165a5 |
Group: Development/Libraries
|
|
|
c165a5 |
License: LGPLv3+
|
|
|
c165a5 |
|
|
|
c165a5 |
%description devel
|
|
|
c165a5 |
Adds a header file with definition for custom GSSAPI extensions for NTLMSSP
|
|
|
c165a5 |
|
|
|
c165a5 |
|
|
|
c165a5 |
%prep
|
|
|
3f7738 |
%autosetup -S git
|
|
|
c165a5 |
|
|
|
c165a5 |
%build
|
|
|
c165a5 |
autoreconf -fiv
|
|
|
c165a5 |
%configure \
|
|
|
c165a5 |
--with-wbclient \
|
|
|
c165a5 |
--disable-static \
|
|
|
c165a5 |
--disable-rpath
|
|
|
c165a5 |
|
|
|
c165a5 |
make %{?_smp_mflags} all
|
|
|
c165a5 |
|
|
|
c165a5 |
%install
|
|
|
c165a5 |
%make_install
|
|
|
c165a5 |
rm -f %{buildroot}%{_libdir}/gssntlmssp/gssntlmssp.la
|
|
|
c165a5 |
mkdir -p %{buildroot}%{_sysconfdir}/gss/mech.d
|
|
|
c165a5 |
install -pm644 examples/mech.ntlmssp %{buildroot}%{_sysconfdir}/gss/mech.d/ntlmssp.conf
|
|
|
c165a5 |
%{find_lang} %{name}
|
|
|
c165a5 |
|
|
|
c165a5 |
%check
|
|
|
c165a5 |
make test_gssntlmssp
|
|
|
c165a5 |
|
|
|
c165a5 |
%files -f %{name}.lang
|
|
|
c165a5 |
%config(noreplace) %{_sysconfdir}/gss/mech.d/ntlmssp.conf
|
|
|
c165a5 |
%{_libdir}/gssntlmssp/
|
|
|
c165a5 |
%{_mandir}/man8/gssntlmssp.8*
|
|
|
c165a5 |
%doc COPYING
|
|
|
c165a5 |
|
|
|
c165a5 |
%files devel
|
|
|
c165a5 |
%{_includedir}/gssapi/gssapi_ntlmssp.h
|
|
|
c165a5 |
|
|
|
c165a5 |
%changelog
|
|
|
3f7738 |
* Thu Mar 23 2023 Julien Rische <jrische@redhat.com> - 1.2.0-1
|
|
|
3f7738 |
- New release 1.2.0
|
|
|
3f7738 |
- Fix CVE-2023-25563: multiple out-of-bounds read when decoding NTLM fields
|
|
|
3f7738 |
- Fix CVE-2023-25564: memory corruption when decoding UTF16 strings
|
|
|
3f7738 |
- Fix CVE-2023-25565: incorrect free when decoding target information
|
|
|
3f7738 |
- Fix CVE-2023-25566: memory leak when parsing usernames
|
|
|
3f7738 |
- Fix CVE-2023-25567: out-of-bounds read when decoding target information
|
|
|
3f7738 |
- Resolves: rhbz#2181313
|
|
|
3f7738 |
|
|
|
c165a5 |
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.0-6
|
|
|
c165a5 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
c165a5 |
|
|
|
c165a5 |
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.0-5
|
|
|
c165a5 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
c165a5 |
|
|
|
c165a5 |
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.0-4
|
|
|
c165a5 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
c165a5 |
|
|
|
c165a5 |
* Fri Feb 17 2017 Simo Sorce <simo@samba.org> - 0.7.0-3
|
|
|
c165a5 |
- Add OpenSSL 1.1.0 compatibility patch
|
|
|
c165a5 |
|
|
|
c165a5 |
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.0-2
|
|
|
c165a5 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
c165a5 |
|
|
|
c165a5 |
* Fri Jun 3 2016 Simo Sorce <simo@samba.org> - 0.7.0-1
|
|
|
c165a5 |
- New release 0.7.0
|
|
|
c165a5 |
|
|
|
c165a5 |
* Fri May 20 2016 Simo Sorce <simo@samba.org> - 0.6.0-4
|
|
|
c165a5 |
- Fix regression in acquire credential code
|
|
|
c165a5 |
- Resolves: #1290831
|
|
|
c165a5 |
|
|
|
c165a5 |
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.6.0-3
|
|
|
c165a5 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
c165a5 |
|
|
|
c165a5 |
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.0-2
|
|
|
c165a5 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
c165a5 |
|
|
|
c165a5 |
* Thu Mar 19 2015 Simo Sorce <simo@samba.org> - 0.6.0-1
|
|
|
c165a5 |
- New verion with fixes for 32 bit arches
