~peter-pearse/ubuntu/natty/krb5/bootstrap1 : changes

~peter-pearse/ubuntu/natty/krb5/bootstrap1 » Changes from revision 34

From Revision 34 to 15

Rev	Summary	Authors	Tags	Date
34	Stage 1 build for bootstrapping - debian staging mechanism n... Stage 1 build for bootstrapping - debian staging mechanism not implemented.	Peter Pearse		13 years ago
33	* SECURITY UPDATE: kpropd denial of service via invalid netw... * SECURITY UPDATE: kpropd denial of service via invalid network input - src/slave/kpropd.c: don't return on kpropd child exit; applied inline. - CVE-2010-4022 - MITKRB5-SA-2011-001 * SECURITY UPDATE: kdc denial of service from unauthenticated remote attackers - src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.h, src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c, src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c, src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c: applied inline - CVE-2011-0281 - CVE-2011-0282 - MITKRB5-SA-2011-002	Steve Beattie	1.8.3+dfsg-4ubuntu1	13 years ago
32	Ignore PACs without a server signature generated by OS X Ope... Ignore PACs without a server signature generated by OS X Open Directory rather than failing authentication, Closes: #604925	Sam Hartman	1.8.3+dfsg-4	13 years ago
31	* MITKRB5-SA-2010-007 * MITKRB5-SA-2010-007 * CVE-2010-1324: An unauthenticated attacker can inject arbitrary content into an existing GSS connection that appears to be integrity protected from the legitimate peer under some circumstances * GSS applications may accept a PAC produced by an attacker as if it were signed by a KDC * CVE-2010-1323: attackers have a 1/256 chance of being able to produce krb_safe messages that appear to be from legitimate remote sources. Other than use in KDC database copies this may not be a huge issue only because no one actually uses krb_safe messages. Similarly, an attacker can force clients to display challenge/response values of the attacker's choice. * CVE-2010-4020: An attacker may be able to generate what is accepted as a ad-signedpath or ad-kdc-issued checksum with 1/256 probability * New Vietnamese debconf translations, Thanks Clytie Siddall, Closes: #601533 * Update standards version to 3.9.1 (no changes required	Sam Hartman	1.8.3+dfsg-3	13 years ago
30	* MITKRB5-SA-2010-006 [CVE-2010-1322]: null pointer derefere... * MITKRB5-SA-2010-006 [CVE-2010-1322]: null pointer dereference in kdc_authdata.c leading to KDC crash, Closes: #599237 * Fix two memory leaks in krb5_get_init_creds path; one of these memory leaks is quite common for any application such as PAM or kinit that gets initial credentials, thanks Bastian Blank, Closes: #598032 * Install doc/CHANGES only in krb5-doc, not in all packages, saves several megabytes on most Debian systems, Closes: #599562	Sam Hartman	1.8.3+dfsg-2	13 years ago
29	* SECURITY UPDATE: remote authenticated user denial of servi... * SECURITY UPDATE: remote authenticated user denial of service. - src/kdc/kdc_authdata.c: patched inline, thanks to upstream. - CVE-2010-1322, MITKRB5-SA-2010-006	Kees Cook	1.8.1+dfsg-5ubuntu0.1	13 years ago
28	* Ignore duplicate token sent in mechListMIC from Windows 20... * Ignore duplicate token sent in mechListMIC from Windows 2000 SPNEGO (LP: #551901) * krb5-admin-server starts after krb5-kdc, Closes: #583494	Sam Hartman	1.8.1+dfsg-5	13 years ago
27	* CVE-2010-1321 GSS-API accept sec context null pointer dere... * CVE-2010-1321 GSS-API accept sec context null pointer deref, Closes: #582261 * Force use of bash for build, Closes: #581473 * Start slapd before krb5 when krb5-kdc-ldap installed, Closes: #582122	Sam Hartman	1.8.1+dfsg-3	13 years ago
26	Fix crash in renewal and validation, Thanks Joel Johnson for... Fix crash in renewal and validation, Thanks Joel Johnson for such a prompt bug report, Closes: #577490	Sam Hartman	1.8.1+dfsg-2	14 years ago
25	* SECURITY UPDATE: unauthenticated remote service crash. * SECURITY UPDATE: unauthenticated remote service crash. - src/lib/gssapi/spnego/spnego_mech.c: back-ported upstream fixes from krb5 1.8.1. - MITKRB5-SA-2010-002 (CVE-2010-0628)	Kees Cook	1.8+dfsg~alpha1-7ubuntu1	14 years ago
