samba-mirror

mirror of https://github.com/samba-team/samba.git synced 2025-01-18 06:04:06 +03:00

History

Andrew Bartlett a836bcf22c CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HMAC_SHA1_96_AES256_SK was added

ENC_HMAC_SHA1_96_AES256_SK is a flag introduced for by Microsoft in this
CVE to indicate that additionally, AES session keys are available. We
set the etypes available for session keys depending on the encryption
types that are supported by the principal.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15219

Pair-Programmed-With: Joseph Sutton <josephsutton@catalyst.net.nz>

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

(similar to commit 975e43fc45531fdea14b93a3b1529b3218a177e6)
[jsutton@samba.org Fixed knownfail conflicts]

[jsutton@samba.org Adapted to older KDC code; fixed knownfail conflicts]

2022-12-14 10:28:16 +00:00

aesni-intel

lib:crypto: Build intel aes-ni only if GnuTLS doesn't provide AES CMAC

2019-12-10 20:30:57 +00:00

cmocka

third_party:cmocka: Fix build when used in lib/tevent

2021-07-07 05:07:30 +00:00

gpfs

third_party: Update gpfs.h to 5.0.5.3 version

2020-10-05 20:06:04 +00:00

heimdal

CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HMAC_SHA1_96_AES256_SK was added