From 7e012d0306532f04fca27351e21d545bc351b305 Mon Sep 17 00:00:00 2001 From: Tom Yu Date: Thu, 15 Sep 2016 17:51:24 -0400 Subject: Updates for krb5-1.13.7 --- README | 51 ++++++++++++++++++++++++++++++++++++++++++++++ src/man/k5identity.man | 2 +- src/man/k5login.man | 2 +- src/man/k5srvutil.man | 2 +- src/man/kadm5.acl.man | 2 +- src/man/kadmin.man | 2 +- src/man/kadmind.man | 2 +- src/man/kdb5_ldap_util.man | 2 +- src/man/kdb5_util.man | 2 +- src/man/kdc.conf.man | 2 +- src/man/kdestroy.man | 2 +- src/man/kinit.man | 2 +- src/man/klist.man | 2 +- src/man/kpasswd.man | 2 +- src/man/kprop.man | 2 +- src/man/kpropd.man | 2 +- src/man/kproplog.man | 2 +- src/man/krb5-config.man | 2 +- src/man/krb5.conf.man | 2 +- src/man/krb5kdc.man | 2 +- src/man/ksu.man | 2 +- src/man/kswitch.man | 2 +- src/man/ktutil.man | 2 +- src/man/kvno.man | 2 +- src/man/sclient.man | 2 +- src/man/sserver.man | 2 +- src/patchlevel.h | 6 +++--- src/po/mit-krb5.pot | 4 ++-- 28 files changed, 81 insertions(+), 30 deletions(-) diff --git a/README b/README index 5fb197b..53ed9eb 100644 --- a/README +++ b/README @@ -74,6 +74,56 @@ variable that enables "weak" enctypes, which defaults to "false" beginning with krb5-1.8. +Major changes in 1.13.7 (2016-09-15) +------------------------------------ + +This is a bug fix release. The krb5-1.13 release series is near the +end of its maintenance period, and krb5-1.13.7 will probably be the +final release of this series. For new deployments, installers should +prefer the krb5-1.14 release series or later. + +* Fix some rare btree data corruption bugs + +* Fix numerous minor memory leaks + +* Improve portability (Linux-ppc64el, FreeBSD) + +* Improve some error messages + +* Improve documentation + +krb5-1.13.7 changes by ticket ID +-------------------------------- + +8433 Fix memory leak destroying DIR ccache +8435 Fix leak on error in libkadm5_clnt initialization +8437 Fix leaks on error in krb5 gss_acquire_cred() +8439 Fix leak in gss_display_name() for non-MN names +8440 Fix krb5_get_init_creds_password() pwchange leak +8441 Fix leak in ulog_replay() +8442 Fix leak in DB2 krb5_db_promote() implementation +8443 Fix leak in FAST OTP client processing +8444 Fix unlikely leak in sendto_kdc +8445 Fix leak in kadm5_hook interface +8447 Fix leak in capaths processing +8453 Fix leak on error in libkadm5_srv initialization +8454 Missing responder if there is no pre-auth +8470 Warn about dump -recurse nonfunctionality +8473 Handle errors from curs_init in db2 back end +8475 Fix build with -O3 on ppc64el +8477 Fix KDC to drop repeated in-progress requests +8480 Fix GSSRPC server credential memory leak +8481 Improve checking of decoded DB2 principal values +8482 Memory leak in krb5_server_decrypt_ticket_keytab() +8483 Avoid byte-swap cache corruption in libdb2 +8484 Avoid unaligned access in btree byte swapping +8485 Fix btree byte swapping for overflow data +8489 Update config.guess, config.sub +8491 Remove meaningless checks decoding DB2 principals +8492 Fix directory changes to use explicit subshells +8493 Fix unaligned accesses in bt_split.c + + Major changes in 1.13.6 (2016-07-25) ------------------------------------ @@ -562,6 +612,7 @@ reports, suggestions, and valuable resources: Ravi Channavajhala Srinivas Cheruku Leonardo Chiquitto + Seemant Choudhary Howard Chu Andrea Cirulli Christopher D. Clausen diff --git a/src/man/k5identity.man b/src/man/k5identity.man index 374fe87..00e8f9d 100644 --- a/src/man/k5identity.man +++ b/src/man/k5identity.