README and patchlevel.h for krb5-1.9-beta2

[krb5.git] / README

diff --git a/README b/README
index cf7a6c1d0e4ddb64d9e8f2a7b8999981ca984360..fc27b570a1b7cbb199bf4f97867e45279778be10 100644 (file)
--- a/README
+++ b/README
@@ -68,6 +68,8 @@ Code quality:
 Developer experience:
 
 * NSS crypto back end
+* PRNG modularity
+* Fortuna-like PRNG
 
 Performance:
 
@@ -89,6 +91,7 @@ Protocol evolution:
 krb5-1.9 changes by ticket ID
 -----------------------------
 
+1219    mechanism to delete old keys should exist
 2032    No advanced warning of password expiry
 5014    kadmin (and other utilities) should report enctypes as it takes them
 6647    Memory leak in kdc
@@ -97,7 +100,6 @@ krb5-1.9 changes by ticket ID
 6684    Simple kinit verbosity patch
 6686    IPv6 support for kprop and kpropd
 6688    mit-krb5-1.7 fails to compile against openssl-1.0.0
-6691    krb524 source code is missing from krb5-1.8 tarball
 6699    Validate and renew should work on non-TGT creds
 6700    Introduce new krb5_tkt_creds API
 6712    Add IAKERB mechanism and gss_acquire_cred_with_password
@@ -106,7 +108,6 @@ krb5-1.9 changes by ticket ID
 6719    Add lockout-related performance tuning variables
 6720    Negative enctypes improperly read from keytabs
 6723    Negative enctypes improperly read from ccaches
-6732    checks for openpty() aren't made using -lutil
 6733    Make signedpath authdata visible via GSS naming exts
 6736    Add krb5_enctype_to_name() API
 6737    Trace logging
@@ -114,7 +115,6 @@ krb5-1.9 changes by ticket ID
 6749    DAL improvements
 6753    Fix XDR decoding of large values in xdr_u_int
 6755    Add GIC option for password/account expiration callback
-6756    KDC 1.6/1.7/1.8 Installation
 6758    Allow krb5_gss_register_acceptor_identity to unset keytab name
 6760    Fail properly when profile can't be accessed
 6761    add profile include support
@@ -136,12 +136,35 @@ krb5-1.9 changes by ticket ID
 6784    relicense Sun RPC to 3-clause BSD-style
 6785    Add gss_krb5_import_cred
 6786    kpasswd: if a credential cache is present, use FAST
+6787    S4U memory leak
 6791    kadm5_hook: new plugin interface
 6792    Implement k5login_directory and k5login_authoritative options
+6793    acquire_init_cred leaks interned name
 6795    Propagate modprinc -unlock from master to slave KDCs
+6796    segfault due to uninitialized variable in S4U
 6799    Performance issue in LDAP policy fetch
 6801    Fix leaks in get_init_creds interface
 6802    copyright notice updates
+6804    Remove KDC replay cache
+6805    securID code fixes
+6806    securID error handling fix
+6807    SecurID build support
+6809    gss_krb5int_make_seal_token_v3_iov fails to set conf_state
+6810    Better  libk5crypto NSS fork safety
+6811    Mark Camellia-CCM code as experimental
+6812    krb5_get_credentials should not fail due to inability to store
+        a credential in a cache
+6815    Failed kdb5_util load removes real database
+6819    Handle referral realm in kprop client principal
+6820    Read KDC profile settings in kpropd
+6822    Implement Camellia-CTS-CMAC instead of Camellia-CCM
+6823    getdate.y: declare yyparse
+6824    Export krb5_tkt_creds_get
+6825    Add missing KRB5_CALLCONV in callback declaration
+6826    Fix Windows build
+6827    SA-2010-007 Checksum vulnerabilities (CVE-2010-1324 and others)
+6828    Install kadm5_hook_plugin.h
+6829    Implement restrict_anonymous_to_tgt realm flag
 
 Acknowledgements
 ----------------