[ubuntu/dapper-security] krb5, krb5_1.4.3-5ubuntu0.10_i386_translations.tar.gz, krb5_1.4.3-5ubuntu0.10_powerpc_translations.tar.gz, krb5_1.4.3-5ubuntu0.10_sparc_translations.tar.gz (delayed), krb5_1.4.3-5ubuntu0.10_amd64_translations.tar.gz, krb5_1.4.3-5ubuntu0.10_hppa_translations.tar.gz, krb5_1.4.3-5ubuntu0.10_ia64_translations.tar.gz 1.4.3-5ubuntu0.10 (Accepted)

[Ubuntu Installer]

krb5 (1.4.3-5ubuntu0.10) dapper-security; urgency=low

  * SECURITY UPDATE: unauthenticated remote attacker can crash or
    compromise the KDC via flaws in AES and RC4 decryption (CVE-2009-4212).
    - debian/patches/MITKRB5-SA-2009-004 backported and applied inline.
    - http://web.mit.edu/kerberos/advisories/2009-004-patch_1.6.3.txt

Date: Mon, 11 Jan 2010 14:40:21 -0800
Changed-By: Kees Cook <kees at ubuntu.com>
Maintainer: Sam Hartman <hartmans at debian.org>
https://launchpad.net/ubuntu/dapper/+source/krb5/1.4.3-5ubuntu0.10
-------------- next part --------------
Format: 1.7
Date: Mon, 11 Jan 2010 14:40:21 -0800
Source: krb5
Binary: krb5-doc libkrb5-dev krb5-rsh-server krb5-user krb5-ftpd libkadm55 libkrb53 krb5-clients krb5-telnetd krb5-kdc krb5-admin-server
Architecture: source
Version: 1.4.3-5ubuntu0.10
Distribution: dapper-security
Urgency: low
Maintainer: Sam Hartman <hartmans at debian.org>
Changed-By: Kees Cook <kees at ubuntu.com>
Description: 
 krb5-admin-server - MIT Kerberos master server (kadmind)
 krb5-clients - Secure replacements for ftp, telnet and rsh using MIT Kerberos
 krb5-doc   - Documentation for MIT Kerberos
 krb5-ftpd  - Secure FTP server supporting MIT Kerberos
 krb5-kdc   - MIT Kerberos key server (KDC)
 krb5-rsh-server - Secure replacements for rshd and rlogind using MIT Kerberos
 krb5-telnetd - Secure telnet server supporting MIT Kerberos
 krb5-user  - Basic programs to authenticate using MIT Kerberos
 libkadm55  - MIT Kerberos administration runtime libraries
 libkrb5-dev - Headers and development libraries for MIT Kerberos
 libkrb53   - MIT Kerberos runtime libraries
Changes: 
 krb5 (1.4.3-5ubuntu0.10) dapper-security; urgency=low
 .
   * SECURITY UPDATE: unauthenticated remote attacker can crash or
     compromise the KDC via flaws in AES and RC4 decryption (CVE-2009-4212).
     - debian/patches/MITKRB5-SA-2009-004 backported and applied inline.
     - http://web.mit.edu/kerberos/advisories/2009-004-patch_1.6.3.txt
Files: 
 210f6a4b49f7243ca8bf6000e5b0644c 897 net standard krb5_1.4.3-5ubuntu0.10.dsc
 284806d60d14746a532b7ce56dfecad7 1471400 net standard krb5_1.4.3-5ubuntu0.10.diff.gz