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "K5IDENTITY" "5" " " "1.13.6" "MIT Kerberos" +.TH "K5IDENTITY" "5" " " "1.13.7" "MIT Kerberos" .SH NAME k5identity \- Kerberos V5 client principal selection rules . diff --git a/src/man/k5login.man b/src/man/k5login.man index 5890465..0e6f4ad 100644 --- a/src/man/k5login.man +++ b/src/man/k5login.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "K5LOGIN" "5" " " "1.13.6" "MIT Kerberos" +.TH "K5LOGIN" "5" " " "1.13.7" "MIT Kerberos" .SH NAME k5login \- Kerberos V5 acl file for host access . diff --git a/src/man/k5srvutil.man b/src/man/k5srvutil.man index 068854c..a45fca3 100644 --- a/src/man/k5srvutil.man +++ b/src/man/k5srvutil.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "K5SRVUTIL" "1" " " "1.13.6" "MIT Kerberos" +.TH "K5SRVUTIL" "1" " " "1.13.7" "MIT Kerberos" .SH NAME k5srvutil \- host key table (keytab) manipulation utility . diff --git a/src/man/kadm5.acl.man b/src/man/kadm5.acl.man index 59c8ed4..46cf5e9 100644 --- a/src/man/kadm5.acl.man +++ b/src/man/kadm5.acl.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KADM5.ACL" "5" " " "1.13.6" "MIT Kerberos" +.TH "KADM5.ACL" "5" " " "1.13.7" "MIT Kerberos" .SH NAME kadm5.acl \- Kerberos ACL file . diff --git a/src/man/kadmin.man b/src/man/kadmin.man index 19adf12..78025c7 100644 --- a/src/man/kadmin.man +++ b/src/man/kadmin.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KADMIN" "1" " " "1.13.6" "MIT Kerberos" +.TH "KADMIN" "1" " " "1.13.7" "MIT Kerberos" .SH NAME kadmin \- Kerberos V5 database administration program . diff --git a/src/man/kadmind.man b/src/man/kadmind.man index b1a3bd9..08a6a49 100644 --- a/src/man/kadmind.man +++ b/src/man/kadmind.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KADMIND" "8" " " "1.13.6" "MIT Kerberos" +.TH "KADMIND" "8" " " "1.13.7" "MIT Kerberos" .SH NAME kadmind \- KADM5 administration server . diff --git a/src/man/kdb5_ldap_util.man b/src/man/kdb5_ldap_util.man index 60f3289..e047de4 100644 --- a/src/man/kdb5_ldap_util.man +++ b/src/man/kdb5_ldap_util.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KDB5_LDAP_UTIL" "8" " " "1.13.6" "MIT Kerberos" +.TH "KDB5_LDAP_UTIL" "8" " " "1.13.7" "MIT Kerberos" .SH NAME kdb5_ldap_util \- Kerberos configuration utility . diff --git a/src/man/kdb5_util.man b/src/man/kdb5_util.man index c1b9594..e602b21 100644 --- a/src/man/kdb5_util.man +++ b/src/man/kdb5_util.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KDB5_UTIL" "8" " " "1.13.6" "MIT Kerberos" +.TH "KDB5_UTIL" "8" " " "1.13.7" "MIT Kerberos" .SH NAME kdb5_util \- Kerberos database maintenance utility . diff --git a/src/man/kdc.conf.man b/src/man/kdc.conf.man index b8edd94..2cbd655 100644 --- a/src/man/kdc.conf.man +++ b/src/man/kdc.conf.