freeipa/ipalib/install
Rob Crittenden 33af154b7f validate_principal: Don't try to verify that the realm is known
The actual value is less important than whether it matches the
regular expression. A number of legal but difficult to know in
context realms could be passed in here (trust for example).

This fixes CVE-2024-1481

Fixes: https://pagure.io/freeipa/issue/9541

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
2024-02-22 14:35:59 -05:00
..
__init__.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
certmonger.py Ensure that KDC cert has SAN DNS entry 2021-01-29 13:36:41 -05:00
certstore.py Fix ipa-server-upgrade: This entry already exists 2017-08-30 12:47:53 +02:00
dnsforwarders.py Add helpers for resolve1 and nameservers 2020-09-23 16:44:26 +02:00
hostname.py pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
kinit.py validate_principal: Don't try to verify that the realm is known 2024-02-22 14:35:59 -05:00
service.py pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
sysrestore.py Address legacy pylint issues in sysrestore.py 2020-08-07 16:44:28 -04:00