Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package krb5 for openSUSE:Factory checked in at 2026-02-24 15:37:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/krb5 (Old) and /work/SRC/openSUSE:Factory/.krb5.new.1977 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "krb5" Tue Feb 24 15:37:51 2026 rev:180 rq:1334448 version:1.22.2 Changes: -------- --- /work/SRC/openSUSE:Factory/krb5/krb5-mini.changes 2026-02-04 21:01:05.636027590 +0100 +++ /work/SRC/openSUSE:Factory/.krb5.new.1977/krb5-mini.changes 2026-02-24 15:38:00.588947804 +0100 @@ -1,0 +2,9 @@ +Mon Feb 2 12:16:38 UTC 2026 - Samuel Cabrero <[email protected]> + +- Update to 1.22.2 + * Fix a SPNEGO packet parsing bug which could cause GSS mechanism + negotiation failure. +- Fix building with glibc 2.43; (bsc#1257257); Add patch + 0010-Fix-strchr-conformance-to-C23.patch + +------------------------------------------------------------------- krb5.changes: same change Old: ---- krb5-1.22.1.tar.gz krb5-1.22.1.tar.gz.asc New: ---- 0010-Fix-strchr-conformance-to-C23.patch krb5-1.22.2.tar.gz krb5-1.22.2.tar.gz.asc ----------(New B)---------- New:/work/SRC/openSUSE:Factory/.krb5.new.1977/krb5-mini.changes-- Fix building with glibc 2.43; (bsc#1257257); Add patch /work/SRC/openSUSE:Factory/.krb5.new.1977/krb5-mini.changes: 0010-Fix-strchr-conformance-to-C23.patch /work/SRC/openSUSE:Factory/.krb5.new.1977/krb5-mini.changes- -- /work/SRC/openSUSE:Factory/.krb5.new.1977/krb5.changes-- Fix building with glibc 2.43; (bsc#1257257); Add patch /work/SRC/openSUSE:Factory/.krb5.new.1977/krb5.changes: 0010-Fix-strchr-conformance-to-C23.patch /work/SRC/openSUSE:Factory/.krb5.new.1977/krb5.changes- ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ krb5-mini.spec ++++++ --- /var/tmp/diff_new_pack.vqrfco/_old 2026-02-24 15:38:01.776996960 +0100 +++ /var/tmp/diff_new_pack.vqrfco/_new 2026-02-24 15:38:01.780997125 +0100 @@ -1,7 +1,7 @@ # # spec file for package krb5-mini # -# Copyright (c) 2026 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -24,7 +24,7 @@ %define _fillupdir %{_localstatedir}/adm/fillup-templates %endif Name: krb5-mini -Version: 1.22.1 +Version: 1.22.2 Release: 0 Summary: MIT Kerberos5 implementation and libraries with minimal dependencies License: MIT @@ -46,6 +46,7 @@ Patch7: 0007-SELinux-integration.patch Patch8: 0008-krb5-1.9-debuginfo.patch Patch9: 0009-UsrEtc-support.patch +Patch10: 0010-Fix-strchr-conformance-to-C23.patch BuildRequires: autoconf BuildRequires: bison BuildRequires: pkgconfig ++++++ krb5.spec ++++++ --- /var/tmp/diff_new_pack.vqrfco/_old 2026-02-24 15:38:01.824998946 +0100 +++ /var/tmp/diff_new_pack.vqrfco/_new 2026-02-24 15:38:01.828999111 +0100 @@ -1,7 +1,7 @@ # # spec file for package krb5 # -# Copyright (c) 2026 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: krb5 -Version: 1.22.1 +Version: 1.22.2 Release: 0 Summary: MIT Kerberos5 implementation License: MIT @@ -40,6 +40,7 @@ Patch7: 0007-SELinux-integration.patch Patch8: 0008-krb5-1.9-debuginfo.patch Patch9: 0009-UsrEtc-support.patch +Patch10: 0010-Fix-strchr-conformance-to-C23.patch BuildRequires: autoconf BuildRequires: bison BuildRequires: cyrus-sasl-devel ++++++ 0010-Fix-strchr-conformance-to-C23.patch ++++++ >From ad4dcf1856dadc4b352b5c8ff08e51c7290fb41f Mon Sep 17 00:00:00 2001 From: Alexander Bokovoy <[email protected]> Date: