Please sync krb5-1.8.3+dfsg-5 from Debian Unstable.

Bug #730817 reported by Chuck Short
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
krb5 (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

Please sync krb5-1.8.3+dfsg-5 from Debian Unstable. The Ubuntu changes can be dropped the CVE fixes are in the debian package as well. The changelog summary is the following:

krb5 (1.8.3+dfsg-5) unstable; urgency=low

   * KDC/LDAP DOS (CVE-2010-4022, CVE-2011-0281, and CVE-2011-0282,
     Closes: #613487
   * Fix delegation of credentials against Windows servers; significant
     interoperability issue, Closes: #611906
   * Set nt-srv-inst on TGS names to work against W2K8R2 KDCs, Closes:
     #616429
   * Don't fail authentication when PAC verification fails; support hmac-
     md5 checksums even for non-RC4 keys, Closes: #616728

 -- Sam Hartman <email address hidden> Sun, 06 Mar 2011 18:08:35 -0500

This also fixes LP: #723840.

Thanks
chuck

Scott Moser (smoser)
Changed in krb5 (Ubuntu):
importance: Undecided → Medium
status: New → Triaged
Revision history for this message
Colin Watson (cjwatson) wrote :

2011-03-15 11:21:54 INFO krb5_1.8.3+dfsg.orig.tar.gz: already in distro - downloading from librarian
[Updating] krb5 (1.8.3+dfsg-4ubuntu1 [Ubuntu] < 1.8.3+dfsg-5 [Debian])
 * Trying to add krb5...
2011-03-15 11:21:55 INFO - <krb5_1.8.3+dfsg-5.dsc: downloading from http://ftp.debian.org/debian/>
2011-03-15 11:21:55 INFO - <krb5_1.8.3+dfsg.orig.tar.gz: cached>
2011-03-15 11:21:55 INFO - <krb5_1.8.3+dfsg-5.diff.gz: downloading from http://ftp.debian.org/debian/>
I: krb5 [main] -> krb5-user_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> krb5-kdc_1.8.3+dfsg-4ubuntu1 [universe].
I: krb5 [main] -> krb5-kdc-ldap_1.8.3+dfsg-4ubuntu1 [universe].
I: krb5 [main] -> krb5-admin-server_1.8.3+dfsg-4ubuntu1 [universe].
I: krb5 [main] -> krb5-multidev_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> libkrb5-dev_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> libkrb5-dbg_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> krb5-pkinit_1.8.3+dfsg-4ubuntu1 [universe].
I: krb5 [main] -> krb5-doc_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> libkrb5-3_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> libgssapi-krb5-2_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> libgssrpc4_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> libkadm5srv-mit7_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> libkadm5clnt-mit7_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> libk5crypto3_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> libkdb5-4_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> libkrb5support0_1.8.3+dfsg-4ubuntu1 [main].
I: krb5 [main] -> libkrb53_1.8.3+dfsg-4ubuntu1 [universe].

Changed in krb5 (Ubuntu):
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.