[25925] in CVS-changelog-for-Kerberos-V5
svn rev #25415: branches/krb5-1-8/ src/
daemon@ATHENA.MIT.EDU (tlyu@mit.edu)
Tue Oct 25 15:58:33 2011
Date: Tue, 25 Oct 2011 15:58:30 -0400
From: tlyu@mit.edu
Message-Id: <201110251958.p9PJwUpU018397@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
http://src.mit.edu/fisheye/changelog/krb5/?cs=25415
Commit By: tlyu
Log Message:
README and patchlevel.h for krb5-1.8.5-beta1.
Changed Files:
U branches/krb5-1-8/README
U branches/krb5-1-8/src/patchlevel.h
Modified: branches/krb5-1-8/README
===================================================================
--- branches/krb5-1-8/README 2011-10-25 18:30:14 UTC (rev 25414)
+++ branches/krb5-1-8/README 2011-10-25 19:58:29 UTC (rev 25415)
@@ -87,6 +87,24 @@
This is primarily a bugfix release.
+* Fix MITKRB5-SA-2011-006 KDC denial of service vulnerabilities
+ [CVE-2011-1528 CVE-2011-1529 CVE-2011-4151].
+
+krb5-1.8.4 changes by ticket ID
+-------------------------------
+
+6925 Memory leak in save_error_string_nocopy()
+6926 work around Dejagnu failure on modern Tcl
+6983 SA-2011-006 KDC denial of service [CVE-2011-1527 CVE-2011-1528
+ CVE-2011-1529]
+6984 modernize doc/Makefile somewhat
+6991 fix tar invocation in mkrel
+
+Major changes in 1.8.4
+----------------------
+
+This is primarily a bugfix release.
+
* Fix vulnerabilities:
** KDC uninitialized pointer crash [MITKRB5-SA-2010-006 CVE-2010-1322]
** kpropd denial of service [MITKRB5-SA-2011-001 CVE-2010-4022]
@@ -397,6 +415,7 @@
Columbia University
Cornell University
The Department of Defense of the United States of America (DoD)
+ Fidelity Investments
Google
Iowa State University
MIT
@@ -431,6 +450,7 @@
Mark Colan
Don Davis
Alexandra Ellwood
+ Carlos Garay
Dan Geer
Nancy Gilman
Matt Hancher
@@ -445,6 +465,7 @@
Kevin Koch
John Kohl
HaoQi Li
+ Jonathan Lin
Peter Litwack
Scott McGuire
Steve Miller
@@ -530,6 +551,7 @@
Jan iankko Lieskovsky
Kevin Longfellow
Ryan Lynch
+ Nathaniel McCallum
Cameron Meadors
Franklyn Mendez
Markus Moeller
Modified: branches/krb5-1-8/src/patchlevel.h
===================================================================
--- branches/krb5-1-8/src/patchlevel.h 2011-10-25 18:30:14 UTC (rev 25414)
+++ branches/krb5-1-8/src/patchlevel.h 2011-10-25 19:58:29 UTC (rev 25415)
@@ -52,7 +52,7 @@
*/
#define KRB5_MAJOR_RELEASE 1
#define KRB5_MINOR_RELEASE 8
-#define KRB5_PATCHLEVEL 4
-#define KRB5_RELTAIL "postrelease"
+#define KRB5_PATCHLEVEL 5
+#define KRB5_RELTAIL "beta1"
/* #undef KRB5_RELDATE */
-#define KRB5_RELTAG "branches/krb5-1-8"
+#define KRB5_RELTAG "tags/krb5-1-8-5-beta1"
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
