[ubuntu/lucid-security] krb5, krb5_1.8.1+dfsg-2ubuntu0.4_powerpc_translations.tar.gz, krb5_1.8.1+dfsg-2ubuntu0.4_ia64_translations.tar.gz, krb5_1.8.1+dfsg-2ubuntu0.4_amd64_translations.tar.gz, krb5_1.8.1+dfsg-2ubuntu0.4_sparc_translations.tar.gz (delayed), krb5_1.8.1+dfsg-2ubuntu0.4_i386_translations.tar.gz, krb5_1.8.1+dfsg-2ubuntu0.4_armel_translations.tar.gz 1.8.1+dfsg-2ubuntu0.4 (Accepted)

[Ubuntu Installer]

krb5 (1.8.1+dfsg-2ubuntu0.4) lucid-security; urgency=low

  * SECURITY UPDATE: message forgery and privilege escalation via
    unacceptable checksums
    - src/lib/crypto/krb/dk/derive.c, src/lib/crypto/krb/keyed_checksum_types.c,
      src/lib/gssapi/krb5/util_crypt.c, src/lib/krb5/krb/mk_safe.c,
      src/lib/krb5/krb/pac.c, src/lib/krb5/krb/preauth2.c,
      src/plugins/preauth/pkinit/pkinit_srv.c: patched inline, thanks to
      upstream.
    - CVE-2010-1323
    - CVE-2010-1324
    - CVE-2010-4020
    - MITKRB5-SA-2010-007

Date: Wed, 08 Dec 2010 09:20:59 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/krb5/1.8.1+dfsg-2ubuntu0.4
-------------- next part --------------
Format: 1.8
Date: Wed, 08 Dec 2010 09:20:59 -0500
Source: krb5
Binary: krb5-user krb5-kdc krb5-kdc-ldap krb5-admin-server krb5-multidev libkrb5-dev libkrb5-dbg krb5-pkinit krb5-doc libkrb5-3 libgssapi-krb5-2 libgssrpc4 libkadm5srv-mit7 libkadm5clnt-mit7 libk5crypto3 libkdb5-4 libkrb5support0
Architecture: source
Version: 1.8.1+dfsg-2ubuntu0.4
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 krb5-admin-server - MIT Kerberos master server (kadmind)
 krb5-doc   - Documentation for MIT Kerberos
 krb5-kdc   - MIT Kerberos key server (KDC)
 krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin
 krb5-multidev - Development files for MIT Kerberos without Heimdal conflict
 krb5-pkinit - PKINIT plugin for MIT Kerberos
 krb5-user  - Basic programs to authenticate using MIT Kerberos
 libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
 libgssrpc4 - MIT Kerberos runtime libraries - GSS enabled ONCRPC
 libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library
 libkadm5clnt-mit7 - MIT Kerberos runtime libraries - Administration Clients
 libkadm5srv-mit7 - MIT Kerberos runtime libraries - KDC and Admin Server
 libkdb5-4  - MIT Kerberos runtime libraries - Kerberos database
 libkrb5-3  - MIT Kerberos runtime libraries
 libkrb5-dbg - Debugging files for MIT Kerberos
 libkrb5-dev - Headers and development libraries for MIT Kerberos
 libkrb5support0 - MIT Kerberos runtime libraries - Support library
Changes: 
 krb5 (1.8.1+dfsg-2ubuntu0.4) lucid-security; urgency=low
 .
   * SECURITY UPDATE: message forgery and privilege escalation via
     unacceptable checksums
     - src/lib/crypto/krb/dk/derive.c, src/lib/crypto/krb/keyed_checksum_types.c,
       src/lib/gssapi/krb5/util_crypt.c, src/lib/krb5/krb/mk_safe.c,
       src/lib/krb5/krb/pac.c, src/lib/krb5/krb/preauth2.c,
       src/plugins/preauth/pkinit/pkinit_srv.c: patched inline, thanks to
       upstream.
     - CVE-2010-1323
     - CVE-2010-1324
     - CVE-2010-4020
     - MITKRB5-SA-2010-007
Checksums-Sha1: 
 b07a954fe1a58ec7e8ac2659e2954c078b8b1f9e 2323 krb5_1.8.1+dfsg-2ubuntu0.4.dsc
 2a962db4691908f4e0ad8de9c9d13f8a21ba99a8 127509 krb5_1.8.1+dfsg-2ubuntu0.4.diff.gz
Checksums-Sha256: 
 d267472e55ada75964c01c871afa9d2e4c5288752188e36bf6377233819721db 2323 krb5_1.8.1+dfsg-2ubuntu0.4.dsc
 b87b6ad490b2dc2100a45789fcc9d7e0cd6214dea659c94e0d3effcbe1b79b78 127509 krb5_1.8.1+dfsg-2ubuntu0.4.diff.gz
Files: 
 75bbc8935151ddebdc131c559ac51f4e 2323 net standard krb5_1.8.1+dfsg-2ubuntu0.4.dsc
 ca855fbbb44f597504034a6ffe743c3e 127509 net standard krb5_1.8.1+dfsg-2ubuntu0.4.diff.gz
Original-Maintainer: Sam Hartman <hartmans at debian.org>