From da9c3ecfae66d2d61c9f22f3d4d2a4d643cfd9c8 Mon Sep 17 00:00:00 2001 From: Tom Yu Date: Mon, 12 Sep 2016 18:13:50 -0400 Subject: Update for krb5-1.14.4 --- README | 55 ++++++++++++++++++++++++++++++++++++++++++++++ src/man/k5identity.man | 2 +- src/man/k5login.man | 2 +- src/man/k5srvutil.man | 2 +- src/man/kadm5.acl.man | 2 +- src/man/kadmin.man | 2 +- src/man/kadmind.man | 2 +- src/man/kdb5_ldap_util.man | 2 +- src/man/kdb5_util.man | 2 +- src/man/kdc.conf.man | 2 +- src/man/kdestroy.man | 2 +- src/man/kinit.man | 2 +- src/man/klist.man | 2 +- src/man/kpasswd.man | 2 +- src/man/kprop.man | 2 +- src/man/kpropd.man | 2 +- src/man/kproplog.man | 2 +- src/man/krb5-config.man | 2 +- src/man/krb5.conf.man | 2 +- src/man/krb5kdc.man | 2 +- src/man/ksu.man | 2 +- src/man/kswitch.man | 2 +- src/man/ktutil.man | 2 +- src/man/kvno.man | 2 +- src/man/sclient.man | 2 +- src/man/sserver.man | 2 +- src/patchlevel.h | 6 ++--- src/po/mit-krb5.pot | 4 ++-- 28 files changed, 85 insertions(+), 30 deletions(-) diff --git a/README b/README index 721f23d..d84f705 100644 --- a/README +++ b/README @@ -74,6 +74,60 @@ variable that enables "weak" enctypes, which defaults to "false" beginning with krb5-1.8. +Major changes in 1.14.4 (2016-09-13) +------------------------------------ + +This is a bug fix release. + +* Fix some rare btree data corruption bugs + +* Fix numerous minor memory leaks + +* Improve portability (Linux-ppc64el, FreeBSD) + +* Improve some error messages + +* Improve documentation + +krb5-1.14.4 changes by ticket ID +-------------------------------- + +8432 Fix memory leak in db2 policy DB initialization +8433 Fix memory leak destroying DIR ccache +8435 Fix leak on error in libkadm5_clnt initialization +8437 Fix leaks on error in krb5 gss_acquire_cred() +8438 Fix leak in k5_free_cammac() +8439 Fix leak in gss_display_name() for non-MN names +8440 Fix krb5_get_init_creds_password() pwchange leak +8441 Fix leak in ulog_replay() +8442 Fix leak in DB2 krb5_db_promote() implementation +8443 Fix leak in FAST OTP client processing +8444 Fix unlikely leak in sendto_kdc +8445 Fix leak in kadm5_hook interface +8447 Fix leak in capaths processing +8453 Fix leak on error in libkadm5_srv initialization +8454 Missing responder if there is no pre-auth +8460 Fix SPNEGO imported cred initialization +8469 Properly escape quotes for otp set_string example +8470 Warn about dump -recurse nonfunctionality +8472 Add Host HTTP header to MS-KKDCP requests +8473 Handle errors from curs_init in db2 back end +8474 gnu libc OFD lock bug affects krb5 +8475 Fix build with -O3 on ppc64el +8477 Fix KDC to drop repeated in-progress requests +8480 Fix GSSRPC server credential memory leak +8481 Improve checking of decoded DB2 principal values +8482 Memory leak in krb5_server_decrypt_ticket_keytab() +8483 Avoid byte-swap cache corruption in libdb2 +8484 Avoid unaligned access in btree byte swapping +8485 Fix btree byte swapping for overflow data +8486 Guess Samba client mutual flag using ap_options +8489 Update config.guess, config.sub +8491 Remove meaningless checks decoding DB2 principals +8492 Fix directory changes to use explicit subshells +8493 Fix unaligned accesses in bt_split.c + + Major changes in 1.14.3 (2016-07-20) ------------------------------------ @@ -495,6 +549,7 @@ reports, suggestions, and valuable resources: Ravi Channavajhala Srinivas Cheruku Leonardo Chiquitto + Seemant Choudhary Howard Chu Andrea Cirulli Christopher D. Clausen diff --git a/src/man/k5identity.man b/src/man/k5identity.man index d5d5da9..7aeb23d 100644 --- a/src/man/k5identity.man +++ b/src/man/k5identity.