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KDC.CONF" "5" " " "1.13.6" "MIT Kerberos" +.TH "KDC.CONF" "5" " " "1.13.7" "MIT Kerberos" .SH NAME kdc.conf \- Kerberos V5 KDC configuration file . diff --git a/src/man/kdestroy.man b/src/man/kdestroy.man index fa361ce..74fbd20 100644 --- a/src/man/kdestroy.man +++ b/src/man/kdestroy.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KDESTROY" "1" " " "1.13.6" "MIT Kerberos" +.TH "KDESTROY" "1" " " "1.13.7" "MIT Kerberos" .SH NAME kdestroy \- destroy Kerberos tickets . diff --git a/src/man/kinit.man b/src/man/kinit.man index 2ccc2ef..df9e250 100644 --- a/src/man/kinit.man +++ b/src/man/kinit.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KINIT" "1" " " "1.13.6" "MIT Kerberos" +.TH "KINIT" "1" " " "1.13.7" "MIT Kerberos" .SH NAME kinit \- obtain and cache Kerberos ticket-granting ticket . diff --git a/src/man/klist.man b/src/man/klist.man index a697764..bfb1d52 100644 --- a/src/man/klist.man +++ b/src/man/klist.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KLIST" "1" " " "1.13.6" "MIT Kerberos" +.TH "KLIST" "1" " " "1.13.7" "MIT Kerberos" .SH NAME klist \- list cached Kerberos tickets . diff --git a/src/man/kpasswd.man b/src/man/kpasswd.man index 7e053ef..99898db 100644 --- a/src/man/kpasswd.man +++ b/src/man/kpasswd.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KPASSWD" "1" " " "1.13.6" "MIT Kerberos" +.TH "KPASSWD" "1" " " "1.13.7" "MIT Kerberos" .SH NAME kpasswd \- change a user's Kerberos password . diff --git a/src/man/kprop.man b/src/man/kprop.man index 641058a..6c92211 100644 --- a/src/man/kprop.man +++ b/src/man/kprop.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KPROP" "8" " " "1.13.6" "MIT Kerberos" +.TH "KPROP" "8" " " "1.13.7" "MIT Kerberos" .SH NAME kprop \- propagate a Kerberos V5 principal database to a slave server . diff --git a/src/man/kpropd.man b/src/man/kpropd.man index 8ad76b5..b0e8ab0 100644 --- a/src/man/kpropd.man +++ b/src/man/kpropd.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KPROPD" "8" " " "1.13.6" "MIT Kerberos" +.TH "KPROPD" "8" " " "1.13.7" "MIT Kerberos" .SH NAME kpropd \- Kerberos V5 slave KDC update server . diff --git a/src/man/kproplog.man b/src/man/kproplog.man index 8ed74ba..15ecfc2 100644 --- a/src/man/kproplog.man +++ b/src/man/kproplog.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KPROPLOG" "8" " " "1.13.6" "MIT Kerberos" +.TH "KPROPLOG" "8" " " "1.13.7" "MIT Kerberos" .SH NAME kproplog \- display the contents of the Kerberos principal update log . diff --git a/src/man/krb5-config.man b/src/man/krb5-config.man index 4dfb99d..e4c8a87 100644 --- a/src/man/krb5-config.man +++ b/src/man/krb5-config.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KRB5-CONFIG" "1" " " "1.13.6" "MIT Kerberos" +.TH "KRB5-CONFIG" "1" " " "1.13.7" "MIT Kerberos" .SH NAME krb5-config \- tool for linking against MIT Kerberos libraries . diff --git a/src/man/krb5.conf.man b/src/man/krb5.conf.man index 438fdf9..08f9a45 100644 --- a/src/man/krb5.conf.man +++ b/src/man/krb5.conf.