24	* MITKRB5-SA-2010-001: Avoid an assertion failure leading to... * MITKRB5-SA-2010-001: Avoid an assertion failure leading to a denial of service in the KDC by doing better input validation. (CVE-2010-0283) * Update standards version to 3.8.4 (no changes required).	Russ Allbery	1.8+dfsg~alpha1-7	14 years ago
23	[ Sam Hartman ] [ Sam Hartman ] * New API to allow an application to enable weak crypto * Rename libkadm5clnt and libkadm5srv to libkadm5clnt_mit and libkadm5srv_mit in order to avoid conflicts with Heimdal packages. Sorry for the second trip through new, but we needed to coordinate with upstream on the ABI issues involved with this change. * Medium urgency in order to get a fix for openafs-krb5 weak crypto into testing sooner * Include fix for pam-krb5 segfault with wrong password; bump urgency to high. [ Russ Allbery ] * Change libkrb5-dbg to only depend on libkrb5-3, libk5crypto3, or libkrb5support0. All of the other packages for which it provides debugging symbols also depend on one of those packages and always will, so listing the disjunction of every library package is overkill. Remove from the Depends several obsolete library packages no longer included. * Drop obsolete Replaces for libkadm5srv-mit7 and libkadm5clnt-mit7. * Wrap krb5-multidev dependencies and description and shorten the short description. * Reformat NEWS.Debian to avoid using a bulleted list per devref. [ Sam Hartman ] * Link libkadm5{clnt,srv}.so specially so that the links work without libkrb5-dev installed	Sam Hartman	1.8+dfsg~alpha1-5	14 years ago
22	* Add replaces to deal with moving files from krb5-multidev ... * Add replaces to deal with moving files from krb5-multidev to libkrb5-dev, Closes: #565217 * This is definitely the getting all the conflicts combinations right is tricky series of releases. Sorry about the wasted cycles.	Sam Hartman	1.8+dfsg~alpha1-4	14 years ago
21	cve-2009-3295, MIT-KRB5-SA-2009-003: KDC crash when failing ... cve-2009-3295, MIT-KRB5-SA-2009-003: KDC crash when failing to find the realm of a host., Thanks 2Jakob Haufe for the report to Debian	Sam Hartman	1.7+dfsg-4	14 years ago
20	* Fix typo in control file * Fix typo in control file * Exclude usr/lib/krb5/plugins from dh_makeshlibs call to deal with behavior change in dh_makeshlibs, Closes: #558719	Sam Hartman	1.7+dfsg-3	14 years ago
19	* New upstream release * New upstream release * Revert relaxation of Debian symbol versions introduced in 1.7dfsg~beta1-3 * Fix kproplog's manpage (LP: #374819)	Sam Hartman	1.7dfsg~beta3-1	14 years ago
18	* Apply upstream patch from ticket 6488 intended to fix * Apply upstream patch from ticket 6488 intended to fix gss_krb5_export_lucid_sec_context and thus NFs; hopefully fixes #528514 * Apply patch from ticket 6489 to fix UCS2 handling in RC4 string to key and PAC routines	Sam Hartman	1.7dfsg~beta2-2	14 years ago
17	* New Upstream release including FAST support for DES and 3D... * New Upstream release including FAST support for DES and 3DES. * Remove non-free content accidentally reintroduced in beta1, Closes: #528555 * Add strict dependency from libgssapi-krb5-2 to libkrb5-3 as discussed in #528514	Sam Hartman	1.7dfsg~beta2-1	14 years ago
16	When decrypting the TGS response fails with the subkey, try... When decrypting the TGS response fails with the subkey, try with the session key to work around Heimdal bug, Closes: #527353	Sam Hartman	1.7dfsg~beta1-4	14 years ago
15	* SECURITY UPDATE: denial of service via buffer overflows. * SECURITY UPDATE: denial of service via buffer overflows. - src/lib/gssapi/spnego/spnego_mech.c, src/lib/krb5/asn.1/asn1buf.c: GSS-API could be crashed remotely (MITKRB5-SA-2009-001: CVE-2009-0844, CVE-2009-0845, CVE-2009-0847). - src/lib/krb5/asn.1/asn1_decode.c: ASN.1 decoder freed uninitialized pointers (MITKRB5-SA-2009-002: CVE-2009-0846).	Kees Cook	1.6.dfsg.4~beta1-5ubuntu2	15 years ago

Older »