krb5 commit [krb5-1.11]: Update README and patchlevel.h for krb5-1.11.1
Tom Yu
tlyu at MIT.EDU
Thu Feb 21 18:18:31 EST 2013
https://github.com/krb5/krb5/commit/da9dc1bbc92884e1c7f817928176d9043f0ada34
commit da9dc1bbc92884e1c7f817928176d9043f0ada34
Author: Tom Yu <tlyu at mit.edu>
Date: Thu Feb 21 16:30:47 2013 -0500
Update README and patchlevel.h for krb5-1.11.1
NOTICE | 2 +-
README | 37 +++++++++++++++++++++++++++++++++++--
doc/notice.rst | 2 +-
src/patchlevel.h | 6 +++---
4 files changed, 40 insertions(+), 7 deletions(-)
diff --git a/NOTICE b/NOTICE
index 7978f51..ac08bba 100644
--- a/NOTICE
+++ b/NOTICE
@@ -1,4 +1,4 @@
-Copyright (C) 1985-2012 by the Massachusetts Institute of Technology.
+Copyright (C) 1985-2013 by the Massachusetts Institute of Technology.
All rights reserved.
diff --git a/README b/README
index 4685ff2..4c061cc 100644
--- a/README
+++ b/README
@@ -77,8 +77,41 @@ from using single-DES cryptosystems. Among these is a configuration
variable that enables "weak" enctypes, which defaults to "false"
beginning with krb5-1.8.
-Major changes in 1.11
----------------------
+Major changes in 1.11.1 (2013-02-21)
+------------------------------------
+
+This is a bugfix release.
+
+* Restore capability for multi-hop SAM-2 preauth exchanges, which
+ krb5-1.11 had inadvertently removed.
+
+* Fix a null pointer dereference in the KDC PKINIT code
+ [CVE-2013-1415].
+
+krb5-1.11.1 changes by ticket ID
+--------------------------------
+
+7458 add more strftime format strings for klist
+7523 Fix gss_str_to_oid for OIDs with zero-valued arcs
+7525 Fix DPRINT in ipropd_svc.c
+7534 Minor pointer management patches
+7539 Fix no_host_referral concatention in KDC
+7548 Fix iprop safety net in kdb5_util load
+7553 sendto_kdc can invoke poll with negative timeout
+7557 Fix h1 end tag in Sphinx header titles
+7558 Fix typos in layout.html
+7559 Fix "search" accesskey in layout.html
+7560 Fix kdb5_util dump.c uninitialized warnings
+7561 kprop doesn't work with RC4 session key
+7567 Fix RFC 5587 const pointer typedefs
+7569 Convert success in krb5_chpw_result_code_string
+7570 PKINIT null pointer deref [CVE-2013-1415]
+7571 Allow multi-hop SAM-2 exchanges
+7573 File descriptor leak in DIR ccaches
+7574 Fix memory leak closing DIR ccaches
+
+Major changes in 1.11 (2012-12-17)
+----------------------------------
Additional background information on these changes may be found at
diff --git a/doc/notice.rst b/doc/notice.rst
index e8d0d00..0215841 100644
--- a/doc/notice.rst
+++ b/doc/notice.rst
@@ -1,4 +1,4 @@
-Copyright |copy| 1985-2012 by the Massachusetts Institute of Technology.
+Copyright |copy| 1985-2013 by the Massachusetts Institute of Technology.
All rights reserved.
diff --git a/src/patchlevel.h b/src/patchlevel.h
index 2cdb705..a38edfd 100644
--- a/src/patchlevel.h
+++ b/src/patchlevel.h
@@ -51,7 +51,7 @@
*/
#define KRB5_MAJOR_RELEASE 1
#define KRB5_MINOR_RELEASE 11
-#define KRB5_PATCHLEVEL 0
-#define KRB5_RELTAIL "postrelease"
+#define KRB5_PATCHLEVEL 1
+/* #undef KRB5_RELTAIL */
/* #undef KRB5_RELDATE */
-#define KRB5_RELTAG "krb5-1.11"
+#define KRB5_RELTAG "krb5-1.11.1-final"
More information about the cvs-krb5
mailing list