Accepted krb5 1.10.1+dfsg-5+deb7u7 (source all amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 31 Jan 2016 13:39:43 +0100
Source: krb5
Binary: krb5-user krb5-kdc krb5-kdc-ldap krb5-admin-server krb5-multidev libkrb5-dev libkrb5-dbg krb5-pkinit krb5-doc libkrb5-3 libgssapi-krb5-2 libgssrpc4 libkadm5srv-mit8 libkadm5clnt-mit8 libk5crypto3 libkdb5-6 libkrb5support0 krb5-gss-samples krb5-locales
Architecture: source all amd64
Version: 1.10.1+dfsg-5+deb7u7
Distribution: wheezy-security
Urgency: high
Maintainer: Sam Hartman <hartmans@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
krb5-admin-server - MIT Kerberos master server (kadmind)
krb5-doc - Documentation for MIT Kerberos
krb5-gss-samples - MIT Kerberos GSS Sample applications
krb5-kdc - MIT Kerberos key server (KDC)
krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin
krb5-locales - Internationalization support for MIT Kerberos
krb5-multidev - Development files for MIT Kerberos without Heimdal conflict
krb5-pkinit - PKINIT plugin for MIT Kerberos
krb5-user - Basic programs to authenticate using MIT Kerberos
libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
libgssrpc4 - MIT Kerberos runtime libraries - GSS enabled ONCRPC
libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library
libkadm5clnt-mit8 - MIT Kerberos runtime libraries - Administration Clients
libkadm5srv-mit8 - MIT Kerberos runtime libraries - KDC and Admin Server
libkdb5-6 - MIT Kerberos runtime libraries - Kerberos database
libkrb5-3 - MIT Kerberos runtime libraries
libkrb5-dbg - Debugging files for MIT Kerberos
libkrb5-dev - Headers and development libraries for MIT Kerberos
libkrb5support0 - MIT Kerberos runtime libraries - Support library
Closes: 813126 813296
Changes:
krb5 (1.10.1+dfsg-5+deb7u7) wheezy-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Verify decoded kadmin C strings [CVE-2015-8629]
CVE-2015-8629: An authenticated attacker can cause kadmind to read
beyond the end of allocated memory by sending a string without a
terminating zero byte. Information leakage may be possible for an
attacker with permission to modify the database. (Closes: #813296)
* Fix leaks in kadmin server stubs [CVE-2015-8631]
CVE-2015-8631: An authenticated attacker can cause kadmind to leak
memory by supplying a null principal name in a request which uses one.
Repeating these requests will eventually cause kadmind to exhaust all
available memory. (Closes: #813126)
Checksums-Sha1:
2e13e07c08dd2e321795d2120e50521fa2c5699e 2938 krb5_1.10.1+dfsg-5+deb7u7.dsc
35bd8e021519007cf240eea0351242516cb761d2 156798 krb5_1.10.1+dfsg-5+deb7u7.debian.tar.gz
a49b966ada737cad5ade8005473103527624d57a 2668968 krb5-doc_1.10.1+dfsg-5+deb7u7_all.deb
3aa2c0f72ea7b70e498c5735275b2f38827169d8 1504092 krb5-locales_1.10.1+dfsg-5+deb7u7_all.deb
cf6b4473fc04c66d222954494518f348615d0401 154040 krb5-user_1.10.1+dfsg-5+deb7u7_amd64.deb
f5290babf83a4050f945d48477d86fede2563cdd 226770 krb5-kdc_1.10.1+dfsg-5+deb7u7_amd64.deb
