opnsense-src/crypto/heimdal
Cy Schubert 5abaf08664 heimdal: Fix CVE-2022-4152, signature validation error
When CVE-2022-3437 was fixed by changing memcmp to be a constant
time and the workaround for th e compiler was to add "!=0". However
the logic implmented was inverted resulting in CVE-2022-4152.

Reported by:	Timothy E Zingelman <zingelman _AT_ fnal.gov>
MFC after:	1 day
Security:	CVE-2022-4152
Security:	https://www.cve.org/CVERecord?id=CVE-2022-45142
Security:	https://nvd.nist.gov/vuln/detail/CVE-2022-45142
Security:	https://security-tracker.debian.org/tracker/CVE-2022-45142
Security:	https://bugs.gentoo.org/show_bug.cgi?id=CVE-2022-45142
Security:	https://bugzilla.samba.org/show_bug.cgi?id=15296
Security:	https://www.openwall.com/lists/oss-security/2023/02/08/1
2023-03-09 17:18:49 -08:00
..
admin heimdal: Fix multiple security vulnerabilities 2022-11-15 13:12:37 -08:00
appl heimdal: Fix multiple security vulnerabilities 2022-11-15 13:12:37 -08:00
base - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
doc Avoid printing extraneous function names when searching man page 2018-08-29 06:04:54 +00:00
etc - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
include - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
kadmin heimdal: Properly ix bus fault when zero-length request received 2022-12-09 06:09:54 -08:00
kcm heimdal: Fix multiple security vulnerabilities 2022-11-15 13:12:37 -08:00
kdc heimdal: Fix multiple security vulnerabilities 2022-11-15 13:12:37 -08:00
kpasswd - Update FreeBSD's Heimdal distribution to 1.5.2. This is a bugfix 2012-04-08 08:19:17 +00:00
kuser heimdal: Fix multiple security vulnerabilities 2022-11-15 13:12:37 -08:00
lib heimdal: Fix CVE-2022-4152, signature validation error 2023-03-09 17:18:49 -08:00
tools Include the gssapi_krb5 library in KRB5_LDFLAGS. 2014-09-08 19:00:13 +00:00
acinclude.m4 - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
aclocal.m4 - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
autogen.sh - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
ChangeLog - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
ChangeLog.1998 - Flatten the vendor heimdal tree. 2011-09-29 05:23:57 +00:00
ChangeLog.1999 - Flatten the vendor heimdal tree. 2011-09-29 05:23:57 +00:00
ChangeLog.2000 - Flatten the vendor heimdal tree. 2011-09-29 05:23:57 +00:00
ChangeLog.2001 - Flatten the vendor heimdal tree. 2011-09-29 05:23:57 +00:00
ChangeLog.2002 - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
ChangeLog.2003 - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
ChangeLog.2004 - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
ChangeLog.2005 - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
ChangeLog.2006 - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
compile - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
config.guess - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
config.sub - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
configure - Update FreeBSD's Heimdal distribution to 1.5.2. This is a bugfix 2012-04-08 08:19:17 +00:00
FREEBSD-Xlist Fix conflicts after heimdal-1.1 import and add build infrastructure. Import 2008-05-07 13:53:12 +00:00
install-sh - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
krb5.conf - Flatten the vendor heimdal tree. 2011-09-29 05:23:57 +00:00
LICENSE - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
ltmain.sh - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
Makefile.am - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
Makefile.am.common - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
Makefile.in - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
missing - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
NEWS - Update FreeBSD's Heimdal distribution to 1.5.2. This is a bugfix 2012-04-08 08:19:17 +00:00
README - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00

Heimdal is a Kerberos 5 implementation.

For information how to install see <http://www.h5l.org/compile.html>.

There are briefer man pages for most of the commands.

Bug reports and bugs are appreciated, see more under Bug reports in
the manual on how we prefer them: <heimdal-bugs@h5l.org>.

For more information see the web-page at
<http://www.h5l.org/> or the mailing lists:

heimdal-announce@sics.se	low-volume announcement
heimdal-discuss@sics.se		high-volume discussion

send a mail to heimdal-announce-request@sics.se and
heimdal-discuss-request@sics.se respectively to subscribe.