Merge heimdal from Debian unstable for lunar

[Bryce Harrington]

Scheduled-For: ubuntu-22.11
Upstream: tbd
Debian: 7.7.0+dfsg-6
Ubuntu: 7.7.0+dfsg-4ubuntu1

### New Debian Changes ###

heimdal (7.7.0+dfsg-6) unstable; urgency=medium

  * Retry deleting dangling windc.so again. Closes: #577229.
  * Create /var/lib/heimdal-kdc/m-key not /var/lib/heimdal-kdc/heimdal.mkey.
    Closes: #964008.
  * Disable use of -rpath in krb5-config.heimdal. Closes: #868840.

 -- Brian May <email address hidden> Mon, 05 Sep 2022 08:35:33 +1000

heimdal (7.7.0+dfsg-5) unstable; urgency=medium

  * Fix missing closefrom symbol. Closes: #1016884, #1017244.
  * Fix spelling of dependency in changelog.
  * Fix override_dh_fixperms typo, use 700 for /var/lib/heimdal-kdc/
  * Remove default --parallel from dh call.
  * Remove unused debian/upstream/signing-key.asc key.
  * Fix Multi-Arch headers. heimdal-multidev is not co-installable, so
    heimdal-dev cannot be co-installable either.

 -- Brian May <email address hidden> Fri, 02 Sep 2022 07:59:59 +1000

heimdal (7.7.0+dfsg-4) unstable; urgency=medium

  * Delete dependency on install-info. Closes: #1013735.
  * Non-maintainer upload.
  * Reduce Build-Depends: (Closes: #980531)
    + Drop unused libhesiod-dev.
    + Drop unused libperl4-corelibs-perl as cf/make-proto.pl no longer uses
      it.
    + Drop unused libx11-dev, libxau-dev, libxt-dev, ss-dev, and
      x11proto-core-dev.
    + Clean generated C tables to actually rebuild them using python3.

 -- Brian May <email address hidden> Mon, 27 Jun 2022 10:36:10 +1000

heimdal (7.7.0+dfsg-3) unstable; urgency=high

  * Fix CVE-2021-3671: A null pointer de-reference was found in the way
    samba kerberos server handled missing sname in TGS-REQ. Closes: #996586.
  * Fix autoconf 2.7 issues.

 -- Brian May <email address hidden> Wed, 17 Nov 2021 12:12:45 +1100

heimdal (7.7.0+dfsg-2) unstable; urgency=medium

  * Build using python3. Closes: #936695, #960032.

 -- Brian May <email address hidden> Tue, 12 May 2020 06:56:04 +1000

heimdal (7.7.0+dfsg-1) unstable; urgency=medium

  * New upstream version.
  * Fix CVE-2019-14870: The DelegationNotAllowed Kerberos feature restriction
    was not being applied when processing protocol
    transition requests (S4U2Self), in the AD DC KDC. Closes: #946786.

 -- Brian May <email address hidden> Tue, 17 Dec 2019 20:23:41 +1100

heimdal (7.5.0+dfsg-3) unstable; urgency=high

  * CVE-2018-16860: Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum.
    Closes: #928966.
  * CVE-2019-12098: Always confirm PA-PKINIT-KX for anon PKINIT.
    Closes: #929064.
  * Update test certificates to pre 2038 expiry. Closes: #923930.

 -- Brian May <email address hidden> Tue, 21 May 2019 18:04:35 +1000

heimdal (7.5.0+dfsg-2.1) unstable; urgency=medium

  * Non-maintainer upload
  * Add patch to create headers before building (Closes: 906623)

 -- Hilko Bengen <email address hidden> Sun, 28 Oct 2018 15:10:44 +0100

heimdal (7.5.0+dfsg-2) unstable; urgency=medium

  * Replace 'MAXHOSTNAMELEN' with 'MaxHostNameLen' in kdc/kx509.c for The
    Hurd. Closes: #900079.

 -- Brian May <email address hidden> Sat, 02 Jun 2018 10:01:46 +1000

heimdal (7.5.0+dfsg-1) unstable; urgency=high

  * New upstream version. (Closes: #850723)
    + CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.4
      (Closes: #878144, #868157)
    + Refresh patches.
  * Bump Standards-Version to 4.1.2 and compat level to 10.
    + Remove explicit reference to dh-autoreconf.
  * Use uscan to get orig source.
    + Refrain from mangling some bundled RFC texts;
      just exclude the mas they are not installed into any binary anyway.
    + Update d/copyright to DEP-5.
    + Can now use standard uscan/gbp/pristine-tar workflow.
  * Fix some lintian errors/warnings.
    + Strip trailing whitespace from changelog.
    + Fix some duplicate long descriptions.
    + Use optional priority everywhere.
    + Update/remove some overrides.

### Old Ubuntu Delta ###

heimdal (7.7.0+dfsg-4ubuntu1) kinetic; urgency=medium

  * Merge with Debian unstable (LP: #1971280). Remaining changes:
    - d/rules: Disable lto, to regain dep on roken, otherwise
      dependencies on amd64 are different than i386 resulting in
      different files on amd64 and i386.
      (LP #1934936)
    - d/libroken18-heimdal.symbols: Remove symbol
      rk_closefrom@HEIMDAL_ROKEN_1.0 1.4.0+git20110226 Applied verbatim
      debdiff from Heinrich Schuchardt (xypron).
      (LP #1945787)

 -- Bryce Harrington <email address hidden> Wed, 20 Jul 2022 16:52:39 -0700

[Bryce Harrington (bryce)]

Uploaded.

 heimdal | 7.7.0+dfsg-4ubuntu1 | lunar/universe
 heimdal | 7.7.0+dfsg-6ubuntu1 | lunar-proposed/universe

[Launchpad Janitor (janitor)]

This bug was fixed in the package heimdal - 7.7.0+dfsg-6ubuntu1

---------------
heimdal (7.7.0+dfsg-6ubuntu1) lunar; urgency=medium

  * Merge with Debian unstable (LP: #1993403). Remaining changes:
    - d/rules: Disable lto, to regain dep on roken, otherwise
      dependencies on amd64 are different than i386 resulting in
      different files on amd64 and i386.
      (LP #1934936)
  * Dropped:
    - d/libroken18-heimdal.symbols: Remove symbol
      rk_closefrom@HEIMDAL_ROKEN_1.0 1.4.0+git20110226 Applied verbatim
      debdiff from Heinrich Schuchardt (xypron).
      (LP #1945787)
      [Fixed in Debian release 7.7.0+dfsg-5]

 -- Bryce Harrington <email address hidden> Thu, 17 Nov 2022 20:38:21 -0800