Update for krb5-1.14.6

diff --git a/README b/README
index de06865109e9fda54c03ac975bb3c9f472f2cf4f..a423c04aacbbd88ec55ed55573e04856497fa1b3 100644 (file)
--- a/README
+++ b/README
@@ -74,6 +74,44 @@ variable that enables "weak" enctypes, which defaults to "false"
 beginning with krb5-1.8.
 
 
+Major changes in 1.14.6 (2017-09-25)
+------------------------------------
+
+This is a bug fix release.
+
+* Fix a KDC denial of service vulnerability caused by unset status
+  strings [CVE-2017-11368]
+
+* Preserve GSS contexts on init/accept failure [CVE-2017-11462]
+
+* Fix kadm5 setkey operation with LDAP KDB module
+
+* Use a ten-second timeout after successful connection for HTTPS KDC
+  requests, as we do for TCP requests
+
+* Fix client null dereference when KDC offers encrypted challenge
+  without FAST
+
+krb5-1.14.6 changes by ticket ID
+--------------------------------
+
+8557   Allow null outputs to gss_get_name_attribute()
+8559   Fix leaks in gss_inquire_cred_by_oid()
+8560   Force autoconf rebuild in maintainer rules
+8565   Fix krb5int_open_plugin_dirs() error handling
+8567   Bug in mslsa ccahe
+8573   Check for FAST in encrypted challenge client
+8576   Make RC4 string-to-key more robust
+8580   kinit fails for OTP users when using KdcProxy with both IPv4&6 DNS
+8581   Allow clock skew in krb5 gss_context_time()
+8584   Free GSS checksum data deterministically
+8588   Fix kadm5.acl error reporting
+8589   setkey kadm5 operation does not work with LDAP KDB
+8598   Preserve GSS context on init/accept failure
+8599   Prevent KDC unset status assertion failures
+8600   Prevent null dereference with keyboard master key
+
+
 Major changes in 1.14.5 (2017-03-02)
 ------------------------------------
 
@@ -583,7 +621,9 @@ reports, suggestions, and valuable resources:
     Radoslav Bodo
     Sumit Bose
     Emmanuel Bouillon
+    Isaac Boukris
     Philip Brown
+    Samuel Cabrero
     Michael Calmer
     Andrea Campi
     Julien Chaffraix
@@ -652,9 +692,11 @@ reports, suggestions, and valuable resources:
     Pavel Jindra
     Brian Johannesmeyer
     Joel Johnson
+    Alexander Karaivanov
     Anders Kaseorg
     W. Trevor King
     Patrik Kis
+    Martin Kittel
     Mikkel Kruse
     Reinhard Kugler
     Tomas Kuthan
@@ -664,6 +706,7 @@ reports, suggestions, and valuable resources:
     Todd Lipcon
     Oliver Loch
     Kevin Longfellow
+    Frank Lonigro
     Jon Looney
     Nuno Lopes
     Ryan Lynch
@@ -704,6 +747,7 @@ reports, suggestions, and valuable resources:
     Solly Ross
     Mike Roszkowski
     Guillaume Rousse
+    Joshua Schaeffer
     Andreas Schneider
     Tom Shaw
     Jim Shi

diff --git a/src/man/k5identity.man b/src/man/k5identity.man
index b4cdf57ecdbaf0710e184a78726fd8a79bc90e2c..044b49b47a34d64acc95d380f0889efb96243601 100644 (file)
--- a/src/man/k5identity.man
+++ b/src/man/k5identity.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "K5IDENTITY" "5" " " "1.14.5" "MIT Kerberos"
+.TH "K5IDENTITY" "5" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 k5identity \- Kerberos V5 client principal selection rules
 .

diff --git a/src/man/k5login.man b/src/man/k5login.man
index 8006bf5b1595b7866c708ba2a7676a179e58b1a4..c617a900167b43172236aa7f29449752bee79a49 100644 (file)
--- a/src/man/k5login.man
+++ b/src/man/k5login.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "K5LOGIN" "5" " " "1.14.5" "MIT Kerberos"
+.TH "K5LOGIN" "5" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 k5login \- Kerberos V5 acl file for host access
 .

