~ubuntu-branches/ubuntu/trusty/krb5/trusty-proposed : changes

~ubuntu-branches/ubuntu/trusty/krb5/trusty-proposed » Changes from revision 52

From Revision 52 to 33

Rev	Summary	Authors	Tags	Date
52	Fix UDP ping-pong in kpasswd server [CVE-2002-2443], Closes:... Fix UDP ping-pong in kpasswd server [CVE-2002-2443], Closes: #708267	Sam Hartman	1.10.1+dfsg-6	11 years ago
51	* Import workaround for getaddrinfo bug from upstream. Desc... * Import workaround for getaddrinfo bug from upstream. Described in upstream's RT 7124, Closes: #704647 * Correct CVE number for CVE-2012-1016 in changelog and patches, Closes: #703457 * Import upstream's fix for CVE-2013-1416, Closes: #704775	Benjamin Kaduk	1.10.1+dfsg-5	11 years ago
50	* Non-maintainer upload by the Security Team. * Non-maintainer upload by the Security Team. * Fix cve-2013-1016: null pointer derefence when handling a draft9 request (closes: #702633).	Michael Gilbert	1.10.1+dfsg-4+nmu1	11 years ago
49	KDC null pointer dereference with PKINIT, CVE-2013-1415 KDC null pointer dereference with PKINIT, CVE-2013-1415	Benjamin Kaduk	1.10.1+dfsg-4	11 years ago
48	* Kadmind crash only triggered by admin users, cve-2012-1013... * Kadmind crash only triggered by admin users, cve-2012-1013, Closes: #687647 * Don't unload GSS-API plugins to avoid crashing applications that use GSS-API on systems with plugins installed, Closes: #693741	Sam Hartman	1.10.1+dfsg-3	11 years ago
47	* MITKRB5-SA-2012-001 [CVE-2012-1014 CVE-2012-1015] KDC free... * MITKRB5-SA-2012-001 [CVE-2012-1014 CVE-2012-1015] KDC frees uninitialized pointers * Break libgssglue1 << 0.2-2 for multiarch, Closes: #680612 * Don't free caller's principal in verify_init_creds, Closes: #512410	Sam Hartman	1.10.1+dfsg-2	11 years ago
46	* New Upstream Version * New Upstream Version - Set display_name in gss_get_name_attribute, Closes: #658514 * Fix use counts on preauthentication, Closes: #670457 * Fix kadmin access controls, Closes: #670918 * Accept NMU with longer hostname, Closes: #657027 * Fix history from old databases, Closes: #660869 * Fix gcc 4.6.2 may be used uninitialized warnings/errors, Closes: #672075 * Check all keys in keytab for verifying credentials, Possibly fixes: #669127 * Avoid multi-arch libpath in krb5-config, Closes: #642229 * Debconf translations: - Turkish debconf Translation, Thanks Atila KOC, Closes: #659072 - Polish, thanks Michal/ Kul/ach, Closes: #658437	Sam Hartman	1.10.1+dfsg-1	12 years ago
45	* Non-maintainer upload. * Non-maintainer upload. * Apply patch from Svante Signell to fix FTBFS on hurd-i386, Closes: #657027.	Samuel Thibault	1.10+dfsg~beta1-2.1	12 years ago
44	Oops, actually fix build flags, Closes: #655248 Oops, actually fix build flags, Closes: #655248	Sam Hartman	1.10+dfsg~beta1-2	12 years ago
43	New upstream Version New upstream Version	Sam Hartman	1.10+dfsg~alpha2-1	12 years ago
42	* Fix segfault with unknown hostnames in krb5_sname_to_princ... * Fix segfault with unknown hostnames in krb5_sname_to_principal, Closes: #650671 * Indicate that this library breaks libsmbclient versions that depend on krb5_locate_kdc, Closes: #650603, #650611	Sam Hartman	1.10+dfsg~alpha1-6	12 years ago
41	Add texinfo back to build depends: policy has been subverted... Add texinfo back to build depends: policy has been subverted by the evil forces of wishful thinking and forward progress	Sam Hartman	1.10+dfsg~alpha1-5	12 years ago
