freeipa/ipatests/test_ipalib_install
Rob Crittenden 33af154b7f validate_principal: Don't try to verify that the realm is known
The actual value is less important than whether it matches the
regular expression. A number of legal but difficult to know in
context realms could be passed in here (trust for example).

This fixes CVE-2024-1481

Fixes: https://pagure.io/freeipa/issue/9541

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
2024-02-22 14:35:59 -05:00
..
__init__.py rpcserver: validate Kerberos principal name before running kinit 2024-02-21 17:07:33 -05:00
test_kinit.py validate_principal: Don't try to verify that the realm is known 2024-02-22 14:35:59 -05:00