[Pkg-samba-maint] [samba] 04/06: Remove CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch, merged

[Mathieu Parent]

This is an automated email from the git hooks/post-receive script.

sathieu pushed a commit to branch master
in repository samba.

commit 4ebd9d9ca1cf21cc49c4dcb38a821dc7a66d19df
Author: Mathieu Parent <math.parent at gmail.com>
Date:   Tue Aug 15 23:01:24 2017 +0200

    Remove CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch, merged
---
 ...103-Orpheus-Lyre-KDC-REP-service-name-val.patch | 42 ----------------------
 debian/patches/series                              |  1 -
 2 files changed, 43 deletions(-)

diff --git a/debian/patches/CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch b/debian/patches/CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch
deleted file mode 100644
index d5af6c1..0000000
--- a/debian/patches/CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch
+++ /dev/null
@@ -1,42 +0,0 @@
-From 9b0972c8e429fee8e15f23ab508a9f0729a4e0b6 Mon Sep 17 00:00:00 2001
-From: Jeffrey Altman <jaltman at secure-endpoints.com>
-Date: Wed, 12 Apr 2017 15:40:42 -0400
-Subject: [PATCH] CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation
-
-In _krb5_extract_ticket() the KDC-REP service name must be obtained from
-encrypted version stored in 'enc_part' instead of the unencrypted version
-stored in 'ticket'.  Use of the unecrypted version provides an
-opportunity for successful server impersonation and other attacks.
-
-Identified by Jeffrey Altman, Viktor Duchovni and Nico Williams.
-
-Change-Id: I45ef61e8a46e0f6588d64b5bd572a24c7432547c
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=12894
-(based on heimdal commit 6dd3eb836bbb80a00ffced4ad57077a1cdf227ea)
-
-Signed-off-by: Andrew Bartlett <abartlet at samba.org>
-Reviewed-by: Garming Sam <garming at catalyst.net.nz>
-Reviewed-by: Stefan Metzmacher <metze at samba.org>
----
- source4/heimdal/lib/krb5/ticket.c | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/source4/heimdal/lib/krb5/ticket.c b/source4/heimdal/lib/krb5/ticket.c
-index 064bbfbb33c..5a317c7b971 100644
---- a/source4/heimdal/lib/krb5/ticket.c
-+++ b/source4/heimdal/lib/krb5/ticket.c
-@@ -641,8 +641,8 @@ _krb5_extract_ticket(krb5_context context,
-     /* check server referral and save principal */
-     ret = _krb5_principalname2krb5_principal (context,
- 					      &tmp_principal,
--					      rep->kdc_rep.ticket.sname,
--					      rep->kdc_rep.ticket.realm);
-+					      rep->enc_part.sname,
-+					      rep->enc_part.srealm);
-     if (ret)
- 	goto out;
-     if((flags & EXTRACT_TICKET_ALLOW_SERVER_MISMATCH) == 0){
--- 
-2.13.2
-
diff --git a/debian/patches/series b/debian/patches/series
index 53afed5..9953977 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -15,5 +15,4 @@ Add-documentation-to-systemd-Unit-files.patch
 fix_kill_path_in_units.patch
 nmbd-requires-a-working-network.patch
 s3-gse_krb5-fix-a-possible-crash-in-fill_mem_keytab.patch
-CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch
 provision-Update-root-DNS-servers-list.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-samba/samba.git