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "K5IDENTITY" "5" " " "1.14.3" "MIT Kerberos" +.TH "K5IDENTITY" "5" " " "1.14.4" "MIT Kerberos" .SH NAME k5identity \- Kerberos V5 client principal selection rules . diff --git a/src/man/k5login.man b/src/man/k5login.man index 4dfa8bb..71aea96 100644 --- a/src/man/k5login.man +++ b/src/man/k5login.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "K5LOGIN" "5" " " "1.14.3" "MIT Kerberos" +.TH "K5LOGIN" "5" " " "1.14.4" "MIT Kerberos" .SH NAME k5login \- Kerberos V5 acl file for host access . diff --git a/src/man/k5srvutil.man b/src/man/k5srvutil.man index 8c09d30..43a2da5 100644 --- a/src/man/k5srvutil.man +++ b/src/man/k5srvutil.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "K5SRVUTIL" "1" " " "1.14.3" "MIT Kerberos" +.TH "K5SRVUTIL" "1" " " "1.14.4" "MIT Kerberos" .SH NAME k5srvutil \- host key table (keytab) manipulation utility . diff --git a/src/man/kadm5.acl.man b/src/man/kadm5.acl.man index 378114c..00dfaac 100644 --- a/src/man/kadm5.acl.man +++ b/src/man/kadm5.acl.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KADM5.ACL" "5" " " "1.14.3" "MIT Kerberos" +.TH "KADM5.ACL" "5" " " "1.14.4" "MIT Kerberos" .SH NAME kadm5.acl \- Kerberos ACL file . diff --git a/src/man/kadmin.man b/src/man/kadmin.man index b0710c3..42a9e58 100644 --- a/src/man/kadmin.man +++ b/src/man/kadmin.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KADMIN" "1" " " "1.14.3" "MIT Kerberos" +.TH "KADMIN" "1" " " "1.14.4" "MIT Kerberos" .SH NAME kadmin \- Kerberos V5 database administration program . diff --git a/src/man/kadmind.man b/src/man/kadmind.man index 9a9fe94..d64808b 100644 --- a/src/man/kadmind.man +++ b/src/man/kadmind.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KADMIND" "8" " " "1.14.3" "MIT Kerberos" +.TH "KADMIND" "8" " " "1.14.4" "MIT Kerberos" .SH NAME kadmind \- KADM5 administration server . diff --git a/src/man/kdb5_ldap_util.man b/src/man/kdb5_ldap_util.man index f8f466a..9421f1a 100644 --- a/src/man/kdb5_ldap_util.man +++ b/src/man/kdb5_ldap_util.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KDB5_LDAP_UTIL" "8" " " "1.14.3" "MIT Kerberos" +.TH "KDB5_LDAP_UTIL" "8" " " "1.14.4" "MIT Kerberos" .SH NAME kdb5_ldap_util \- Kerberos configuration utility . diff --git a/src/man/kdb5_util.man b/src/man/kdb5_util.man index b6fa2b9..bffe476 100644 --- a/src/man/kdb5_util.man +++ b/src/man/kdb5_util.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KDB5_UTIL" "8" " " "1.14.3" "MIT Kerberos" +.TH "KDB5_UTIL" "8" " " "1.14.4" "MIT Kerberos" .SH NAME kdb5_util \- Kerberos database maintenance utility . diff --git a/src/man/kdc.conf.man b/src/man/kdc.conf.man index 226f3d3..c77bd67 100644 --- a/src/man/kdc.conf.man +++ b/src/man/kdc.conf.