krb5 commit [krb5-1.10]: README and patchlevel.h for krb5-1.10.2

Tom Yu tlyu at MIT.EDU
Thu May 31 19:48:23 EDT 2012


https://github.com/krb5/krb5/commit/877bdca7a323b0bc33c3c1b21f99a7655f7a7a2c
commit 877bdca7a323b0bc33c3c1b21f99a7655f7a7a2c
Author: Tom Yu <tlyu at mit.edu>
Date:   Thu May 31 19:47:15 2012 -0400

    README and patchlevel.h for krb5-1.10.2

 README           |   30 ++++++++++++++++++++++++++++++
 src/patchlevel.h |    6 +++---
 2 files changed, 33 insertions(+), 3 deletions(-)

diff --git a/README b/README
index fc9c419..615e532 100644
--- a/README
+++ b/README
@@ -70,6 +70,36 @@ from using single-DES cryptosystems.  Among these is a configuration
 variable that enables "weak" enctypes, which defaults to "false"
 beginning with krb5-1.8.
 
+Major changes in 1.10.2
+-----------------------
+
+This is a bugfix release.
+
+* Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
+  Controllers.
+
+* Update a workaround for a glibc bug that would cause DNS PTR queries
+  to occur even when rdns = false.
+
+* Fix a kadmind denial of service issue (null pointer dereference),
+  which could only be triggered by an administrator with the "create"
+  privilege.  [CVE-2012-1013]
+
+krb5-1.10.2 changes by ticket ID
+--------------------------------
+
+7095    Build system uses @localedir@ without requiring autoconf 2.60
+7099    Decrypting history key entries can fail after 1.8 upgrade
+7119    Preauth fails for second AS request in a krb5 context
+7120    Use correct name-type in TGS-REQs for 2008R2 RODCs
+7124    krb5_sname_to_principal canonicalization should work with
+        IPv6-only hosts
+7127    Can't change password without default_realm
+7136    S4U2Self using kvno broken in 1.10.1, but not in 1-9.3
+7143    krb5_set_trace_filename not exported
+7148    Export gss_mech_krb5_wrong from libgssapi_krb5
+7152    Null pointer deref in kadmind [CVE-2012-1013]
+
 Major changes in 1.10.1
 -----------------------
 
diff --git a/src/patchlevel.h b/src/patchlevel.h
index d2a1e10..d617653 100644
--- a/src/patchlevel.h
+++ b/src/patchlevel.h
@@ -51,7 +51,7 @@
  */
 #define KRB5_MAJOR_RELEASE 1
 #define KRB5_MINOR_RELEASE 10
-#define KRB5_PATCHLEVEL 1
-#define KRB5_RELTAIL "postrelease"
+#define KRB5_PATCHLEVEL 2
+/* #undef KRB5_RELTAIL */
 /* #undef KRB5_RELDATE */
-#define KRB5_RELTAG "krb5-1.10"
+#define KRB5_RELTAG "tags/krb5-1.10.2-final"


More information about the cvs-krb5 mailing list