diff --git a/src/man/k5srvutil.man b/src/man/k5srvutil.man
index 9d83fc50d1b173ce0320debe8587c4e7b7ba46a3..bcce25a9b15aa9e1477a939b02961a112aa55b28 100644 (file)
--- a/src/man/k5srvutil.man
+++ b/src/man/k5srvutil.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "K5SRVUTIL" "1" " " "1.14.5" "MIT Kerberos"
+.TH "K5SRVUTIL" "1" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 k5srvutil \- host key table (keytab) manipulation utility
 .

diff --git a/src/man/kadm5.acl.man b/src/man/kadm5.acl.man
index cfaa5e8b6aac716b9dd40b6e2a0d6a154992d3fc..983a554a6c95431b3b7a785b73c6672083072ac7 100644 (file)
--- a/src/man/kadm5.acl.man
+++ b/src/man/kadm5.acl.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADM5.ACL" "5" " " "1.14.5" "MIT Kerberos"
+.TH "KADM5.ACL" "5" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kadm5.acl \- Kerberos ACL file
 .

diff --git a/src/man/kadmin.man b/src/man/kadmin.man
index 777d75c4305b14c260013efefb4f5c3eefba69b2..f405be2ac30c4f2d80729676bc7d56b5dad0c757 100644 (file)
--- a/src/man/kadmin.man
+++ b/src/man/kadmin.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADMIN" "1" " " "1.14.5" "MIT Kerberos"
+.TH "KADMIN" "1" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kadmin \- Kerberos V5 database administration program
 .

diff --git a/src/man/kadmind.man b/src/man/kadmind.man
index 1d8747b54166e8ade5eaeb39921eb80b9f3035f8..cd7e024eae3e00d815c4df253217c8da784fec57 100644 (file)
--- a/src/man/kadmind.man
+++ b/src/man/kadmind.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADMIND" "8" " " "1.14.5" "MIT Kerberos"
+.TH "KADMIND" "8" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kadmind \- KADM5 administration server
 .

diff --git a/src/man/kdb5_ldap_util.man b/src/man/kdb5_ldap_util.man
index e55e18a06612d035c819af9eadc47f2bee1444ea..90be472d7c0e19ae114f6e31dedb999f81a1ba6c 100644 (file)
--- a/src/man/kdb5_ldap_util.man
+++ b/src/man/kdb5_ldap_util.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDB5_LDAP_UTIL" "8" " " "1.14.5" "MIT Kerberos"
+.TH "KDB5_LDAP_UTIL" "8" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kdb5_ldap_util \- Kerberos configuration utility
 .

diff --git a/src/man/kdb5_util.man b/src/man/kdb5_util.man
index 73a3a3b162cf4ed682625ccf775d8cba71f14bb4..e4d1b634f54bcd7b0cd05784ca8999a752aaa2c6 100644 (file)
--- a/src/man/kdb5_util.man
+++ b/src/man/kdb5_util.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDB5_UTIL" "8" " " "1.14.5" "MIT Kerberos"
+.TH "KDB5_UTIL" "8" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kdb5_util \- Kerberos database maintenance utility
 .

diff --git a/src/man/kdc.conf.man b/src/man/kdc.conf.man
index 3d05e90fba19af7c512d7fc19a0fdbb180c07265..05e3ad3f9c12b39db8f539614ba925fa2c42df2a 100644 (file)
--- a/src/man/kdc.conf.man
+++ b/src/man/kdc.conf.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDC.CONF" "5" " " "1.14.5" "MIT Kerberos"
+.TH "KDC.CONF" "5" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kdc.conf \- Kerberos V5 KDC configuration file
 .

diff --git a/src/man/kdestroy.man b/src/man/kdestroy.man
index be062622facf7edfef8aa12f7f6d852b27fc6c67..7c4aff1092c5ba1460def5ad4a858d2411cb9fd3 100644 (file)
--- a/src/man/kdestroy.man
+++ b/src/man/kdestroy.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDESTROY" "1" " " "1.14.5" "MIT Kerberos"
+.TH "KDESTROY" "1" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kdestroy \- destroy Kerberos tickets
 .

