[ 17:19 Cy Schubert (cy)  ]

• abcf942f2ba44a1f333ce3daa2b8961202351a09 security/krb5-120/Makefile
• abcf942f2ba44a1f333ce3daa2b8961202351a09 security/krb5-120/distinfo

security/krb5-120: Update to 1.20.1

MFH:		2022Q4
Security:	CVE-2022-42898

[ 16:37 Cy Schubert (cy)  ]

• de40003bfd697e98cdd342e253699e83e1040961 security/krb5-119/Makefile
• de40003bfd697e98cdd342e253699e83e1040961 security/krb5-119/distinfo
• de40003bfd697e98cdd342e253699e83e1040961 security/krb5-120/Makefile
• de40003bfd697e98cdd342e253699e83e1040961 security/krb5-120/distinfo

security/krb5-*: Address CVE-2022-42898

Topic: Vulnerabilities in PAC parsing

CVE-2022-42898: integer overflow vulnerabilities in PAC parsing

SUMMARY
=======

Three integer overflow vulnerabilities have been discovered in the MIT
krb5 library function krb5_parse_pac().

IMPACT
======

(Only the first 15 lines of the commit message are shown above )

[ 13:45 Cy Schubert (cy)  ]

• d33c01d9cc1864a2be757fb99caa63223cfe5519 security/Makefile
• d33c01d9cc1864a2be757fb99caa63223cfe5519 security/krb5-118/Makefile
• d33c01d9cc1864a2be757fb99caa63223cfe5519 security/krb5-120/Makefile
• d33c01d9cc1864a2be757fb99caa63223cfe5519 security/krb5-120/distinfo
• d33c01d9cc1864a2be757fb99caa63223cfe5519 security/krb5-120/files/kdc.in
• d33c01d9cc1864a2be757fb99caa63223cfe5519 security/krb5-120/files/kpropd.in
• d33c01d9cc1864a2be757fb99caa63223cfe5519 security/krb5-120/files/patch-clients__ksu__Makefile.in
• d33c01d9cc1864a2be757fb99caa63223cfe5519 security/krb5-120/files/patch-config__pre.in
• d33c01d9cc1864a2be757fb99caa63223cfe5519 security/krb5-120/files/patch-config__shlib.conf
• d33c01d9cc1864a2be757fb99caa63223cfe5519 security/krb5-120/files/patch-lib-krb5-os-localaddr.c

security/krb5-120: Welcome new krb5 1.20

Welcome the new krb5-120 (1.20) from MIT.

krb5-118 is now deprecated and scheduled for removal a year from
now.