|
|
|
c165a5 |
- drop patches, they are included in he new upstream release
|
|
|
c165a5 |
|
|
|
c165a5 |
* Thu Jan 08 2015 Simo Sorce <simo@samba.org> - 0.5.0-4
|
|
|
c165a5 |
- Fix build failure in rawhide due to automake 1.15 change in behavior
|
|
|
c165a5 |
|
|
|
c165a5 |
* Wed Jan 07 2015 Simo Sorce <simo@samba.org> - 0.5.0-4
|
|
|
c165a5 |
- fix bug #1178686
|
|
|
c165a5 |
|
|
|
c165a5 |
* Tue Sep 02 2014 Pádraig Brady <pbrady@redhat.com> - 0.5.0-3
|
|
|
c165a5 |
- rebuild for libunistring soname bump
|
|
|
c165a5 |
|
|
|
c165a5 |
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5.0-2
|
|
|
c165a5 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
c165a5 |
|
|
|
c165a5 |
* Tue Aug 12 2014 Simo Sorce <simo@samba.org> - 0.5.0-1
|
|
|
c165a5 |
- New upstream version
|
|
|
c165a5 |
|
|
|
c165a5 |
* Fri Aug 1 2014 Simo Sorce <simo@samba.org> - 0.4.0-2
|
|
|
c165a5 |
- put configuration in the new mech.d directory introduced as a backport in
|
|
|
c165a5 |
krb5-1.12.1-9
|
|
|
c165a5 |
|
|
|
c165a5 |
* Sat Jun 21 2014 Simo Sorce <simo@samba.org> - 0.4.0-1
|
|
|
c165a5 |
- New upstream release 0.4.0:
|
|
|
c165a5 |
* Added support for MIC and Channel Binding features of NTLMv2
|
|
|
c165a5 |
* Improve testing so that multiple versions can be tested
|
|
|
c165a5 |
* Various importnat fixes in the GSSAPI interface that were causing errors
|
|
|
c165a5 |
* Special workaround for SPNEGO mechanism when talking to Windows Servers and
|
|
|
c165a5 |
using the internal NTLM MIC feature.
|
|
|
c165a5 |
|
|
|
c165a5 |
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.3.1-1
|
|
|
c165a5 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
c165a5 |
|
|
|
c165a5 |
* Sun Jan 26 2014 Simo Sorce <simo@samba.org> - 0.3.1-0
|
|
|
c165a5 |
- Fixes #1058025
|
|
|
c165a5 |
- New upstream release 0.3.1:
|
|
|
c165a5 |
* Fix segfault in init context.
|
|
|
c165a5 |
|
|
|
c165a5 |
* Sun Jan 12 2014 Simo Sorce <simo@samba.org> - 0.3.0-0
|
|
|
c165a5 |
- New upstream release 0.3.0:
|
|
|
c165a5 |
* Added support for NTLMv1 Signing and Sealing completing full coverage
|
|
|
c165a5 |
of the NTLM protocol
|
|
|
c165a5 |
* Added a number of GSSAPI calls to inquire, export and import context and
|
|
|
c165a5 |
credentials, in preparation for making it work with GSS-Proxy
|
|
|
c165a5 |
* Various fixes memleak and other fixes
|
|
|
c165a5 |
|
|
|
c165a5 |
* Fri Dec 13 2013 Simo Sorce <simo@samba.org> - 0.2.0-2
|
|
|
c165a5 |
- Backport patches to fix memory leaks
|
|
|
c165a5 |
|
|
|
c165a5 |
* Wed Dec 4 2013 Simo Sorce <simo@samba.org> - 0.2.0-1
|
|
|
c165a5 |
- Backport patch that fixes failures with gss_set_neg_mechs() calls.
|
|
|
c165a5 |
|
|
|
c165a5 |
* Fri Oct 18 2013 Simo Sorce <simo@samba.org> - 0.2.0-0
|
|
|
c165a5 |
- New upstream realease 0.2.0:
|
|
|
c165a5 |
* Add support for acquire_cred_with_password()
|
|
|
c165a5 |
* Fix Signing keys generation
|
|
|
c165a5 |
* Add enterprise names support
|
|
|
c165a5 |
* Add connectionless mode support
|
|
|
c165a5 |
* Add development header gssapi_ntlmssp.h
|
|
|
c165a5 |
* Various bugfixes and tests for new features
|
|
|
c165a5 |
|
|
|
c165a5 |
* Thu Oct 17 2013 Simo Sorce <simo@samba.org> - 0.1.0-2
|
|
|
c165a5 |
- Fix Requires
|
|
|
c165a5 |
|
|
|
c165a5 |
* Thu Oct 17 2013 Simo Sorce <simo@samba.org> - 0.1.0-1
|
|
|
c165a5 |
- Initial import of 0.1.0
|
|
|
c165a5 |
|