79d69713d7968271f86a0f4fb307816d53e3b135 121496 krb5-kdc-ldap_1.10.1+dfsg-5+deb7u7_amd64.deb
6c4167a1bf51477696d2fb5f68930396fe3dfda8 124042 krb5-admin-server_1.10.1+dfsg-5+deb7u7_amd64.deb
3129e4506102b35f188ce26ba0154efcaeedcd54 154350 krb5-multidev_1.10.1+dfsg-5+deb7u7_amd64.deb
0370e07a94dbaf27e669acfd3274ef6c2a0df30c 40358 libkrb5-dev_1.10.1+dfsg-5+deb7u7_amd64.deb
5a279b895c488e9465ccb16b3c8fe1f8416ba36a 2210340 libkrb5-dbg_1.10.1+dfsg-5+deb7u7_amd64.deb
e6f38a22ddddd57184f854cd56b200709ac044f6 83218 krb5-pkinit_1.10.1+dfsg-5+deb7u7_amd64.deb
0772a0d2c302c19735eba29cd375d12a71f4ea1c 393868 libkrb5-3_1.10.1+dfsg-5+deb7u7_amd64.deb
4d3826bc7ffed84547fa960ebd75aae38abed4b6 150014 libgssapi-krb5-2_1.10.1+dfsg-5+deb7u7_amd64.deb
e0aae862fb77d50ef75e2458a3e6abf78db3bf96 88212 libgssrpc4_1.10.1+dfsg-5+deb7u7_amd64.deb
b173aa14747256f32de25a649fe49227c094c644 85546 libkadm5srv-mit8_1.10.1+dfsg-5+deb7u7_amd64.deb
470cf453123eb20e43141489ddf926cdd6d48dfb 68748 libkadm5clnt-mit8_1.10.1+dfsg-5+deb7u7_amd64.deb
9943eea567b0184c9000c2aa855daaf78339255f 113270 libk5crypto3_1.10.1+dfsg-5+deb7u7_amd64.deb
4bed0abbaa66ef57f8f6b8b79a2e3cd438b7e721 67788 libkdb5-6_1.10.1+dfsg-5+deb7u7_amd64.deb
17fb2da62255cf997ca57fe5cc13ff70f67add8b 50454 libkrb5support0_1.10.1+dfsg-5+deb7u7_amd64.deb
1cdddb97e3b861d7aae1ab8811759486c64c72d7 52684 krb5-gss-samples_1.10.1+dfsg-5+deb7u7_amd64.deb
Checksums-Sha256:
29b9149c3036b56c71ea311e287e1ab5fc02f65e0a217013310c8c5651ec5059 2938 krb5_1.10.1+dfsg-5+deb7u7.dsc
9f1e2cbe961420558ed4c27ee6c899b1fcca7c144ea3886151f4bc96d175ba7e 156798 krb5_1.10.1+dfsg-5+deb7u7.debian.tar.gz
20d30eb52776e7eda4630d374637e4e7a70617f0e9012cf67de966b84ed435e7 2668968 krb5-doc_1.10.1+dfsg-5+deb7u7_all.deb
a062a031b89a98441a89fed1e8f96d24cf29c10b45eef716e25a63b2ad7d9f46 1504092 krb5-locales_1.10.1+dfsg-5+deb7u7_all.deb
3dacd3f05eba31ca671b6139c317701832d2277ee08fbba6821035106d08660f 154040 krb5-user_1.10.1+dfsg-5+deb7u7_amd64.deb
ede1d932decb41d62bcb38b527d8b073d1dee01513e0503c27031e8d8f588b57 226770 krb5-kdc_1.10.1+dfsg-5+deb7u7_amd64.deb
d48b16f9c38e61a68136cef604f3921453b0da99d895c50c21fc42167fc34c7f 121496 krb5-kdc-ldap_1.10.1+dfsg-5+deb7u7_amd64.deb
594f2bff618fd0765d3d5294ed93629654db4d5e610c8f61f7c147cf47f0f948 124042 krb5-admin-server_1.10.1+dfsg-5+deb7u7_amd64.deb
f60d7c68594a03bf1ba9804e64cbcd39a5adc50c388010aa480f1eeb9fccdaae 154350 krb5-multidev_1.10.1+dfsg-5+deb7u7_amd64.deb
7d90b6e964c90895c36360b18009b3cf56de1446a2a6664bf8a1a51931f2f9f7 40358 libkrb5-dev_1.10.1+dfsg-5+deb7u7_amd64.deb
3507ab0f9c7e6f975ca2c05a75e76aaf1274276df1bfe23fda7c9bf30bfae051 2210340 libkrb5-dbg_1.10.1+dfsg-5+deb7u7_amd64.deb
922e3fd806405aca6070ebe187aee3a080891ca336623ac5dc2cd88537530af2 83218 krb5-pkinit_1.10.1+dfsg-5+deb7u7_amd64.deb
59aefb4890ccf9ec83969601ac02c3586b0cfdf08cbc2bd4eca2d09d66696678 393868 libkrb5-3_1.10.1+dfsg-5+deb7u7_amd64.deb
d54a29bac169a752fed6c55c2672bc40978ba30079e0aeabb9539e7c6bf5d6bf 150014 libgssapi-krb5-2_1.10.1+dfsg-5+deb7u7_amd64.deb