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KDC.CONF" "5" " " "1.14.3" "MIT Kerberos" +.TH "KDC.CONF" "5" " " "1.14.4" "MIT Kerberos" .SH NAME kdc.conf \- Kerberos V5 KDC configuration file . diff --git a/src/man/kdestroy.man b/src/man/kdestroy.man index 53ba7e8..ca31043 100644 --- a/src/man/kdestroy.man +++ b/src/man/kdestroy.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KDESTROY" "1" " " "1.14.3" "MIT Kerberos" +.TH "KDESTROY" "1" " " "1.14.4" "MIT Kerberos" .SH NAME kdestroy \- destroy Kerberos tickets . diff --git a/src/man/kinit.man b/src/man/kinit.man index b1e1cad..7359016 100644 --- a/src/man/kinit.man +++ b/src/man/kinit.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KINIT" "1" " " "1.14.3" "MIT Kerberos" +.TH "KINIT" "1" " " "1.14.4" "MIT Kerberos" .SH NAME kinit \- obtain and cache Kerberos ticket-granting ticket . diff --git a/src/man/klist.man b/src/man/klist.man index 9dfe3ee..aef477c 100644 --- a/src/man/klist.man +++ b/src/man/klist.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KLIST" "1" " " "1.14.3" "MIT Kerberos" +.TH "KLIST" "1" " " "1.14.4" "MIT Kerberos" .SH NAME klist \- list cached Kerberos tickets . diff --git a/src/man/kpasswd.man b/src/man/kpasswd.man index a37e1f4..855db2b 100644 --- a/src/man/kpasswd.man +++ b/src/man/kpasswd.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KPASSWD" "1" " " "1.14.3" "MIT Kerberos" +.TH "KPASSWD" "1" " " "1.14.4" "MIT Kerberos" .SH NAME kpasswd \- change a user's Kerberos password . diff --git a/src/man/kprop.man b/src/man/kprop.man index 07f83c3..bc73269 100644 --- a/src/man/kprop.man +++ b/src/man/kprop.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KPROP" "8" " " "1.14.3" "MIT Kerberos" +.TH "KPROP" "8" " " "1.14.4" "MIT Kerberos" .SH NAME kprop \- propagate a Kerberos V5 principal database to a slave server . diff --git a/src/man/kpropd.man b/src/man/kpropd.man index 095410b..afec8b2 100644 --- a/src/man/kpropd.man +++ b/src/man/kpropd.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KPROPD" "8" " " "1.14.3" "MIT Kerberos" +.TH "KPROPD" "8" " " "1.14.4" "MIT Kerberos" .SH NAME kpropd \- Kerberos V5 slave KDC update server . diff --git a/src/man/kproplog.man b/src/man/kproplog.man index d78ccd7..47fb7ea 100644 --- a/src/man/kproplog.man +++ b/src/man/kproplog.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KPROPLOG" "8" " " "1.14.3" "MIT Kerberos" +.TH "KPROPLOG" "8" " " "1.14.4" "MIT Kerberos" .SH NAME kproplog \- display the contents of the Kerberos principal update log . diff --git a/src/man/krb5-config.man b/src/man/krb5-config.man index 638cc7e..7a3a5f1 100644 --- a/src/man/krb5-config.man +++ b/src/man/krb5-config.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KRB5-CONFIG" "1" " " "1.14.3" "MIT Kerberos" +.TH "KRB5-CONFIG" "1" " " "1.14.4" "MIT Kerberos" .SH NAME krb5-config \- tool for linking against MIT Kerberos libraries . diff --git a/src/man/krb5.conf.man b/src/man/krb5.conf.man index 181bf64..360a179 100644 --- a/src/man/krb5.conf.man +++ b/src/man/krb5.conf.