Change logs for krb5 source package in Wily

  • krb5 (1.13.2+dfsg-2ubuntu0.1) wily-security; urgency=medium
    
      * SECURITY UPDATE: SPNEGO context aliasing bugs
        - d/p/u/0011-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch:
          improve logic in src/lib/gssapi/spnego/gssapiP_spnego.h,
          src/lib/gssapi/spnego/spnego_mech.c.
        - d/p/u/0016-Fix-SPNEGO-context-import.patch: fix SPNEGO context import
          in src/lib/gssapi/spnego/spnego_mech.c.
        - CVE-2015-2695
      * SECURITY UPDATE: IAKERB context aliasing bugs
        - d/p/u/0012-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch:
          improve logic in src/lib/gssapi/krb5/gssapiP_krb5.h,
          src/lib/gssapi/krb5/gssapi_krb5.c, src/lib/gssapi/krb5/iakerb.c.
        - d/p/u/0014-Fix-two-IAKERB-comments.patch: fix comments in
          src/lib/gssapi/krb5/iakerb.c.
        - CVE-2015-2696
      * SECURITY UPDATE: KDC crash via invalid string processing
        - d/p/u/0013-Fix-build_principal-memory-bug-CVE-2015-2697.patch:
          use k5memdup0() instead of strdup() in src/lib/krb5/krb/bld_princ.c.
        - CVE-2015-2697
      * SECURITY UPDATE: memory corruption in IAKERB context export/import
        - d/p/u/0015-Fix-IAKERB-context-export-import-CVE-2015-2698.patch:
          dereferencing the context_handle pointer before casting it in
          and implement implement an IAKERB gss_import_sec_context() function
          in src/lib/gssapi/krb5/gssapiP_krb5.h,
          src/lib/gssapi/krb5/gssapi_krb5.c, src/lib/gssapi/krb5/iakerb.c.
        - CVE-2015-2698
    
     -- Marc Deslauriers <email address hidden>  Wed, 11 Nov 2015 08:36:55 -0500
  • krb5 (1.13.2+dfsg-2) unstable; urgency=medium
    
      * No-change rebuild to target unstable
    
     -- Benjamin Kaduk <email address hidden>  Thu, 25 Jun 2015 17:10:03 -0400
  • krb5 (1.12.1+dfsg-20) unstable; urgency=high
    
      * Import upstream patch for CVE-2015-2694, Closes: #783557
      * Bump Standards-Version to 3.9.6 (no changes needed)
    
     -- Benjamin Kaduk <email address hidden>  Wed, 13 May 2015 14:40:36 -0400
  • krb5 (1.12.1+dfsg-19) unstable; urgency=medium
    
    
      * mark systemd unit directories as optional, Closes: #780831
    
     -- Sam Hartman <email address hidden>  Fri, 20 Mar 2015 16:22:33 -0400
  • krb5 (1.12.1+dfsg-18) unstable; urgency=high
    
    
      * Import upstream patch for CVE-2014-5355, Closes: #778647
    
     -- Benjamin Kaduk <email address hidden>  Wed, 18 Feb 2015 12:52:14 -0500