gentoo-mirror/gentoo
1
0
Fork 0
mirror of https://github.com/gentoo-mirror/gentoo.git synced 2026-01-06 02:17:34 -08:00
Code Issues Projects Releases Wiki Activity

www-apache/mod_auth_kerb: add use-after-free patch

Browse Source 
Closes: https://bugs.gentoo.org/673066
Signed-off-by: Sam James <sam@gentoo.org>
This commit is contained in:
Sam James 2021-12-29 08:45:39 +00:00
parent 59646ae0e9
commit 433bedfe25
No known key found for this signature in database
GPG Key ID: F4922810EEA0483B
2 changed files with 26 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
www-apache/mod_auth_kerb/files/mod_auth_kerb-5.4-krb5pwd-double-free.patch Normal file
View File

@ -0,0 +1,22 @@
https://sources.debian.org/src/libapache-mod-auth-kerb/5.4-2.5/debian/patches/mod_auth_kerb-krb5_kt_close.patch/
https://bugs.gentoo.org/673066
Description: fix use after free in authenticate_user_krb5pwd()
Origin: https://sourceforge.net/p/modauthkerb/bugs/61/attachment/mod_auth_kerb-krb5_kt_close.patch
Bug: https://sourceforge.net/p/modauthkerb/bugs/61/
Bug-Debian: https://bugs.debian.org/934043
Author: Johan Ymerson (https://sourceforge.net/u/ymerson/)
--- a/src/mod_auth_kerb.c
+++ b/src/mod_auth_kerb.c
@@ -799,11 +799,9 @@
"failed to verify krb5 credentials: %s",
krb5_get_err_text(context, ret));
krb5_kt_end_seq_get(context, keytab, &cursor);
- krb5_kt_close(context, keytab);
goto end;
}
krb5_kt_end_seq_get(context, keytab, &cursor);
- krb5_kt_close(context, keytab);
}
else {
if ((ret = verify_krb5_init_creds(r, context, &creds, server, keytab))) {

5
www-apache/mod_auth_kerb/mod_auth_kerb-5.4-r4.ebuild → www-apache/mod_auth_kerb/mod_auth_kerb-5.4-r5.ebuild
View File

@ -37,6 +37,8 @@ PATCHES=(
# bug #830208
"${FILESDIR}"/${P}-api-change-krb5.patch
# bug #673066
"${FILESDIR}"/${P}-krb5pwd-double-free.patch
)
# Work around Bug #616612
@ -55,7 +57,8 @@ src_compile() {
src_install() {
apache-module_src_install
dotmpfiles "${FILESDIR}/${PN}.conf"
dotmpfiles "${FILESDIR}"/${PN}.conf
}
pkg_postinst() {