samba-mirror

mirror of https://github.com/samba-team/samba.git synced 2025-03-01 04:58:35 +03:00

History

Andrew Bartlett 975e43fc45 CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HMAC_SHA1_96_AES256_SK was added

ENC_HMAC_SHA1_96_AES256_SK is a flag introduced for by Microsoft in this
CVE to indicate that additionally, AES session keys are available. We
set the etypes available for session keys depending on the encryption
types that are supported by the principal.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15219

Pair-Programmed-With: Joseph Sutton <josephsutton@catalyst.net.nz>

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

2022-12-13 13:07:30 +00:00

aesni-intel

lib:crypto: Build intel aes-ni only if GnuTLS doesn't provide AES CMAC

2019-12-10 20:30:57 +00:00

cmocka

third_party:cmocka: Fix build when used in lib/tevent

2021-07-07 05:07:30 +00:00

gpfs

third_party: Update gpfs.h to 5.0.5.3 version

2020-10-05 20:06:04 +00:00

heimdal

CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HMAC_SHA1_96_AES256_SK was added