[ubuntu/dapper-security] krb5, krb5 (delayed) 1.4.3-5ubuntu0.12 (Accepted)

[Ubuntu Installer]

krb5 (1.4.3-5ubuntu0.12) dapper-security; urgency=low

  * SECURITY UPDATE: message forgery and privilege escalation via
    unacceptable checksums
    - src/lib/crypto/krb/dk/derive.c, src/lib/crypto/krb/keyed_checksum_types.c,
      src/lib/krb5/krb/mk_safe.c, src/lib/krb5/krb/preauth2.c,
      src/plugins/preauth/pkinit/pkinit_srv.c: patched inline, thanks to
      upstream.
    - CVE-2010-1323
    - MITKRB5-SA-2010-007

Date: Wed, 08 Dec 2010 10:39:39 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Sam Hartman <hartmans at debian.org>
https://launchpad.net/ubuntu/dapper/+source/krb5/1.4.3-5ubuntu0.12
-------------- next part --------------
Format: 1.7
Date: Wed, 08 Dec 2010 10:39:39 -0500
Source: krb5
Binary: krb5-doc libkrb5-dev krb5-rsh-server krb5-user krb5-ftpd libkadm55 libkrb53 krb5-clients krb5-telnetd krb5-kdc krb5-admin-server
Architecture: source
Version: 1.4.3-5ubuntu0.12
Distribution: dapper-security
Urgency: low
Maintainer: Sam Hartman <hartmans at debian.org>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 krb5-admin-server - MIT Kerberos master server (kadmind)
 krb5-clients - Secure replacements for ftp, telnet and rsh using MIT Kerberos
 krb5-doc   - Documentation for MIT Kerberos
 krb5-ftpd  - Secure FTP server supporting MIT Kerberos
 krb5-kdc   - MIT Kerberos key server (KDC)
 krb5-rsh-server - Secure replacements for rshd and rlogind using MIT Kerberos
 krb5-telnetd - Secure telnet server supporting MIT Kerberos
 krb5-user  - Basic programs to authenticate using MIT Kerberos
 libkadm55  - MIT Kerberos administration runtime libraries
 libkrb5-dev - Headers and development libraries for MIT Kerberos
 libkrb53   - MIT Kerberos runtime libraries
Changes: 
 krb5 (1.4.3-5ubuntu0.12) dapper-security; urgency=low
 .
   * SECURITY UPDATE: message forgery and privilege escalation via
     unacceptable checksums
     - src/lib/crypto/krb/dk/derive.c, src/lib/crypto/krb/keyed_checksum_types.c,
       src/lib/krb5/krb/mk_safe.c, src/lib/krb5/krb/preauth2.c,
       src/plugins/preauth/pkinit/pkinit_srv.c: patched inline, thanks to
       upstream.
     - CVE-2010-1323
     - MITKRB5-SA-2010-007
Files: 
 45032b2a02871ac2770a837cbd3a2de1 1499 net standard krb5_1.4.3-5ubuntu0.12.dsc
 0f43a9b65d5d208131558b77c1d10341 1473343 net standard krb5_1.4.3-5ubuntu0.12.diff.gz