From: Tom Yu Date: Fri, 3 Sep 2004 17:17:58 +0000 (+0000) Subject: update for krb5-1.3.5-beta1 X-Git-Tag: krb5-1.4-beta1~105 X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=95c08c6f7eb90b6226df0a22e2dac6071195d7cb;p=krb5.git update for krb5-1.3.5-beta1 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16719 dc483132-0cff-0310-8789-dd5450dbe970 --- diff --git a/README b/README index f9b630c82..2bfe2473c 100644 --- a/README +++ b/README @@ -1,4 +1,4 @@ - Kerberos Version 5, Release 1.3.4 + Kerberos Version 5, Release 1.3.5 Release Notes The MIT Kerberos Team @@ -7,20 +7,20 @@ Unpacking the Source Distribution --------------------------------- The source distribution of Kerberos 5 comes in a gzipped tarfile, -krb5-1.3.4.tar.gz. Instructions on how to extract the entire +krb5-1.3.5.tar.gz. Instructions on how to extract the entire distribution follow. If you have the GNU tar program and gzip installed, you can simply do: - gtar zxpf krb5-1.3.4.tar.gz + gtar zxpf krb5-1.3.5.tar.gz If you don't have GNU tar, you will need to get the FSF gzip distribution and use gzcat: - gzcat krb5-1.3.4.tar.gz | tar xpf - + gzcat krb5-1.3.5.tar.gz | tar xpf - -Both of these methods will extract the sources into krb5-1.3.4/src and -the documentation into krb5-1.3.4/doc. +Both of these methods will extract the sources into krb5-1.3.5/src and +the documentation into krb5-1.3.5/doc. Building and Installing Kerberos 5 ---------------------------------- @@ -59,6 +59,55 @@ http://krbdev.mit.edu/rt/ and logging in as "guest" with password "guest". +Major changes in 1.3.5 +---------------------- + +* [2682] Fix ftpd hang caused by empty PASS command. + +* [2686] Fix double-free errors. [MITKRB5-SA-2004-002] + +* [2687] Fix denial-of-service vulnerability in ASN.1 + decoder. [MITKRB5-SA-2004-003] + +Minor changes in 1.3.5 +---------------------- + +* [2016] Fix build problem in fake-addrinfo.h by including stdio.h so + that sprintf() gets prototyped where needed on some platforms. + +* [2353] Add missing prototype for gss_krb5int_unseal_token_v3(). + +* [2607] Fix enctype filtering and some memory leaks in MSLSA ccache. + +* [2608] Remove incorrect localization in MSLSA ccache which was + resulting in crashes. + +* [2619] Update MSLSA ccache to support new LSA flag. + +* [2623] Update MSLSA ccache to reflect differences in registry layout + between Windows client and server OSes. + +* [2624] Do not ignore the cache when obtaining TGTs from the MSLSA if + the requested enctype is the NULL enctype. + +* [2626] Add Terminal Server compatibility for KfW. + +* [2627] Fix cc_mslsa thread safety. + +* [2634] Remove the caching of the ccache principal name from + krb5_context. + +* [2643] Fix another problem with krb4 ticket backdating. + +* [2675] Add new WiX-based MSI installer for KfW. + +* [2677] Add "-c ccache" option to kvno; use consistent memory + management to avoid crashes on Windows. + +* [2689] Misc MSLSA ccache fixes. + +* [2691] Improve documentation of ANSI C requirement. + Major changes in 1.3.4 ----------------------