From: Tom Yu Date: Sun, 28 Mar 2010 22:47:01 +0000 (+0000) Subject: README and patchlevel for krb5-1.8.1-beta1 X-Git-Tag: krb5-1.8.1-beta1~1 X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=5ffb0f12caae3f94389274bd26910d2d4c892f06;p=krb5.git README and patchlevel for krb5-1.8.1-beta1 git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-8@23839 dc483132-0cff-0310-8789-dd5450dbe970 --- diff --git a/README b/README index 8063109db..95cc02b8a 100644 --- a/README +++ b/README @@ -82,6 +82,36 @@ additional measures include: crypto * easier kadmin history key changes +Major changes in 1.8.1 +---------------------- + +This is primarily a bugfix release. + +* MITKRB5-SA-2010-002 CVE-2010-0628 denial of service in SPNEGO + +* Support IPv6 in kpasswd client. + +* Fix an authorization data type number assignment that conflicted + with an undocumented Microsoft usage. + +krb5-1.8.1 changes by ticket ID +------------------------------- + +6661 [RFE] properly support IPv6 in kpasswd +6668 Two problems in kadm5_get_principal mask handling +6674 memory leak in SPNEGO +6676 Ignore improperly encoded signedpath AD elements +6678 use of freed memory in gss_import_sec_context error path +6680 the "ticket_lifetime" setting isn't documented +6681 krb5_get_init_creds_password() can crash with NULL options and + expired keys +6683 kpasswd doesn't guess the client principal name correctly + without a ccache +6685 handle NT_SRV_INST in service principal referrals +6687 Change KRB5_AUTHDATA_SIGNTICKET from 142 to 512 +6689 krb5_typed_data not castable to krb5_pa_data on 64-bit MacOSX +6690 MITKRB5-SA-2010-002 CVE-2010-0628 denial of service in SPNEGO + Major changes in 1.8 -------------------- diff --git a/src/patchlevel.h b/src/patchlevel.h index aadebb939..99f2abeb2 100644 --- a/src/patchlevel.h +++ b/src/patchlevel.h @@ -52,7 +52,7 @@ */ #define KRB5_MAJOR_RELEASE 1 #define KRB5_MINOR_RELEASE 8 -#define KRB5_PATCHLEVEL 0 -#define KRB5_RELTAIL "postrelease" +#define KRB5_PATCHLEVEL 1 +#define KRB5_RELTAIL "beta1" /* #undef KRB5_RELDATE */ -#define KRB5_RELTAG "branches/krb5-1-8" +#define KRB5_RELTAG "tags/krb5-1-8-1-beta1"