Format: 1.8 Date: Fri, 08 Aug 2014 15:03:17 -0400 Source: krb5 Binary: krb5-user krb5-kdc krb5-kdc-ldap krb5-admin-server krb5-multidev libkrb5-dev libkrb5-dbg krb5-pkinit krb5-doc libkrb5-3 libgssapi-krb5-2 libgssrpc4 libkadm5srv-mit7 libkadm5clnt-mit7 libk5crypto3 libkdb5-4 libkrb5support0 Architecture: sparc sparc_translations Version: 1.8.1+dfsg-2ubuntu0.13 Distribution: lucid Urgency: medium Maintainer: Ubuntu/sparc Build Daemon Changed-By: Marc Deslauriers Description: krb5-admin-server - MIT Kerberos master server (kadmind) krb5-doc - Documentation for MIT Kerberos krb5-kdc - MIT Kerberos key server (KDC) krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin krb5-multidev - Development files for MIT Kerberos without Heimdal conflict krb5-pkinit - PKINIT plugin for MIT Kerberos krb5-user - Basic programs to authenticate using MIT Kerberos libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism libgssrpc4 - MIT Kerberos runtime libraries - GSS enabled ONCRPC libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library libkadm5clnt-mit7 - MIT Kerberos runtime libraries - Administration Clients libkadm5srv-mit7 - MIT Kerberos runtime libraries - KDC and Admin Server libkdb5-4 - MIT Kerberos runtime libraries - Kerberos database libkrb5-3 - MIT Kerberos runtime libraries libkrb5-dbg - Debugging files for MIT Kerberos libkrb5-dev - Headers and development libraries for MIT Kerberos libkrb5support0 - MIT Kerberos runtime libraries - Support library Changes: krb5 (1.8.1+dfsg-2ubuntu0.13) lucid-security; urgency=medium . * SECURITY UPDATE: denial of service via malformed KRB5_PADATA_PK_AS_REQ AS-REQ request - src/plugins/preauth/pkinit/pkinit_crypto_openssl.c: don't dereference null pointer. - c773d3c775e9b2d88bcdff5f8a8ba88d7ec4e8ed - CVE-2013-1415 * SECURITY UPDATE: denial of service via crafted TGS-REQ request - src/kdc/do_tgs_req.c: don't pass null pointer to strlcpy(). - 8ee70ec63931d1e38567905387ab9b1d45734d81 - CVE-2013-1416 * SECURITY UPDATE: multi-realm denial of service via crafted request - src/kdc/main.c: don't dereference a null pointer. - c2ccf4197f697c4ff143b8a786acdd875e70a89d - CVE-2013-1418 - CVE-2013-6800 * SECURITY UPDATE: denial of service via invalid tokens - src/lib/gssapi/krb5/k5unseal.c, src/lib/gssapi/krb5/k5unsealiov.c: handle invalid tokens. - fb99962cbd063ac04c9a9d2cc7c75eab73f3533d - CVE-2014-4341 - CVE-2014-4342 * SECURITY UPDATE: denial of service via double-free in SPNEGO - src/lib/gssapi/spnego/spnego_mech.c: fix double-free. - f18ddf5d82de0ab7591a36e465bc24225776940f - CVE-2014-4343 * SECURITY UPDATE: denial of service via null deref in SPNEGO acceptor - src/lib/gssapi/spnego/spnego_mech.c: validate REMAIN. - 524688ce87a15fc75f87efc8c039ba4c7d5c197b - CVE-2014-4344 * SECURITY UPDATE: denial of service