diff --git a/src/man/kinit.man b/src/man/kinit.man
index d5386b44b6f6a3584b63d152b284f040f67604f5..bcad8934f4602e2d1a68a6e4ae3784022555740f 100644 (file)
--- a/src/man/kinit.man
+++ b/src/man/kinit.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KINIT" "1" " " "1.14.5" "MIT Kerberos"
+.TH "KINIT" "1" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kinit \- obtain and cache Kerberos ticket-granting ticket
 .

diff --git a/src/man/klist.man b/src/man/klist.man
index f7c2c91028a3c7e9a907e999e6198b7fba37609a..8cf562098785fd7565a8b243cee43b7a22c74e57 100644 (file)
--- a/src/man/klist.man
+++ b/src/man/klist.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KLIST" "1" " " "1.14.5" "MIT Kerberos"
+.TH "KLIST" "1" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 klist \- list cached Kerberos tickets
 .

diff --git a/src/man/kpasswd.man b/src/man/kpasswd.man
index ea5a66a563b9b03619b716883f06448308aec857..ed98f60fd8a43aed950150af99af42c7c49e6b34 100644 (file)
--- a/src/man/kpasswd.man
+++ b/src/man/kpasswd.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPASSWD" "1" " " "1.14.5" "MIT Kerberos"
+.TH "KPASSWD" "1" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kpasswd \- change a user's Kerberos password
 .

diff --git a/src/man/kprop.man b/src/man/kprop.man
index d37a7249fe8b9732e25b8cf6c3a11e5b134f21c0..f79ed05df3dbbd1935befbafa4e2818547ee5c8b 100644 (file)
--- a/src/man/kprop.man
+++ b/src/man/kprop.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPROP" "8" " " "1.14.5" "MIT Kerberos"
+.TH "KPROP" "8" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kprop \- propagate a Kerberos V5 principal database to a slave server
 .

diff --git a/src/man/kpropd.man b/src/man/kpropd.man
index 9c54aec5ac2d672182d23859b791c2a2a96bd562..e95aca7c25b73b2d3267cf2a2d41ed4b9574a54c 100644 (file)
--- a/src/man/kpropd.man
+++ b/src/man/kpropd.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPROPD" "8" " " "1.14.5" "MIT Kerberos"
+.TH "KPROPD" "8" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kpropd \- Kerberos V5 slave KDC update server
 .

diff --git a/src/man/kproplog.man b/src/man/kproplog.man
index 9b38c64054a46caa2040878d658e7c55aab6f17e..31b129cf6b5c6b7ba46dce23fb841cbc87cfb15d 100644 (file)
--- a/src/man/kproplog.man
+++ b/src/man/kproplog.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPROPLOG" "8" " " "1.14.5" "MIT Kerberos"
+.TH "KPROPLOG" "8" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kproplog \- display the contents of the Kerberos principal update log
 .

diff --git a/src/man/krb5-config.man b/src/man/krb5-config.man
index 8bfb942152c1f71a7490927b032aa542da874a73..69b7b8313fa18f98989bbfdcac14689e1377a1fd 100644 (file)
--- a/src/man/krb5-config.man
+++ b/src/man/krb5-config.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5-CONFIG" "1" " " "1.14.5" "MIT Kerberos"
+.TH "KRB5-CONFIG" "1" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 krb5-config \- tool for linking against MIT Kerberos libraries
 .

diff --git a/src/man/krb5.conf.man b/src/man/krb5.conf.man
index 30f5ac3508de625f62e2e81e20fa2ee0a0b48e22..50dc3f10ebd507ac58d4bb1d6e909053d0cba519 100644 (file)
--- a/src/man/krb5.conf.man
+++ b/src/man/krb5.conf.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5.CONF" "5" " " "1.14.5" "MIT Kerberos"
+.TH "KRB5.CONF" "5" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 krb5.conf \- Kerberos configuration file
 .

diff --git a/src/man/krb5kdc.man b/src/man/krb5kdc.man
index 0b22ef3a53c4343011c8b2a3e45dfef6aa572846..a9d1b85c0835ed1b3cfb513a84858035536b85cb 100644 (file)
--- a/src/man/krb5kdc.man
+++ b/src/man/krb5kdc.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5KDC" "8" " " "1.14.5" "MIT Kerberos"
+.TH "KRB5KDC" "8" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 krb5kdc \- Kerberos V5 KDC
 .

