Update for krb5-1.15.2

diff --git a/README b/README
index a8eabd5ab9e2fcb6e778881fb13aa20c8fad51ba..02b83bb49ac814f1238200cb6bdc1e54998ad817 100644 (file)
--- a/README
+++ b/README
@@ -73,6 +73,52 @@ from using single-DES cryptosystems.  Among these is a configuration
 variable that enables "weak" enctypes, which defaults to "false"
 beginning with krb5-1.8.
 
+Major changes in 1.15.2 (2017-09-25)
+------------------------------------
+
+This is a bug fix release.
+
+* Fix a KDC denial of service vulnerability caused by unset status
+  strings [CVE-2017-11368]
+
+* Preserve GSS contexts on init/accept failure [CVE-2017-11462]
+
+* Fix kadm5 setkey operation with LDAP KDB module
+
+* Use a ten-second timeout after successful connection for HTTPS KDC
+  requests, as we do for TCP requests
+
+* Fix client null dereference when KDC offers encrypted challenge
+  without FAST
+
+* Ignore dotfiles when processing profile includedir directive
+
+* Improve documentation
+
+krb5-1.15.2 changes by ticket ID
+--------------------------------
+
+8557   Allow null outputs to gss_get_name_attribute()
+8559   Fix leaks in gss_inquire_cred_by_oid()
+8560   Force autoconf rebuild in maintainer rules
+8563   Ignore dotfiles in profile includedir
+8565   Fix krb5int_open_plugin_dirs() error handling
+8567   Bug in mslsa ccahe
+8573   Check for FAST in encrypted challenge client
+8576   Make RC4 string-to-key more robust
+8580   kinit fails for OTP users when using KdcProxy with both IPv4&6 DNS
+8581   Allow clock skew in krb5 gss_context_time()
+8584   Free GSS checksum data deterministically
+8585   Add aes-sha2 enctypes to aes family documentation
+8588   Fix kadm5.acl error reporting
+8589   setkey kadm5 operation does not work with LDAP KDB
+8593   Add aes-sha2 to default enctypes in docs
+8594   Clarify "all privileges" in kadm5.acl docs
+8598   Preserve GSS context on init/accept failure
+8599   Prevent KDC unset status assertion failures
+8600   Prevent null dereference with keyboard master key
+
+
 Major changes in 1.15.1 (2017-03-01)
 ------------------------------------
 
@@ -372,7 +418,9 @@ reports, suggestions, and valuable resources:
     Radoslav Bodo
     Sumit Bose
     Emmanuel Bouillon
+    Isaac Boukris
     Philip Brown
+    Samuel Cabrero
     Michael Calmer
     Andrea Campi
     Julien Chaffraix
@@ -441,6 +489,7 @@ reports, suggestions, and valuable resources:
     Pavel Jindra
     Brian Johannesmeyer
     Joel Johnson
+    Alexander Karaivanov
     Anders Kaseorg
     W. Trevor King
     Patrik Kis
@@ -453,6 +502,7 @@ reports, suggestions, and valuable resources:
     Todd Lipcon
     Oliver Loch
     Kevin Longfellow
+    Frank Lonigro
     Jon Looney
     Nuno Lopes
     Ryan Lynch
@@ -493,6 +543,7 @@ reports, suggestions, and valuable resources:
     Solly Ross
     Mike Roszkowski
     Guillaume Rousse
+    Joshua Schaeffer
     Andreas Schneider
     Tom Shaw
     Jim Shi

diff --git a/src/man/k5identity.man b/src/man/k5identity.man
index 48866b8e95215d4bc546ea791c78cceed5dfc83b..372374a55e4ff08071208f8f664a6b251b0e6d1b 100644 (file)
--- a/src/man/k5identity.man
+++ b/src/man/k5identity.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "K5IDENTITY" "5" " " "1.15.1" "MIT Kerberos"
+.TH "K5IDENTITY" "5" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 k5identity \- Kerberos V5 client principal selection rules
 .

diff --git a/src/man/k5login.man b/src/man/k5login.man
index f6a1706be8b6eadc01ee879c0a9c6b81b728b0a2..1f51871567cdc20365aea0fac39a8ca9f3abae3b 100644 (file)
--- a/src/man/k5login.man
+++ b/src/man/k5login.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "K5LOGIN" "5" " " "1.15.1" "MIT Kerberos"
+.TH "K5LOGIN" "5" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 k5login \- Kerberos V5 acl file for host access
 .