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KRB5.CONF" "5" " " "1.13.6" "MIT Kerberos" +.TH "KRB5.CONF" "5" " " "1.13.7" "MIT Kerberos" .SH NAME krb5.conf \- Kerberos configuration file . diff --git a/src/man/krb5kdc.man b/src/man/krb5kdc.man index 16a49c2..acfa2ca 100644 --- a/src/man/krb5kdc.man +++ b/src/man/krb5kdc.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KRB5KDC" "8" " " "1.13.6" "MIT Kerberos" +.TH "KRB5KDC" "8" " " "1.13.7" "MIT Kerberos" .SH NAME krb5kdc \- Kerberos V5 KDC . diff --git a/src/man/ksu.man b/src/man/ksu.man index f710d11..fb03da2 100644 --- a/src/man/ksu.man +++ b/src/man/ksu.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KSU" "1" " " "1.13.6" "MIT Kerberos" +.TH "KSU" "1" " " "1.13.7" "MIT Kerberos" .SH NAME ksu \- Kerberized super-user . diff --git a/src/man/kswitch.man b/src/man/kswitch.man index 5883c8e..31847e6 100644 --- a/src/man/kswitch.man +++ b/src/man/kswitch.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KSWITCH" "1" " " "1.13.6" "MIT Kerberos" +.TH "KSWITCH" "1" " " "1.13.7" "MIT Kerberos" .SH NAME kswitch \- switch primary ticket cache . diff --git a/src/man/ktutil.man b/src/man/ktutil.man index 845d68d..16c3c2d 100644 --- a/src/man/ktutil.man +++ b/src/man/ktutil.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KTUTIL" "1" " " "1.13.6" "MIT Kerberos" +.TH "KTUTIL" "1" " " "1.13.7" "MIT Kerberos" .SH NAME ktutil \- Kerberos keytab file maintenance utility . diff --git a/src/man/kvno.man b/src/man/kvno.man index d51ff83..a540afa 100644 --- a/src/man/kvno.man +++ b/src/man/kvno.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KVNO" "1" " " "1.13.6" "MIT Kerberos" +.TH "KVNO" "1" " " "1.13.7" "MIT Kerberos" .SH NAME kvno \- print key version numbers of Kerberos principals . diff --git a/src/man/sclient.man b/src/man/sclient.man index 92f00dd..22b067a 100644 --- a/src/man/sclient.man +++ b/src/man/sclient.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "SCLIENT" "1" " " "1.13.6" "MIT Kerberos" +.TH "SCLIENT" "1" " " "1.13.7" "MIT Kerberos" .SH NAME sclient \- sample Kerberos version 5 client . diff --git a/src/man/sserver.man b/src/man/sserver.man index cd750bb..63cd7fe 100644 --- a/src/man/sserver.man +++ b/src/man/sserver.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "SSERVER" "8" " " "1.13.6" "MIT Kerberos" +.TH "SSERVER" "8" " " "1.13.7" "MIT Kerberos" .SH NAME sserver \- sample Kerberos version 5 server . diff --git a/src/patchlevel.h b/src/patchlevel.h index c1ccd1a..23d3824 100644 --- a/src/patchlevel.h +++ b/src/patchlevel.h @@ -51,7 +51,7 @@ */ #define KRB5_MAJOR_RELEASE 1 #define KRB5_MINOR_RELEASE 13 -#define KRB5_PATCHLEVEL 6 -#define KRB5_RELTAIL "postrelease" +#define KRB5_PATCHLEVEL 7 +/* #undef KRB5_RELTAIL */ /* #undef KRB5_RELDATE */ -#define KRB5_RELTAG "krb5-1.13" +#define KRB5_RELTAG "krb5-1.13.7" diff --git a/src/po/mit-krb5.pot b/src/po/mit-krb5.pot index c320aec..ae2e2f9 100644 --- a/src/po/mit-krb5.pot +++ b/src/po/mit-krb5.pot @@ -6,9 +6,9 @@ #, fuzzy msgid "" msgstr "" -"Project-Id-Version: mit-krb5 1.13.6-postrelease\n" +"Project-Id-Version: mit-krb5 1.13.7\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2016-09-15 16:14-0400\n" +"POT-Creation-Date: 2016-09-15 18:15-0400\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" -- cgit v1.1