~vorlon/ubuntu/natty/krb5/multiarch : changes

~vorlon/ubuntu/natty/krb5/multiarch » Changes from revision 49

From Revision 46 to 27

Rev	Summary	Authors	Tags	Date
46	munge our debhelper .in files in the install target, so we h... munge our debhelper .in files in the install target, so we have them for dh_installdirs	Steve Langasek		13 years ago
45	Use globs and .install.in files, not env var substitutions. Use globs and .install.in files, not env var substitutions.	Steve Langasek		13 years ago
44	roll compat level back to 7, we're not using any of the new ... roll compat level back to 7, we're not using any of the new multiarch features here	Steve Langasek		13 years ago
43	Bump debhelper build-dependency to final natty version. Bump debhelper build-dependency to final natty version.	Steve Langasek		13 years ago
42	merge from natty merge from natty	Steve Langasek	1.8.3+dfsg-5ubuntu1+multiarch.1	13 years ago
41	merge from natty merge from natty	Steve Langasek	1.8.3+dfsg-5multiarch1	13 years ago
40	libkrb5-dev needs the multiarch libdir created for us. libkrb5-dev needs the multiarch libdir created for us.	Steve Langasek	1.8.3+dfsg-4ubuntu1+multiarch.5	13 years ago
39	Fix libkrb5-dev to include the correct .so symlinks into mit... Fix libkrb5-dev to include the correct .so symlinks into mit-krb5.	Steve Langasek	1.8.3+dfsg-4ubuntu1+multiarch.4	13 years ago
38	Not using dh_auto_configure, so we still need to pass --libd... Not using dh_auto_configure, so we still need to pass --libdir manually.	Steve Langasek	1.8.3+dfsg-4ubuntu1+multiarch.3	13 years ago
37	Rebuild for final multiarch paths. Rebuild for final multiarch paths.	Steve Langasek	1.8.3+dfsg-4ubuntu1+multiarch.2	13 years ago
36	releasing version 1.8.3+dfsg-4ubuntu1+multiarch.1 releasing version 1.8.3+dfsg-4ubuntu1+multiarch.1	Steve Langasek	1.8.3+dfsg-4ubuntu1+multiarch.1	13 years ago
35	Add Breaks: on external packages (i.e., sssd) using /usr/lib... Add Breaks: on external packages (i.e., sssd) using /usr/lib/krb5 due to the path transition.	Steve Langasek		13 years ago
34	Build for multiarch, using the prospective debhelper env sub... Build for multiarch, using the prospective debhelper env substitution support.	Steve Langasek		13 years ago
33	* SECURITY UPDATE: kpropd denial of service via invalid netw... * SECURITY UPDATE: kpropd denial of service via invalid network input - src/slave/kpropd.c: don't return on kpropd child exit; applied inline. - CVE-2010-4022 - MITKRB5-SA-2011-001 * SECURITY UPDATE: kdc denial of service from unauthenticated remote attackers - src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.h, src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c, src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c, src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c: applied inline - CVE-2011-0281 - CVE-2011-0282 - MITKRB5-SA-2011-002	Steve Beattie	1.8.3+dfsg-4ubuntu1	13 years ago
32	Ignore PACs without a server signature generated by OS X Ope... Ignore PACs without a server signature generated by OS X Open Directory rather than failing authentication, Closes: #604925	Sam Hartman	1.8.3+dfsg-4	13 years ago
31	* MITKRB5-SA-2010-007 * MITKRB5-SA-2010-007 * CVE-2010-1324: An unauthenticated attacker can inject arbitrary content into an existing GSS connection that appears to be integrity protected from the legitimate peer under some circumstances * GSS applications may accept a PAC produced by an attacker as if it were signed by a KDC * CVE-2010-1323: attackers have a 1/256 chance of being able to produce krb_safe messages that appear to be from legitimate remote sources. Other than use in KDC database copies this may not be a huge issue only because no one actually uses krb_safe messages. Similarly, an attacker can force clients to display challenge/response values of the attacker's choice. * CVE-2010-4020: An attacker may be able to generate what is accepted as a ad-signedpath or ad-kdc-issued checksum with 1/256 probability * New Vietnamese debconf translations, Thanks Clytie Siddall, Closes: #601533 * Update standards version to 3.9.1 (no changes required	Sam Hartman	1.8.3+dfsg-3	13 years ago
30	* MITKRB5-SA-2010-006 [CVE-2010-1322]: null pointer derefere... * MITKRB5-SA-2010-006 [CVE-2010-1322]: null pointer dereference in kdc_authdata.c leading to KDC crash, Closes: #599237 * Fix two memory leaks in krb5_get_init_creds path; one of these memory leaks is quite common for any application such as PAM or kinit that gets initial credentials, thanks Bastian Blank, Closes: #598032 * Install doc/CHANGES only in krb5-doc, not in all packages, saves several megabytes on most Debian systems, Closes: #599562	Sam Hartman	1.8.3+dfsg-2	13 years ago
29	* SECURITY UPDATE: remote authenticated user denial of servi... * SECURITY UPDATE: remote authenticated user denial of service. - src/kdc/kdc_authdata.c: patched inline, thanks to upstream. - CVE-2010-1322, MITKRB5-SA-2010-006	Kees Cook	1.8.1+dfsg-5ubuntu0.1	13 years ago
28	* Ignore duplicate token sent in mechListMIC from Windows 20... * Ignore duplicate token sent in mechListMIC from Windows 2000 SPNEGO (LP: #551901) * krb5-admin-server starts after krb5-kdc, Closes: #583494	Sam Hartman	1.8.1+dfsg-5	13 years ago
27	* CVE-2010-1321 GSS-API accept sec context null pointer dere... * CVE-2010-1321 GSS-API accept sec context null pointer deref, Closes: #582261 * Force use of bash for build, Closes: #581473 * Start slapd before krb5 when krb5-kdc-ldap installed, Closes: #582122	Sam Hartman	1.8.1+dfsg-3	13 years ago

Older »