diff --git a/src/man/k5srvutil.man b/src/man/k5srvutil.man
index 066a99118f3b5c4d8651221065e68d6fc0910c1c..b0b7f99d30cad07cb78ec59f0969fdba9ce3efdf 100644 (file)
--- a/src/man/k5srvutil.man
+++ b/src/man/k5srvutil.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "K5SRVUTIL" "1" " " "1.15.1" "MIT Kerberos"
+.TH "K5SRVUTIL" "1" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 k5srvutil \- host key table (keytab) manipulation utility
 .

diff --git a/src/man/kadm5.acl.man b/src/man/kadm5.acl.man
index 25a237f368a212b938df8e6dafdd210dadcb9ab0..a51bca440617bca2f739069c2d556ceefc987df8 100644 (file)
--- a/src/man/kadm5.acl.man
+++ b/src/man/kadm5.acl.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADM5.ACL" "5" " " "1.15.1" "MIT Kerberos"
+.TH "KADM5.ACL" "5" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kadm5.acl \- Kerberos ACL file
 .

diff --git a/src/man/kadmin.man b/src/man/kadmin.man
index 5105eca28e76bb016972111509f5c7f82d5459b6..142d63a2a6d80745cc492362718260a4709c7fac 100644 (file)
--- a/src/man/kadmin.man
+++ b/src/man/kadmin.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADMIN" "1" " " "1.15.1" "MIT Kerberos"
+.TH "KADMIN" "1" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kadmin \- Kerberos V5 database administration program
 .

diff --git a/src/man/kadmind.man b/src/man/kadmind.man
index 65647f97c797e6174d44809d470b13d8e997d29b..e73c87b71d4bb22a2fbc73a4a3e929580482a842 100644 (file)
--- a/src/man/kadmind.man
+++ b/src/man/kadmind.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADMIND" "8" " " "1.15.1" "MIT Kerberos"
+.TH "KADMIND" "8" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kadmind \- KADM5 administration server
 .

diff --git a/src/man/kdb5_ldap_util.man b/src/man/kdb5_ldap_util.man
index 83591a70c12cce13ff8070c65104d41b5bc685c1..a1fb6d8bbb8ba91d5f59512adfe7f7403ac2c121 100644 (file)
--- a/src/man/kdb5_ldap_util.man
+++ b/src/man/kdb5_ldap_util.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDB5_LDAP_UTIL" "8" " " "1.15.1" "MIT Kerberos"
+.TH "KDB5_LDAP_UTIL" "8" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kdb5_ldap_util \- Kerberos configuration utility
 .

diff --git a/src/man/kdb5_util.man b/src/man/kdb5_util.man
index cb637cbb0015ae8bee6952713331ea7a27c12e12..a7471a8e0616dd80cc1e2307dc5d03f815e6680f 100644 (file)
--- a/src/man/kdb5_util.man
+++ b/src/man/kdb5_util.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDB5_UTIL" "8" " " "1.15.1" "MIT Kerberos"
+.TH "KDB5_UTIL" "8" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kdb5_util \- Kerberos database maintenance utility
 .

diff --git a/src/man/kdc.conf.man b/src/man/kdc.conf.man
index 1744af3f6d7dab2e84dd0b4b6abab2cbcae40d76..d207ebd7f8cb2281154f90a0f48e9a8a6b7f6be3 100644 (file)
--- a/src/man/kdc.conf.man
+++ b/src/man/kdc.conf.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDC.CONF" "5" " " "1.15.1" "MIT Kerberos"
+.TH "KDC.CONF" "5" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kdc.conf \- Kerberos V5 KDC configuration file
 .

diff --git a/src/man/kdestroy.man b/src/man/kdestroy.man
index 47e1e369423e4cc953272f717d45d18397c2c4a9..7d2e511b42a3a01d5e5d8bafb539f4d391a8e444 100644 (file)
--- a/src/man/kdestroy.man
+++ b/src/man/kdestroy.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDESTROY" "1" " " "1.15.1" "MIT Kerberos"
+.TH "KDESTROY" "1" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kdestroy \- destroy Kerberos tickets
 .

diff --git a/src/man/kinit.man b/src/man/kinit.man
index e257bd25ef916ca9899b51cfea3e2b2f160ba2e0..30dbb58616ee9612ae534797ef9a5d91c4369595 100644 (file)
--- a/src/man/kinit.man
+++ b/src/man/kinit.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KINIT" "1" " " "1.15.1" "MIT Kerberos"
+.TH "KINIT" "1" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kinit \- obtain and cache Kerberos ticket-granting ticket
 .

diff --git a/src/man/klist.man b/src/man/klist.man
index 3080640dd97dad18b9b8dddb8aecf9a0edc53ecc..a30400cf0d2af2b2a1f4f9ba77a14d2fed4ad73f 100644 (file)
--- a/src/man/klist.man
+++ b/src/man/klist.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KLIST" "1" " " "1.15.1" "MIT Kerberos"
+.TH "KLIST" "1" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 klist \- list cached Kerberos tickets
 .