diff --git a/src/man/ksu.man b/src/man/ksu.man
index d696d1b21deddb0307469cb0374ae32e9d34dee5..c9d972b7518d8c665188ab82a7dee97b52bf1f47 100644 (file)
--- a/src/man/ksu.man
+++ b/src/man/ksu.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KSU" "1" " " "1.14.5" "MIT Kerberos"
+.TH "KSU" "1" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 ksu \- Kerberized super-user
 .

diff --git a/src/man/kswitch.man b/src/man/kswitch.man
index eb26881fb6847a4d4f488dfc10017ba48da8d57e..56e338c9c191939a44eb944c3a015af9c862ace0 100644 (file)
--- a/src/man/kswitch.man
+++ b/src/man/kswitch.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KSWITCH" "1" " " "1.14.5" "MIT Kerberos"
+.TH "KSWITCH" "1" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kswitch \- switch primary ticket cache
 .

diff --git a/src/man/ktutil.man b/src/man/ktutil.man
index 62e745664b53741b2f150c1e36a5918649d73b79..d9257854129d1442680ff06ddb62aae6969e22c7 100644 (file)
--- a/src/man/ktutil.man
+++ b/src/man/ktutil.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KTUTIL" "1" " " "1.14.5" "MIT Kerberos"
+.TH "KTUTIL" "1" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 ktutil \- Kerberos keytab file maintenance utility
 .

diff --git a/src/man/kvno.man b/src/man/kvno.man
index 7d2be083ac45f7ca9562123945478978a4f59feb..a299f903b88e0609e4e2f8572adf9baee153423a 100644 (file)
--- a/src/man/kvno.man
+++ b/src/man/kvno.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KVNO" "1" " " "1.14.5" "MIT Kerberos"
+.TH "KVNO" "1" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 kvno \- print key version numbers of Kerberos principals
 .

diff --git a/src/man/sclient.man b/src/man/sclient.man
index cb13e5d4ca3f08231f258c239545b39db80ef9ea..1ba5180a131d18a5b0debe713fac095680131e2e 100644 (file)
--- a/src/man/sclient.man
+++ b/src/man/sclient.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SCLIENT" "1" " " "1.14.5" "MIT Kerberos"
+.TH "SCLIENT" "1" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 sclient \- sample Kerberos version 5 client
 .

diff --git a/src/man/sserver.man b/src/man/sserver.man
index a4249466e918ed28fcac8394272aff2b482b19a1..617a1149dfb53093be0159a3d9a070c64e5c4d66 100644 (file)
--- a/src/man/sserver.man
+++ b/src/man/sserver.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SSERVER" "8" " " "1.14.5" "MIT Kerberos"
+.TH "SSERVER" "8" " " "1.14.6" "MIT Kerberos"
 .SH NAME
 sserver \- sample Kerberos version 5 server
 .

diff --git a/src/patchlevel.h b/src/patchlevel.h
index 4ac6e0026131f024fb92ce4c50922204231cae26..c501056da27f861544b03b823406f175af4c9ed5 100644 (file)
--- a/src/patchlevel.h
+++ b/src/patchlevel.h
@@ -51,7 +51,7 @@
  */
 #define KRB5_MAJOR_RELEASE 1
 #define KRB5_MINOR_RELEASE 14
-#define KRB5_PATCHLEVEL 5
-#define KRB5_RELTAIL "postrelease"
+#define KRB5_PATCHLEVEL 6
+/* #undef KRB5_RELTAIL */
 /* #undef KRB5_RELDATE */
-#define KRB5_RELTAG "krb5-1.14"
+#define KRB5_RELTAG "krb5-1.14.6-final"

diff --git a/src/po/mit-krb5.pot b/src/po/mit-krb5.pot
index 6bb2fb39c3629d861fb28b93af257540492b8af6..7bc324f5486e61568fa92c231759caa40cec4843 100644 (file)
--- a/src/po/mit-krb5.pot
+++ b/src/po/mit-krb5.pot
@@ -6,9 +6,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: mit-krb5 1.14.5-postrelease\n"
+"Project-Id-Version: mit-krb5 1.14.6\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-09-25 11:44-0400\n"
+"POT-Creation-Date: 2017-09-25 12:24-0400\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"