and possible code execution in kadmind with LDAP backend - src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c: fix off-by-one - 81c332e29f10887c6b9deb065f81ba259f4c7e03 - CVE-2014-4345 Checksums-Sha1: 0dd2b81bbfc2cc1023082757df391dc17121196b 133130 krb5-user_1.8.1+dfsg-2ubuntu0.13_sparc.deb 32a63ae20c499d56a5b96907e1120aa0c6917f1f 207084 krb5-kdc_1.8.1+dfsg-2ubuntu0.13_sparc.deb 21873a23672de2b89f2336889042360882995a5e 112684 krb5-kdc-ldap_1.8.1+dfsg-2ubuntu0.13_sparc.deb 3267b8ce0d914c3c127c699e61a710b0e5378012 109468 krb5-admin-server_1.8.1+dfsg-2ubuntu0.13_sparc.deb ee0bccb332d1d8aa537d233b114b018b227e843d 103806 krb5-multidev_1.8.1+dfsg-2ubuntu0.13_sparc.deb bd9dfedcbfe35238673610cd3c9c6b6f74a32bcd 37218 libkrb5-dev_1.8.1+dfsg-2ubuntu0.13_sparc.deb 681a063424e22df8819c5b2d8365f712d1fb2ff0 1521596 libkrb5-dbg_1.8.1+dfsg-2ubuntu0.13_sparc.deb 7756a1cba2a7feaab82e1c8469da1195585d2a19 70742 krb5-pkinit_1.8.1+dfsg-2ubuntu0.13_sparc.deb 898b378d7f93128dac4c0830cf22d181f811ed52 343284 libkrb5-3_1.8.1+dfsg-2ubuntu0.13_sparc.deb 9433033407c1151cec7bb6eb603449ca57f7118f 116186 libgssapi-krb5-2_1.8.1+dfsg-2ubuntu0.13_sparc.deb 6107caa320d61d5de1c216aa8fe299e688000793 77232 libgssrpc4_1.8.1+dfsg-2ubuntu0.13_sparc.deb 0abc66ac7ca492c6ed2e9054a9596c8d4c5905b7 71484 libkadm5srv-mit7_1.8.1+dfsg-2ubuntu0.13_sparc.deb b4d8a535e179e6d7a48b58d75e3a009fd0d0c99a 59302 libkadm5clnt-mit7_1.8.1+dfsg-2ubuntu0.13_sparc.deb a2fe33e13b92d5e418e7ae6c82a132ba768ac9b2 110522 libk5crypto3_1.8.1+dfsg-2ubuntu0.13_sparc.deb 9ac63b0da2fe0f7cac1c7b28a11ec1abc46e2187 59030 libkdb5-4_1.8.1+dfsg-2ubuntu0.13_sparc.deb 5e05b42aafa84d33de5cf9d0b93c2896ac7fc61d 43742 libkrb5support0_1.8.1+dfsg-2ubuntu0.13_sparc.deb 83ea01ae34e8963b6bebd0a141f0cc30bd4e68e6 28360 krb5_1.8.1+dfsg-2ubuntu0.13_sparc_translations.tar.gz Checksums-Sha256: 79b12af8d3a7ffe09278fb4086692febd35f28c2a002e05b474bab2bd7e93318 133130 krb5-user_1.8.1+dfsg-2ubuntu0.13_sparc.deb 7d283f9c81927f11787c3378e9de655787d7d67a39baeb43b8184896051a06bb 207084 krb5-kdc_1.8.1+dfsg-2ubuntu0.13_sparc.deb a9bd00e48199c262b5f73b7c75edbc7e35b3b27d49e2103690dc15ac171c5c84 112684 krb5-kdc-ldap_1.8.1+dfsg-2ubuntu0.13_sparc.deb 86d4acc3d67a5c7cbc012e73dea78f5659307f22806351501a2ea409028b010a 109468 krb5-admin-server_1.8.1+dfsg-2ubuntu0.13_sparc.deb d85dc298b9f768f64ddda5b52e52937d463afab7fa42df5f43d025eb540c859f 103806 krb5-multidev_1.8.1+dfsg-2ubuntu0.13_sparc.deb fa9e40592d04da857e8c6b069ea6d1f6693a6df81ae4dd92a08774420a8f0f52 37218 libkrb5-dev_1.8.1+dfsg-2ubuntu0.13_sparc.deb e8aabecd63e73a834fa97352776e5050f3eb0f608db17ca709b07c8c53c47568 1521596 libkrb5-dbg_1.8.1+dfsg-2ubuntu0.13_sparc.deb 151e2f6d9e29285b2b4139998b0a60dbd227ccfa8444e907e1d4b572d98f45a5 70742 krb5-pkinit_1.8.1+dfsg-2ubuntu0.13_sparc.deb