Package libkrb5-devel: Changelog

April 17, 2018 Evgeny Sinelnikov 1.14.6-alt1.M80P.1
- Update to latest security release of krb5-1.14
- Security fixes:
  + CVE-2017-11368 Fix a KDC denial of service vulnerability caused by unset
    status strings
  + CVE-2017-11462 Preserve GSS contexts on init/accept failure
March 24, 2017 Evgeny Sinelnikov 1.14.5-alt1.M80P.1
- Update to first spring release 1.14.5
Feb. 28, 2017 Evgeny Sinelnikov 1.14.4-alt2.M80P.1
- Add _keytab group for default keytab /etc/krb5.keytab
Feb. 15, 2017 Evgeny Sinelnikov 1.14.4-alt1.M80P.1
- 1.14.4
- fixed CVE-2016-3120
June 9, 2016 Anton V. Boyarshinov 1.14.2-alt2
- krb5kdc.service: start after slapd
April 25, 2016 Alexey Shabalin 1.14.2-alt1
- 1.14.2
- fixed CVE-2015-2695,CVE-2015-2696,CVE-2015-2697,CVE-2015-2698,CVE-2015-8629,CVE-2015-8630,CVE-2015-8631,CVE-2016-3119
- allow verification of attributes on krb5.conf
Nov. 16, 2015 Andrey Cherepanov 1.13.2-alt2
- Comment out includedir directive in /etc/krb5.conf because samba
  cannot get Kerberos context while domain provision
Oct. 20, 2015 Alexey Shabalin 1.13.2-alt1
- 1.13.2
- fixed CVE-2014-5355, CVE-2015-2694
- add patches from fedora
Feb. 22, 2015 Ivan A. Melnikov 1.13.1-alt1
- 1.13.1;
- drop patches already applied by upstream.
Feb. 8, 2015 Ivan A. Melnikov 1.13-alt3
- fix for MITKRB5-SA-2015-001 (CVE-2014-5352, CVE-2014-9421,
  CVE-2014-9422, CVE-2014-9423)
Dec. 23, 2014 Alexey Shabalin 1.13-alt2
- fixed CVE-2014-5353, CVE-2014-5354
Oct. 31, 2014 Alexey Shabalin 1.13-alt1
- 1.13
- fixed CVE-2014-5351
- move header from /usr/include/krb5 to /usr/include
- drop kdcrotate service
- update krb5.conf:
  + add [logging] example
  + add [realms] example
  + add [domain_realm] example
  + define default_ccache_name as KEYRING:persistent:%{uid}
March 27, 2014 Aitov Timur 1.12-alt2
- applied upstream fix for libdb2
- disabled t_kprop.py test
Jan. 12, 2014 Ivan A. Melnikov 1.12-alt1
- 1.12;
- update fedora patches;
- import memory leak fixes from upstream master (RT#7803, RT#7805).
June 8, 2013 Ivan A. Melnikov 1.11.3-alt1
- 1.11.3
- drop obsolete patch 23.
May 31, 2013 Andrey Cherepanov 1.11.2-alt3
- Increase run order from 40 to 41 to prevent error reading from LDAP:
  'preauth pkinit failed to initialize: No realms configured correctly
  for pkinit support'
May 14, 2013 Ivan A. Melnikov 1.11.2-alt2
- add patch 23 from upstream git to fix kpasswd udp ping-pong
  (CVE-2002-2443).
April 13, 2013 Ivan A. Melnikov 1.11.2-alt1
- 1.11.2;
- drop obsolete patch 22.
March 30, 2013 Ivan A. Melnikov 1.11.1-alt1
- 1.11.1
  + fix a null pointer dereference in the KDC PKINIT code
    (CVE-2013-1415);
- drop obsolete patch 21;
- add patch 22 from upstream git to fix a memory leak in
  krb5_get_init_creds_keytab (upstream ticket 7586).
Jan. 4, 2013 Ivan A. Melnikov 1.11-alt2
- added %check section.
Jan. 4, 2013 Ivan A. Melnikov 1.11-alt1
- 1.11;
- dropped obsolete patches;
- updated fedora patches;
- add patch 21 from fedora;
- update gear rules to better match upstream distribution;
- change way we deal with preprocessor loop in krb5/krb5.h (instead
  of patch that caused build problems we do it with sed in %install);
- dropped internal headers packaging;
- minor packaging improvements.
Dec. 5, 2012 Eugeny A. Rostovtsev 1.10.2-alt2.1
- Fixed build
Aug. 7, 2012 Vitaly Kuznetsov 1.10.2-alt2
- CVE-2012-1015
July 19, 2012 Eugeny A. Rostovtsev 1.10.2-alt1.1
- Added necessary headers into libkrb5-devel (ALT #27467)
July 4, 2012 Vitaly Kuznetsov 1.10.2-alt1
- 1.10.2
- CVE-2012-1013
May 4, 2012 Vitaly Kuznetsov 1.10.1-alt3
- Add systemd unit files
April 28, 2012 Vitaly Kuznetsov 1.10.1-alt2
- resurrect krb5-1.10-alt-avoid-preprocessor-loop.patch
April 23, 2012 Vitaly Kuznetsov 1.10.1-alt1
- 1.10.1
- get rid of almost empty services, clients subpackages
- replace server, workstation packages by Provides/Obsoletes
July 6, 2011 Ivan A. Melnikov 1.6.3-alt13
- check if ftp daemon fails to set effective group id
  (MITKRB5-SA-2011-005, CVE-2011-1526).
March 15, 2011 Alexey Tourbin 1.6.3-alt12
- krb5-config: disabled dependency on libkeyutils-devel
Back to Top