d3bf024e0630a77d42f13f25e6ee654d199647261384b8832abd56288e627a80 88212 libgssrpc4_1.10.1+dfsg-5+deb7u7_amd64.deb
f83bf3960009ce9483be8f528e55f40288e52e9022e631da752356ff44aa9644 85546 libkadm5srv-mit8_1.10.1+dfsg-5+deb7u7_amd64.deb
9180adddf336e81d5fcef8fd5b96de71a956bd0ce8bba04e45ebe89db5b41673 68748 libkadm5clnt-mit8_1.10.1+dfsg-5+deb7u7_amd64.deb
a62330e74af35acbb391d93e489b56ee9c1059ed154f0e1983dd64e75c5d92f5 113270 libk5crypto3_1.10.1+dfsg-5+deb7u7_amd64.deb
a81eb43225486804242ca373dd9a63b094e3917e1330987df8af4dccfd062371 67788 libkdb5-6_1.10.1+dfsg-5+deb7u7_amd64.deb
7336251e8ed091e8274ee7940e5590ea9caa834b958cf04b49436658f7e0218e 50454 libkrb5support0_1.10.1+dfsg-5+deb7u7_amd64.deb
5363b5039458e81bdfabd2354cd48d7dae8b5b0e596ae78c33d93e4719d7e6a4 52684 krb5-gss-samples_1.10.1+dfsg-5+deb7u7_amd64.deb
Files:
72188ba570f1a99516cd6b9250a12a1b 2938 net standard krb5_1.10.1+dfsg-5+deb7u7.dsc
fc0315ec83e8d73020559f73d3cc2c50 156798 net standard krb5_1.10.1+dfsg-5+deb7u7.debian.tar.gz
09ec839787aee09ab3dfdf14cbdaa0fb 2668968 doc optional krb5-doc_1.10.1+dfsg-5+deb7u7_all.deb
faa2ca1ff5daf369d429057efb905596 1504092 localization standard krb5-locales_1.10.1+dfsg-5+deb7u7_all.deb
7ab6b7dc37978fb20510e65772a426ef 154040 net optional krb5-user_1.10.1+dfsg-5+deb7u7_amd64.deb
d0de7c0ec7f2e8877d6685899364dbfe 226770 net optional krb5-kdc_1.10.1+dfsg-5+deb7u7_amd64.deb
6799e44a5bde8c22f4a84173aee82a55 121496 net extra krb5-kdc-ldap_1.10.1+dfsg-5+deb7u7_amd64.deb
0a53b6f39202b18461953bf3b8c53689 124042 net optional krb5-admin-server_1.10.1+dfsg-5+deb7u7_amd64.deb
fcd3b8f9a7d7353e246985f9752c2b2f 154350 libdevel optional krb5-multidev_1.10.1+dfsg-5+deb7u7_amd64.deb
075da199eaeea7b669609ec0925938d7 40358 libdevel extra libkrb5-dev_1.10.1+dfsg-5+deb7u7_amd64.deb
f2951d8bc1b27688adb299bf8d2da984 2210340 debug extra libkrb5-dbg_1.10.1+dfsg-5+deb7u7_amd64.deb
981513e2263d11e0adee0dba92eae2f3 83218 net extra krb5-pkinit_1.10.1+dfsg-5+deb7u7_amd64.deb
0fcddfff36b94031f44a0a242e4c3826 393868 libs standard libkrb5-3_1.10.1+dfsg-5+deb7u7_amd64.deb
78b8ba2315686bdf38c1f7c4c1db043d 150014 libs standard libgssapi-krb5-2_1.10.1+dfsg-5+deb7u7_amd64.deb
eac110517496f3d2bdf04a801fcb5586 88212 libs standard libgssrpc4_1.10.1+dfsg-5+deb7u7_amd64.deb
3a0189ed2b5fe78229fc9ba56fd4973b 85546 libs standard libkadm5srv-mit8_1.10.1+dfsg-5+deb7u7_amd64.deb
aa4bae65d5b67ae014c75d0456a82928 68748 libs standard libkadm5clnt-mit8_1.10.1+dfsg-5+deb7u7_amd64.deb
aa4df70b1e455e9a3af268104cacbb0c 113270 libs standard libk5crypto3_1.10.1+dfsg-5+deb7u7_amd64.deb
0b688a07a3620c3b77fff4c48b0f576e 67788 libs standard libkdb5-6_1.10.1+dfsg-5+deb7u7_amd64.deb
21cc2471859751abd9c2ef9365a0ee5f 50454 libs standard libkrb5support0_1.10.1+dfsg-5+deb7u7_amd64.deb
9afaa53ae62a15b2370ab21c251bfc8c 52684 net extra krb5-gss-samples_1.10.1+dfsg-5+deb7u7_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=NJWW
-----END PGP SIGNATURE-----