40	* Add kadmind and krb5kdc pidfiles, Closes: #550781 * Add kadmind and krb5kdc pidfiles, Closes: #550781 * Respect locale in time display, Closes: #138430 * Status action for init scripts, Thanks Yukio Shiiya, Closes: #645363, #645364 * Fix dependencies for krb5-kdc * Add dpkg-buildflags support * Initial build-arch and build-indep support: currently build-indep depends on build-arch but that's OK as a starting point	Sam Hartman	1.10+dfsg~alpha1-4	12 years ago
39	New function gss_localname from trunk New function gss_localname from trunk	Sam Hartman	1.9.1+dfsg-3	12 years ago
38	* Revert incorrect Danish translations * Revert incorrect Danish translations * Multiarch support, Thanks Steve Langasek, Closes: #634121 * Use linux-any in debian/control instead of explicit exclusions, Closes: #634311 * Apply upstream r24977 in order to fix problems where a name exists for v6 but not v4, Closes: #532536 * Apply upstream tickets 6916 and 6917 to fi x referrals behavior with old KDCs, Closes: #631106	Sam Hartman	1.9.1+dfsg-2	12 years ago
37	* New upstream version * New upstream version * Fix g_make_token_header when no token type is passed * Support absolute paths for GSS-API mechanisms * Add gss_authorize_localname, gss_userok, gss_pname_to_uid * Fix gss_acquire_cred handling with empty mech set; fix accept_sec_context handling in this case too * Permit importing anonymous name with empty buffer * New Translations: - Dutch: Thanks Vincent Zweije, Closes: #624173 - Danish, Thanks Joe Dalton, Closes: #626530 * Fix kadmin free of null pointer on change password, Closes: #622681	Sam Hartman	1.9.1+dfsg-1	13 years ago
36	* New upstream version * New upstream version * Pull in krb5 1.9 branch as of 03/16/2011 - Include updates in 1.8.3+dfsg-4, 1.8.3+dfsg-5, 1.8.3+dfsg-6 - Include fixes for trace logging * Since Debian does not and will not ever build with edirectory support, remove documentation of edirectory commands from the man page. Closes: #580502 * Includes IPv6 support for kadmind, Closes: #595796 * Upstream 1.9 supports hooks for password change and synchronization, Closes: #588968 * LDAP now supports stash creation after db cretaion, Closes: #484808 * Krb5 1.9 supports including files from krb5.conf, Closes: #429692	Sam Hartman	1.9+dfsg-1	13 years ago
35	* Fix double free with pkinit on KDC, CVE-2011-0284, Closes:... * Fix double free with pkinit on KDC, CVE-2011-0284, Closes: #618517 * Updated Danish debconf translations, thanks Joe Dalton, Closes: #584282	Sam Hartman	1.8.3+dfsg-6	13 years ago
34	* KDC/LDAP DOS (CVE-2010-4022, CVE-2011-0281, and CVE-201... * KDC/LDAP DOS (CVE-2010-4022, CVE-2011-0281, and CVE-2011-0282, Closes: #613487 * Fix delegation of credentials against Windows servers; significant interoperability issue, Closes: #611906 * Set nt-srv-inst on TGS names to work against W2K8R2 KDCs, Closes: #616429 * Don't fail authentication when PAC verification fails; support hmac- md5 checksums even for non-RC4 keys, Closes: #616728	Sam Hartman	1.8.3+dfsg-5	13 years ago
33	Ignore PACs without a server signature generated by OS X Ope... Ignore PACs without a server signature generated by OS X Open Directory rather than failing authentication, Closes: #604925	Sam Hartman	1.8.3+dfsg-4	13 years ago

Older »