df5ffe87736a750110b27530226ebbb01224c785861026b39210caa81c7d5088 343284 libkrb5-3_1.8.1+dfsg-2ubuntu0.13_sparc.deb b095a6806c801b7e4b04c1353c1422417e80a2900fc08e0367978b9132f365c4 116186 libgssapi-krb5-2_1.8.1+dfsg-2ubuntu0.13_sparc.deb a2f715d25f70a2e2a5a2b774c9dc06a545598a147b0d525a943c9320f32b8777 77232 libgssrpc4_1.8.1+dfsg-2ubuntu0.13_sparc.deb 8b7e1a93ffcde9c6dcd93c3b8965716c574a19db3e6026d54aff0f5d6f5334b4 71484 libkadm5srv-mit7_1.8.1+dfsg-2ubuntu0.13_sparc.deb 38d59b9a285341426ee1ee51ca917f02d4c551da8ffca910c13de44e258a5c96 59302 libkadm5clnt-mit7_1.8.1+dfsg-2ubuntu0.13_sparc.deb 4022abe88d0ca9584554b90a51911254671cb41f901a808b7e95e843c48f8cc3 110522 libk5crypto3_1.8.1+dfsg-2ubuntu0.13_sparc.deb 2fa7430e61b76763b6b6d33329a4b4473ba8de0ec22999f54e240e55565b964a 59030 libkdb5-4_1.8.1+dfsg-2ubuntu0.13_sparc.deb 8d5492d2fc7be9757438f4d63d82fc237d34ad880be7fa04bda14bc591245242 43742 libkrb5support0_1.8.1+dfsg-2ubuntu0.13_sparc.deb e9973f4c27ec6be776ce1607a9fc98683ee5f5a69d11d134f6df922bbf58b800 28360 krb5_1.8.1+dfsg-2ubuntu0.13_sparc_translations.tar.gz Files: 2772ce36d93fdc755700ed8ed4295611 133130 net optional krb5-user_1.8.1+dfsg-2ubuntu0.13_sparc.deb 3a4b664c61e556fdc9957c6e6fe1caa1 207084 net optional krb5-kdc_1.8.1+dfsg-2ubuntu0.13_sparc.deb 52ee1a35360cae2aaeb2746591d64720 112684 net extra krb5-kdc-ldap_1.8.1+dfsg-2ubuntu0.13_sparc.deb 5989cda23beaf7279a101302cdbe268e 109468 net optional krb5-admin-server_1.8.1+dfsg-2ubuntu0.13_sparc.deb fd47507ed53b3069209c64b6f451cb25 103806 libdevel optional krb5-multidev_1.8.1+dfsg-2ubuntu0.13_sparc.deb f861cc5bd23a5a27893aeae25e15df02 37218 libdevel extra libkrb5-dev_1.8.1+dfsg-2ubuntu0.13_sparc.deb c931caa3d27c48133d9303f61639ad94 1521596 debug extra libkrb5-dbg_1.8.1+dfsg-2ubuntu0.13_sparc.deb 5ed90c5996188d90ac56e710ff7a1ee6 70742 net extra krb5-pkinit_1.8.1+dfsg-2ubuntu0.13_sparc.deb 35ee02dde90c3077811fe647efdb1ae8 343284 libs standard libkrb5-3_1.8.1+dfsg-2ubuntu0.13_sparc.deb bf315e55fae42b1ae809bbe82a47e6cb 116186 libs standard libgssapi-krb5-2_1.8.1+dfsg-2ubuntu0.13_sparc.deb b5e81ae1b9cdd9be9f9c52bbf6d39d40 77232 libs standard libgssrpc4_1.8.1+dfsg-2ubuntu0.13_sparc.deb 34d2a68f477fb986ed400d5a750455ff 71484 libs standard libkadm5srv-mit7_1.8.1+dfsg-2ubuntu0.13_sparc.deb 82860408c1c16ddf4fd1569ce233ab65 59302 libs standard libkadm5clnt-mit7_1.8.1+dfsg-2ubuntu0.13_sparc.deb 86dbbece5319f08442d896fde38639c3 110522 libs standard libk5crypto3_1.8.1+dfsg-2ubuntu0.13_sparc.deb d737ad958da95e3c4fa6d19202a67907 59030 libs standard libkdb5-4_1.8.1+dfsg-2ubuntu0.13_sparc.deb e8bd8a1c9547f20607348961c40d760a 43742 libs standard libkrb5support0_1.8.1+dfsg-2ubuntu0.13_sparc.deb 8e61b558e54e93059a49e8ee6fff0b48 28360 raw-translations - krb5_1.8.1+dfsg-2ubuntu0.13_sparc_translations.tar.gz Original-Maintainer: Sam Hartman