Wed, 10 Dec 2025 10:42:02 +0200 Subject: [PATCH] Fix strchr() conformance to C23 C23 7.28.5.1 specifies search functions such as strchr() as generic, returning const char * if the first argument is of type const char *. Fix uses of strchr() to conform to this change. [[email protected]: altered changes to avoid casts; fixed an additional case] [[email protected]: condensed some declarations; rewrote commit message] ticket: 9191 (new) --- src/lib/krb5/ccache/ccbase.c | 4 ++-- src/lib/krb5/os/expand_path.c | 3 ++- src/lib/krb5/os/locate_kdc.c | 15 +++++++-------- src/plugins/preauth/pkinit/pkinit_crypto.h | 2 +- .../preauth/pkinit/pkinit_crypto_openssl.c | 6 +++--- src/plugins/preauth/pkinit/pkinit_identity.c | 2 +- src/plugins/preauth/pkinit/pkinit_matching.c | 2 +- src/tests/responder.c | 3 +-- 8 files changed, 18 insertions(+), 19 deletions(-) diff --git a/src/lib/krb5/ccache/ccbase.c b/src/lib/krb5/ccache/ccbase.c index 696b68181..30a0a410c 100644 --- a/src/lib/krb5/ccache/ccbase.c +++ b/src/lib/krb5/ccache/ccbase.c @@ -201,8 +201,8 @@ krb5_cc_register(krb5_context context, const krb5_cc_ops *ops, krb5_error_code KRB5_CALLCONV krb5_cc_resolve (krb5_context context, const char *name, krb5_ccache *cache) { - char *pfx, *cp; - const char *resid; + char *pfx; + const char *cp, *resid; unsigned int pfxlen; krb5_error_code err; const krb5_cc_ops *ops; diff --git a/src/lib/krb5/os/expand_path.c b/src/lib/krb5/os/expand_path.c index 5cbccf08c..6569b8820 100644 --- a/src/lib/krb5/os/expand_path.c +++ b/src/lib/krb5/os/expand_path.c @@ -454,7 +454,8 @@ k5_expand_path_tokens_extra(krb5_context context, const char *path_in, { krb5_error_code ret; struct k5buf buf; - char *tok_begin, *tok_end, *tok_val, **extra_tokens = NULL, *path; + const char *tok_begin, *tok_end; + char *tok_val, **extra_tokens = NULL, *path; const char *path_left; size_t nargs = 0, i; va_list ap; diff --git a/src/lib/krb5/os/locate_kdc.c b/src/lib/krb5/os/locate_kdc.c index c186bce51..0cceff800 100644 --- a/src/lib/krb5/os/locate_kdc.c +++ b/src/lib/krb5/os/locate_kdc.c @@ -214,8 +214,8 @@ oom: } static void -parse_uri_if_https(const char *host_or_uri, k5_transport *transport, - const char **host, const char **uri_path) +parse_uri_if_https(char *host_or_uri, k5_transport *transport, + char **host, const char **uri_path) { char *cp; @@ -257,8 +257,7 @@ locate_srv_conf_1(krb5_context context, const krb5_data *realm, k5_transport transport, int udpport) { const char *realm_srv_names[4]; - char **hostlist = NULL, *realmstr = NULL, *host = NULL; - const char *hostspec; + char **hostlist = NULL, *realmstr = NULL, *host = NULL, *hostspec; krb5_error_code code; size_t i; int default_port; @@ -587,8 +586,8 @@ prof_locate_server(krb5_context context, const krb5_data *realm, * Return a NULL *host_out if there are any problems parsing the URI. */ static void -parse_uri_fields(const char *uri, k5_transport *transport_out, - const char **host_out, int *primary_out) +parse_uri_fields(char *uri, k5_transport *transport_out, + char **host_out, int *primary_out) { k5_transport transport; @@ -656,8 +655,8 @@ locate_uri(krb5_context context, const krb5_data *realm, krb5_error_code ret; k5_transport transport, host_trans; struct srv_dns_entry *answers, *entry; - char *host, *sitename; - const char *host_field, *path; + char *host, *sitename, *host_field; + const char *path; int port, def_port, primary; ret = get_sitename(context, realm, &sitename); diff --git a/src/plugins/preauth/pkinit/pkinit_crypto.h b/src/plugins/preauth/pkinit/pkinit_crypto.h index 57bb3cb84..be2d02c22 100644 --- a/src/plugins/preauth/pkinit/pkinit_crypto.h +++ b/src/plugins/preauth/pkinit/pkinit_crypto.h @@ -440,7 +440,7 @@ krb5_error_code crypto_load_cas_and_crls defines the storage type (file, directory, etc) */ int catype, /* IN defines the ca type (anchor, intermediate, crls) */ - char *id); /* IN + const char *id); /* IN defines the location (filename, directory name, etc) */ /* diff --git a/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c b/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c index bd25bae47..d1fe18e5a 100644 --- a/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c +++ b/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c @@ -4999,7 +4999,7 @@ load_cas_and_crls(krb5_context context, pkinit_req_crypto_context req_cryptoctx, pkinit_identity_crypto_context id_cryptoctx, int catype, - char *filename) + const char *filename) { STACK_OF(X509_INFO) *sk = NULL; STACK_OF(X509) *ca_certs = NULL; @@ -5157,7 +5157,7 @@ load_cas_and_crls_dir(krb5_context context, pkinit_req_crypto_context req_cryptoctx, pkinit_identity_crypto_context id_cryptoctx, int catype, - char *dirname) + const char *dirname) { krb5_error_code retval = EINVAL; char **fnames = NULL, *filename; @@ -5201,7 +5201,7 @@ crypto_load_cas_and_crls(krb5_context context, pkinit_identity_crypto_context id_cryptoctx, int idtype, int catype, - char *id) + const char *id) { switch (idtype) { case IDTYPE_FILE: diff --git a/src/plugins/preauth/pkinit/pkinit_identity.c b/src/plugins/preauth/pkinit/pkinit_identity.c index 0dcfcfc46..ad65f237b 100644 --- a/src/plugins/preauth/pkinit/pkinit_identity.c +++ b/src/plugins/preauth/pkinit/pkinit_identity.c @@ -473,7 +473,7 @@ process_option_ca_crl(krb5_context context, const char *value, int catype) { - char *residual; + const char *residual; unsigned int typelen; int idtype; diff --git a/src/plugins/preauth/pkinit/pkinit_matching.c b/src/plugins/preauth/pkinit/pkinit_matching.c index 0ea072c88..b3c8df161 100644 --- a/src/plugins/preauth/pkinit/pkinit_matching.c +++ b/src/plugins/preauth/pkinit/pkinit_matching.c @@ -262,7 +262,7 @@ parse_rule_component(krb5_context context, char err_buf[128]; int ret; struct keyword_desc *kw, *nextkw; - char *nk; + const char *nk; int found_next_kw = 0; char *value = NULL; size_t len; diff --git a/src/tests/responder.c b/src/tests/responder.c index 82f870ea5..4221a2028 100644 --- a/src/tests/responder.c +++ b/src/tests/responder.c @@ -282,8 +282,7 @@ responder(krb5_context ctx, void *rawdata, krb5_responder_context rctx) /* Provide a particular response for an OTP challenge. */ if (data->otp_answer != NULL) { if (krb5_responder_otp_get_challenge(ctx, rctx, &ochl) == 0) { - key = strchr(data->otp_answer, '='); - if (key != NULL) { + if (strchr(data->otp_answer, '=') != NULL) { /* Make a copy of the answer that we can chop up. */ key = strdup(data->otp_answer); if (key == NULL) -- 2.52.0 ++++++ krb5-1.22.1.tar.gz -> krb5-1.22.2.tar.gz ++++++ /work/SRC/openSUSE:Factory/krb5/krb5-1.22.1.tar.gz /work/SRC/openSUSE:Factory/.krb5.new.1977/krb5-1.22.2.tar.gz differ: char 101, line 1
