~ubuntu-branches/ubuntu/dapper/krb5/dapper-updates

« back to all changes in this revision

Viewing changes to debian/changelog

  • Committer: Bazaar Package Importer
  • Author(s): Kees Cook
  • Date: 2010-01-11 14:40:21 UTC
  • Revision ID: james.westby@ubuntu.com-20100111144021-54akl1okuud4tahn
Tags: 1.4.3-5ubuntu0.10
* SECURITY UPDATE: unauthenticated remote attacker can crash or
  compromise the KDC via flaws in AES and RC4 decryption (CVE-2009-4212).
  - debian/patches/MITKRB5-SA-2009-004 backported and applied inline.
  - http://web.mit.edu/kerberos/advisories/2009-004-patch_1.6.3.txt

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
krb5 (1.4.3-5ubuntu0.10) dapper-security; urgency=low
 
2
 
 
3
  * SECURITY UPDATE: unauthenticated remote attacker can crash or
 
4
    compromise the KDC via flaws in AES and RC4 decryption (CVE-2009-4212).
 
5
    - debian/patches/MITKRB5-SA-2009-004 backported and applied inline.
 
6
    - http://web.mit.edu/kerberos/advisories/2009-004-patch_1.6.3.txt
 
7
 
 
8
 -- Kees Cook <kees@ubuntu.com>  Mon, 11 Jan 2010 14:40:21 -0800
 
9
 
1
10
krb5 (1.4.3-5ubuntu0.8) dapper-security; urgency=low
2
11
 
3
12
  * SECURITY UPDATE: denial of service via memory corruption.