Format: 1.7 Date: Tue, 07 Apr 2009 12:47:50 -0700 Source: krb5 Binary: libkadm55 libkrb53 krb5-user krb5-clients krb5-rsh-server krb5-ftpd krb5-telnetd krb5-kdc krb5-admin-server libkrb5-dev libkrb5-dbg krb5-pkinit krb5-doc Architecture: all i386_translations i386 Version: 1.6.dfsg.3~beta1-2ubuntu1.1 Distribution: hardy Urgency: low Maintainer: Ubuntu/i386 Build Daemon Changed-By: Kees Cook Description: krb5-admin-server - MIT Kerberos master server (kadmind) krb5-clients - Secure replacements for ftp, telnet and rsh using MIT Kerberos krb5-doc - Documentation for MIT Kerberos krb5-ftpd - Secure FTP server supporting MIT Kerberos krb5-kdc - MIT Kerberos key server (KDC) krb5-pkinit - Pkinit Plugin for MIT Kerberos krb5-rsh-server - Secure replacements for rshd and rlogind using MIT Kerberos krb5-telnetd - Secure telnet server supporting MIT Kerberos krb5-user - Basic programs to authenticate using MIT Kerberos libkadm55 - MIT Kerberos administration runtime libraries libkrb5-dbg - Debugging files for MIT Kerberos libkrb5-dev - Headers and development libraries for MIT Kerberos libkrb53 - MIT Kerberos runtime libraries Changes: krb5 (1.6.dfsg.3~beta1-2ubuntu1.1) hardy-security; urgency=low . * SECURITY UPDATE: denial of service via buffer overflows. - src/lib/gssapi/spnego/spnego_mech.c, src/lib/krb5/asn.1/asn1buf.c: GSS-API could be crashed remotely (MITKRB5-SA-2009-001: CVE-2009-0844, CVE-2009-0845, CVE-2009-0847). - src/lib/krb5/asn.1/asn1_decode.c: ASN.1 decoder freed uninitialized pointers (MITKRB5-SA-2009-002: CVE-2009-0846). Files: 2b99650167ae43d770609419b1a32afb 2121354 doc optional krb5-doc_1.6.dfsg.3~beta1-2ubuntu1.1_all.deb 588365a901d1484fedcabf8aa85229ee 26843 raw-translations - krb5_1.6.dfsg.3~beta1-2ubuntu1.1_i386_translations.tar.gz eac3252f78024ae06237dbe3cdf0e239 145770 libs optional libkadm55_1.6.dfsg.3~beta1-2ubuntu1.1_i386.deb 261a2399642fea079087dffe0454a2dd 460254 libs standard libkrb53_1.6.dfsg.3~beta1-2ubuntu1.1_i386.deb c8bf2cf5ad54eaa9ae390e45dffadf20 131010 net optional krb5-user_1.6.dfsg.3~beta1-2ubuntu1.1_i386.deb 5b0f540ec4324f87843a1d6134902b5f 201512 net optional krb5-clients_1.6.dfsg.3~beta1-2ubuntu1.1_i386.deb 9432d138659af99a12a5d9396785f281 84098 net optional krb5-rsh-server_1.6.dfsg.3~beta1-2ubuntu1.1_i386.deb 0090c931fda144459899c3168bf1d1d4 60488 net extra krb5-ftpd_1.6.dfsg.3~beta1-2ubuntu1.1_i386.deb 1fe01b199487182253701284d28f9c2f 66674 net extra krb5-telnetd_1.6.dfsg.3~beta1-2ubuntu1.1_i386.deb 0579d66fb27570f34c9b9a22e8bae49b 173030 net optional krb5-kdc_1.6.dfsg.3~beta1-2ubuntu1.1_i386.deb 12157123a6a15884382f38f842f49fb1 81490 net optional krb5-admin-server_1.6.dfsg.3~beta1-2ubuntu1.1_i386.deb 81cddf40cb775f9a2087b33577a8c28f 89080 libdevel extra libkrb5-dev_1.6.dfsg.3~beta1-2ubuntu1.1_i386.deb 05aaf36a7106fe52894166f4e60ec4de 1289146 libdevel extra libkrb5-dbg_1.6.dfsg.3~beta1-2ubuntu1.1_i386.deb 95bc3924516f9970f142b4feb05b6ff2 61512 net extra krb5-pkinit_1.6.dfsg.3~beta1-2ubuntu1.1_i386.deb Original-Maintainer: Sam Hartman