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KRB5.CONF" "5" " " "1.14.3" "MIT Kerberos" +.TH "KRB5.CONF" "5" " " "1.14.4" "MIT Kerberos" .SH NAME krb5.conf \- Kerberos configuration file . diff --git a/src/man/krb5kdc.man b/src/man/krb5kdc.man index db7dc00..21a044e 100644 --- a/src/man/krb5kdc.man +++ b/src/man/krb5kdc.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KRB5KDC" "8" " " "1.14.3" "MIT Kerberos" +.TH "KRB5KDC" "8" " " "1.14.4" "MIT Kerberos" .SH NAME krb5kdc \- Kerberos V5 KDC . diff --git a/src/man/ksu.man b/src/man/ksu.man index 7a8495e..7f18116 100644 --- a/src/man/ksu.man +++ b/src/man/ksu.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KSU" "1" " " "1.14.3" "MIT Kerberos" +.TH "KSU" "1" " " "1.14.4" "MIT Kerberos" .SH NAME ksu \- Kerberized super-user . diff --git a/src/man/kswitch.man b/src/man/kswitch.man index 53cb2e7..b9ac78d 100644 --- a/src/man/kswitch.man +++ b/src/man/kswitch.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KSWITCH" "1" " " "1.14.3" "MIT Kerberos" +.TH "KSWITCH" "1" " " "1.14.4" "MIT Kerberos" .SH NAME kswitch \- switch primary ticket cache . diff --git a/src/man/ktutil.man b/src/man/ktutil.man index 04a37db..f091ce6 100644 --- a/src/man/ktutil.man +++ b/src/man/ktutil.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KTUTIL" "1" " " "1.14.3" "MIT Kerberos" +.TH "KTUTIL" "1" " " "1.14.4" "MIT Kerberos" .SH NAME ktutil \- Kerberos keytab file maintenance utility . diff --git a/src/man/kvno.man b/src/man/kvno.man index 924df31..1d6c90b 100644 --- a/src/man/kvno.man +++ b/src/man/kvno.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "KVNO" "1" " " "1.14.3" "MIT Kerberos" +.TH "KVNO" "1" " " "1.14.4" "MIT Kerberos" .SH NAME kvno \- print key version numbers of Kerberos principals . diff --git a/src/man/sclient.man b/src/man/sclient.man index 89c738d..31409af 100644 --- a/src/man/sclient.man +++ b/src/man/sclient.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "SCLIENT" "1" " " "1.14.3" "MIT Kerberos" +.TH "SCLIENT" "1" " " "1.14.4" "MIT Kerberos" .SH NAME sclient \- sample Kerberos version 5 client . diff --git a/src/man/sserver.man b/src/man/sserver.man index c0706d7..6ebfa9b 100644 --- a/src/man/sserver.man +++ b/src/man/sserver.man @@ -1,6 +1,6 @@ .\" Man page generated from reStructuredText. . -.TH "SSERVER" "8" " " "1.14.3" "MIT Kerberos" +.TH "SSERVER" "8" " " "1.14.4" "MIT Kerberos" .SH NAME sserver \- sample Kerberos version 5 server . diff --git a/src/patchlevel.h b/src/patchlevel.h index 1459406..b7dafdf 100644 --- a/src/patchlevel.h +++ b/src/patchlevel.h @@ -51,7 +51,7 @@ */ #define KRB5_MAJOR_RELEASE 1 #define KRB5_MINOR_RELEASE 14 -#define KRB5_PATCHLEVEL 3 -#define KRB5_RELTAIL "postrelease" +#define KRB5_PATCHLEVEL 4 +/* #undef KRB5_RELTAIL */ /* #undef KRB5_RELDATE */ -#define KRB5_RELTAG "krb5-1.14" +#define KRB5_RELTAG "krb5-1.14.4-final" diff --git a/src/po/mit-krb5.pot b/src/po/mit-krb5.pot index 9415b58..a7886a0 100644 --- a/src/po/mit-krb5.pot +++ b/src/po/mit-krb5.pot @@ -6,9 +6,9 @@ #, fuzzy msgid "" msgstr "" -"Project-Id-Version: mit-krb5 1.14.3-postrelease\n" +"Project-Id-Version: mit-krb5 1.14.4\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2016-09-12 17:24-0400\n" +"POT-Creation-Date: 2016-09-12 18:15-0400\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" -- cgit v1.1