Update krb5 to version 1.19.3 to address CVE-2021-37750 (#3065)

* initial krb5 update

* update sig

* update toolchain manifests

SPECS/krb5/krb5.signatures.json

@@ -1,5 +1,5 @@
 {
  "Signatures": {
-  "krb5-1.19.2.tar.gz": "10453fee4e3a8f8ce6129059e5c050b8a65dab1c257df68b99b3112eaa0cdf6a"
+  "krb5-1.19.3.tar.gz": "56d04863cfddc9d9eb7af17556e043e3537d41c6e545610778676cf551b9dcd0"
  }
 }

SPECS/krb5/krb5.spec

@@ -1,15 +1,16 @@
 %define __requires_exclude ^/(usr/)?bin/(ba)?sh$
+%define maj_version %(echo %{version} | rev | cut -d'.' -f2- | rev)
 
 Summary:        The Kerberos newtork authentication system
 Name:           krb5
-Version:        1.19.2
+Version:        1.19.3
 Release:        1%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
 Group:          System Environment/Security
 URL:            https://web.mit.edu/kerberos/
-Source0:        https://web.mit.edu/kerberos/dist/%{name}/%{version}/%{name}-%{version}.tar.gz
+Source0:        https://kerberos.org/dist/%{name}/%{maj_version}/%{name}-%{version}.tar.gz
 BuildRequires:  e2fsprogs-devel
 BuildRequires:  openssl-devel
 Requires:       e2fsprogs-libs
@@ -118,6 +119,9 @@ make check
 %{_datarootdir}/locale/*
 
 %changelog
+* Wed May 25 2022 Cameron Baird <cameronbaird@microsoft.com> - 1.19.3-1
+- Update to version 1.19.3 to address CVE-2021-37750
+
 * Mon Mar 07 2022 Andrew Phelps <anphel@microsoft.com> - 1.19.2-1
 - Update to version 1.19.2
 

cgmanifest.json

@@ -7311,8 +7311,8 @@
         "type": "other",
         "other": {
           "name": "krb5",
-          "version": "1.19.2",
-          "downloadUrl": "https://web.mit.edu/kerberos/dist/krb5/1.19.2/krb5-1.19.2.tar.gz"
+          "version": "1.19.3",
+          "downloadUrl": "https://kerberos.org/dist/krb5/1.19/krb5-1.19.3.tar.gz"
         }
       }
     },

toolkit/resources/manifests/package/pkggen_core_aarch64.txt

@@ -189,7 +189,7 @@ libsolv-0.7.20-1.cm2.aarch64.rpm
 libsolv-devel-0.7.20-1.cm2.aarch64.rpm
 libssh2-1.9.0-2.cm2.aarch64.rpm
 libssh2-devel-1.9.0-2.cm2.aarch64.rpm
-krb5-1.19.2-1.cm2.aarch64.rpm
+krb5-1.19.3-1.cm2.aarch64.rpm
 curl-7.83.0-1.cm2.aarch64.rpm
 curl-devel-7.83.0-1.cm2.aarch64.rpm
 curl-libs-7.83.0-1.cm2.aarch64.rpm

toolkit/resources/manifests/package/pkggen_core_x86_64.txt

@@ -189,7 +189,7 @@ libsolv-0.7.20-1.cm2.x86_64.rpm
 libsolv-devel-0.7.20-1.cm2.x86_64.rpm
 libssh2-1.9.0-2.cm2.x86_64.rpm
 libssh2-devel-1.9.0-2.cm2.x86_64.rpm
-krb5-1.19.2-1.cm2.x86_64.rpm
+krb5-1.19.3-1.cm2.x86_64.rpm
 curl-7.83.0-1.cm2.x86_64.rpm
 curl-devel-7.83.0-1.cm2.x86_64.rpm
 curl-libs-7.83.0-1.cm2.x86_64.rpm

toolkit/resources/manifests/package/toolchain_aarch64.txt

@@ -135,10 +135,10 @@ kernel-headers-5.15.41.1-1.cm2.noarch.rpm
 kmod-29-1.cm2.aarch64.rpm
 kmod-debuginfo-29-1.cm2.aarch64.rpm
 kmod-devel-29-1.cm2.aarch64.rpm
-krb5-1.19.2-1.cm2.aarch64.rpm
-krb5-debuginfo-1.19.2-1.cm2.aarch64.rpm
-krb5-devel-1.19.2-1.cm2.aarch64.rpm
-krb5-lang-1.19.2-1.cm2.aarch64.rpm
+krb5-1.19.3-1.cm2.aarch64.rpm
+krb5-debuginfo-1.19.3-1.cm2.aarch64.rpm
+krb5-devel-1.19.3-1.cm2.aarch64.rpm
+krb5-lang-1.19.3-1.cm2.aarch64.rpm
 libarchive-3.6.0-1.cm2.aarch64.rpm
 libarchive-debuginfo-3.6.0-1.cm2.aarch64.rpm
 libarchive-devel-3.6.0-1.cm2.aarch64.rpm

toolkit/resources/manifests/package/toolchain_x86_64.txt

@@ -135,10 +135,10 @@ kernel-headers-5.15.41.1-1.cm2.noarch.rpm
 kmod-29-1.cm2.x86_64.rpm
 kmod-debuginfo-29-1.cm2.x86_64.rpm
 kmod-devel-29-1.cm2.x86_64.rpm
-krb5-1.19.2-1.cm2.x86_64.rpm
-krb5-debuginfo-1.19.2-1.cm2.x86_64.rpm
-krb5-devel-1.19.2-1.cm2.x86_64.rpm
-krb5-lang-1.19.2-1.cm2.x86_64.rpm
+krb5-1.19.3-1.cm2.x86_64.rpm
+krb5-debuginfo-1.19.3-1.cm2.x86_64.rpm
+krb5-devel-1.19.3-1.cm2.x86_64.rpm
+krb5-lang-1.19.3-1.cm2.x86_64.rpm
 libarchive-3.6.0-1.cm2.x86_64.rpm
 libarchive-debuginfo-3.6.0-1.cm2.x86_64.rpm
 libarchive-devel-3.6.0-1.cm2.x86_64.rpm