[26336] in CVS-changelog-for-Kerberos-V5
svn rev #25672: branches/krb5-1-9/ src/
daemon@ATHENA.MIT.EDU (tlyu@mit.edu)
Mon Feb 6 16:02:17 2012
Date: Mon, 6 Feb 2012 16:02:15 -0500
From: tlyu@mit.edu
Message-Id: <201202062102.q16L2F6i031298@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
Content-Type: multipart/mixed; boundary="===============1535963013=="
Errors-To: cvs-krb5-bounces@mit.edu
--===============1535963013==
http://src.mit.edu/fisheye/changelog/krb5/?cs=25672
Commit By: tlyu
Log Message:
README and patchlevel.h for krb5-1.9.3
Changed Files:
U branches/krb5-1-9/README
U branches/krb5-1-9/src/patchlevel.h
Modified: branches/krb5-1-9/README
===================================================================
--- branches/krb5-1-9/README 2012-02-06 18:38:38 UTC (rev 25671)
+++ branches/krb5-1-9/README 2012-02-06 21:02:15 UTC (rev 25672)
@@ -6,7 +6,7 @@
Copyright and Other Notices
---------------------------
-Copyright (C) 1985-2011 by the Massachusetts Institute of Technology
+Copyright (C) 1985-2012 by the Massachusetts Institute of Technology
and its contributors. All rights reserved.
Please see the file named NOTICE for additional notices.
@@ -70,6 +70,31 @@
variable that enables "weak" enctypes, which defaults to "false"
beginning with krb5-1.8.
+Major changes in 1.9.3
+----------------------
+
+This is primarily a bugfix release.
+
+* Fix MITKRB5-SA-2011-007 KDC null pointer dereference in TGS handling
+ [CVE-2011-1530].
+
+* Fix an interaction in iprop that could cause spurious excess kadmind
+ processes when a kprop child fails.
+
+krb5-1.9.3 changes by ticket ID
+-------------------------------
+
+6993 Fix format string for TRACE_INIT_CREDS_SERVICE
+7007 Fix intermediate key length in hmac-md5 checksum
+7008 Exit on error in kadmind kprop child
+7009 Fix month/year units in getdate
+7016 Handle TGS referrals to the same realm
+7040 Fix failure interval of 0 in LDAP lockout code
+7043 SA-2011-007 KDC null pointer deref in TGS handling [CVE-2011-1530]
+7052 Fix subkey memory leak in krb5_get_credentials
+7068 Fix implicit declaration in ksu for some builds
+7069 krb5_server_decrypt_ticket_keytab wrongly succeeds
+
Major changes in 1.9.2
----------------------
@@ -400,6 +425,7 @@
Michael B Allen
Heinz-Ado Arnolds
Derek Atkins
+ Mark Bannister
David Bantz
Alex Baule
Arlene Berry
@@ -439,7 +465,9 @@
Philip Guenther
Dominic Hargreaves
Jakob Haufe
+ Paul B. Henson
Jeff Hodges
+ Christopher Hogan
Love Hörnquist Åstrand
Ken Hornstein
Henry B. Hotz
@@ -459,6 +487,7 @@
Nathaniel McCallum
Greg McClement
Cameron Meadors
+ Alexey Melnikov
Franklyn Mendez
Markus Moeller
Kyle Moffett
@@ -471,6 +500,7 @@
Andrej Ota
Dmitri Pal
Javier Palacios
+ Tom Parker
Ezra Peisach
W. Michael Petullo
Mark Phalan
@@ -490,6 +520,8 @@
Jorgen Wahlsten
Max (Weijun) Wang
John Washington
+ Kevin Wasserman
+ Margaret Wasserman
Marcus Watts
Simon Wilkinson
Nicolas Williams
Modified: branches/krb5-1-9/src/patchlevel.h
===================================================================
--- branches/krb5-1-9/src/patchlevel.h 2012-02-06 18:38:38 UTC (rev 25671)
+++ branches/krb5-1-9/src/patchlevel.h 2012-02-06 21:02:15 UTC (rev 25672)
@@ -52,7 +52,7 @@
*/
#define KRB5_MAJOR_RELEASE 1
#define KRB5_MINOR_RELEASE 9
-#define KRB5_PATCHLEVEL 2
-#define KRB5_RELTAIL "postrelease"
+#define KRB5_PATCHLEVEL 3
+/* #undef KRB5_RELTAIL */
/* #undef KRB5_RELDATE */
-#define KRB5_RELTAG "branches/krb5-1-9"
+#define KRB5_RELTAG "tags/krb5-1-9-3-final"
--===============1535963013==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
--===============1535963013==--
