[28611] in CVS-changelog-for-Kerberos-V5
krb5 commit [krb5-1.13]: Updates for krb5-1.13-beta1
daemon@ATHENA.MIT.EDU (Tom Yu)
Fri Sep 26 08:44:43 2014
Date: Fri, 26 Sep 2014 08:44:36 -0400
From: Tom Yu <tlyu@mit.edu>
Message-Id: <201409261244.s8QCia7w015545@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/bc6eaaa14cdeeaf1b057116c6d3ebf0b30781a36
commit bc6eaaa14cdeeaf1b057116c6d3ebf0b30781a36
Author: Tom Yu <tlyu@mit.edu>
Date: Wed Sep 24 19:30:54 2014 -0400
Updates for krb5-1.13-beta1
README | 35 +++++++++++++++++++++++++++++++++++
src/patchlevel.h | 4 ++--
src/po/mit-krb5.pot | 4 ++--
3 files changed, 39 insertions(+), 4 deletions(-)
diff --git a/README b/README
index 37f5d1a..79211e9 100644
--- a/README
+++ b/README
@@ -90,6 +90,12 @@ Administrator experience:
* Add support to the LDAP KDB module for binding to the LDAP server using SASL.
+* The KDC listens for TCP connections by default.
+
+* Fix a minor key disclosure vulnerability where using the "keepold"
+ option to the kadmin randkey operation could return the old keys.
+ [CVE-2014-5351]
+
User experience:
* Add client support for the Kerberos Cache Manager protocol. If the
@@ -113,6 +119,7 @@ krb5-1.13 changes by ticket ID
884 having "-" in key:salt separator list prevents salttype
defaulting from working
1794 don't use mktemp
+3498 race opening/creating replay cache.
5958 kadmin salttype "no salt" means really means "default/normal
salt"
6034 rework gic_opt_ext to be more portable
@@ -120,6 +127,7 @@ krb5-1.13 changes by ticket ID
than "ignore salttype"
6413 pkinit thread safety
6550 old_stash_bendian is a keytab
+6731 KDC should listen to TCP by default
7232 Confusing error message for key version mismatch
7704 Anonymous kadmin does not work
7728 ksu assumes the invoking user's using a FILE: ccache
@@ -183,6 +191,30 @@ krb5-1.13 changes by ticket ID
7986 Copy config entries to the ksu target ccache
7987 Fix GSS krb5 GSS_C_DELEG_FLAG ret_flags result
7988 Make krb5_cc_new_unique create DIR: directories
+7990 Fix HP-UX build support
+7992 Fix test syntax in configure.in
+7993 Autodetect OpenSSL CMS for LibreSSL compatibility
+7994 randkey does not update principal's master key version
+7995 kadmin change_password -keepold does not work with master key
+ migration
+7996 Simplify and improve ksu cred verification
+7997 kadm5_randkey_principal interop with Solaris KDC
+7998 gssapi.dll tries to get initial creds even when some are
+ present
+8000 gssapi.dll fails to detect TGTs in the MSLSA cache when UAC is
+ enabled
+8001 Allow logger.c to work with redirected stderr
+8003 Export gssrpc_bindresvport_sa
+8004 Map .hin files to the C language for doxygen
+8005 Initialize iterflags in update_princ_encryption
+8006 Update NOTICE for 1.13
+8007 In ksu, handle typeless default_ccache_name values
+8008 Document clock skew tolerance for ticket times
+8015 Fix ksu crash in cases where it obtains the TGT
+8016 Restore providing password TGTs for the ksu target
+8017 gss_acquire_cred_impersonate_name crashes with acceptor-only
+ impersonator creds
+8018 Return only new keys in randkey [CVE-2014-5351]
Acknowledgements
----------------
@@ -375,6 +407,7 @@ reports, suggestions, and valuable resources:
Edward Murrell
Nikos Nikoleris
Felipe Ortega
+ Michael Osipov
Andrej Ota
Dmitri Pal
Javier Palacios
@@ -383,11 +416,13 @@ reports, suggestions, and valuable resources:
Zoran Pericic
W. Michael Petullo
Mark Phalan
+ Brett Randall
Jonathan Reams
Robert Relyea
Martin Rex
Jason Rogers
Nate Rosenblum
+ Solly Ross
Mike Roszkowski
Guillaume Rousse
Andreas Schneider
diff --git a/src/patchlevel.h b/src/patchlevel.h
index 1045e99..9364994 100644
--- a/src/patchlevel.h
+++ b/src/patchlevel.h
@@ -52,6 +52,6 @@
#define KRB5_MAJOR_RELEASE 1
#define KRB5_MINOR_RELEASE 13
#define KRB5_PATCHLEVEL 0
-#define KRB5_RELTAIL "alpha1-postrelease"
+#define KRB5_RELTAIL "beta1"
/* #undef KRB5_RELDATE */
-#define KRB5_RELTAG "krb5-1.13"
+#define KRB5_RELTAG "krb5-1.13-beta1"
diff --git a/src/po/mit-krb5.pot b/src/po/mit-krb5.pot
index 122afcc..d2621ca 100644
--- a/src/po/mit-krb5.pot
+++ b/src/po/mit-krb5.pot
@@ -6,9 +6,9 @@
#, fuzzy
msgid ""
msgstr ""
-"Project-Id-Version: mit-krb5 1.13-alpha1-postrelease\n"
+"Project-Id-Version: mit-krb5 1.13-beta1\n"
"Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2014-09-24 19:12-0400\n"
+"POT-Creation-Date: 2014-09-24 19:31-0400\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