diff --git a/src/man/kpasswd.man b/src/man/kpasswd.man
index b7bb0a32fc5a4cb926c3a3cf2d8682eb89da4f9b..97fb7197287b5785920dabd8d169b05f9df9003a 100644 (file)
--- a/src/man/kpasswd.man
+++ b/src/man/kpasswd.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPASSWD" "1" " " "1.15.1" "MIT Kerberos"
+.TH "KPASSWD" "1" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kpasswd \- change a user's Kerberos password
 .

diff --git a/src/man/kprop.man b/src/man/kprop.man
index 9d3e2033c38c6fde3474d3cae33a4ab33e18650d..2b2e18e58028dcdd9c5cb757bcb0864c7f731bb8 100644 (file)
--- a/src/man/kprop.man
+++ b/src/man/kprop.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPROP" "8" " " "1.15.1" "MIT Kerberos"
+.TH "KPROP" "8" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kprop \- propagate a Kerberos V5 principal database to a slave server
 .

diff --git a/src/man/kpropd.man b/src/man/kpropd.man
index 9048f8fd5d921b19eb61fc238109addf73a3ba78..c4a35533231c7d5450fdbf64fd77b563e266cfed 100644 (file)
--- a/src/man/kpropd.man
+++ b/src/man/kpropd.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPROPD" "8" " " "1.15.1" "MIT Kerberos"
+.TH "KPROPD" "8" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kpropd \- Kerberos V5 slave KDC update server
 .

diff --git a/src/man/kproplog.man b/src/man/kproplog.man
index eaf6a21954bc0e89a2140236cf1ceaae1ad99e41..d61741ec71adcc23f59e89912c7fde71cc5d5139 100644 (file)
--- a/src/man/kproplog.man
+++ b/src/man/kproplog.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPROPLOG" "8" " " "1.15.1" "MIT Kerberos"
+.TH "KPROPLOG" "8" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kproplog \- display the contents of the Kerberos principal update log
 .

diff --git a/src/man/krb5-config.man b/src/man/krb5-config.man
index c9d2724ac1bdc425e8faa998ee3bd75e235b3dc8..c524f2a7320963c963119d8b8fef991ccb69ef06 100644 (file)
--- a/src/man/krb5-config.man
+++ b/src/man/krb5-config.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5-CONFIG" "1" " " "1.15.1" "MIT Kerberos"
+.TH "KRB5-CONFIG" "1" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 krb5-config \- tool for linking against MIT Kerberos libraries
 .

diff --git a/src/man/krb5.conf.man b/src/man/krb5.conf.man
index 692475977fff7f54462704ba86440a93b1614d7d..66394634ff105399c484007c10ced592204d3c97 100644 (file)
--- a/src/man/krb5.conf.man
+++ b/src/man/krb5.conf.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5.CONF" "5" " " "1.15.1" "MIT Kerberos"
+.TH "KRB5.CONF" "5" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 krb5.conf \- Kerberos configuration file
 .

diff --git a/src/man/krb5kdc.man b/src/man/krb5kdc.man
index 873014650b27a9ab02ca0c4711e5f2ff264f5f6b..efb52b12f5724334bf969d67c2a8ce8c82edb086 100644 (file)
--- a/src/man/krb5kdc.man
+++ b/src/man/krb5kdc.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5KDC" "8" " " "1.15.1" "MIT Kerberos"
+.TH "KRB5KDC" "8" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 krb5kdc \- Kerberos V5 KDC
 .

diff --git a/src/man/ksu.man b/src/man/ksu.man
index 2a0328e8435c0f4d758fb58cac73ecc89b1b1bb8..df59e8f48da2898072d8dd016ff36f88cd2d8a0a 100644 (file)
--- a/src/man/ksu.man
+++ b/src/man/ksu.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KSU" "1" " " "1.15.1" "MIT Kerberos"
+.TH "KSU" "1" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 ksu \- Kerberized super-user
 .

diff --git a/src/man/kswitch.man b/src/man/kswitch.man
index d8d925cbceac967139c79b894e4491faf08f9106..afe046f91bfbbf9b5ade616307aa9e5e80df181c 100644 (file)
--- a/src/man/kswitch.man
+++ b/src/man/kswitch.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KSWITCH" "1" " " "1.15.1" "MIT Kerberos"
+.TH "KSWITCH" "1" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kswitch \- switch primary ticket cache
 .

diff --git a/src/man/ktutil.man b/src/man/ktutil.man
index 6a119e7550ad70cf3294b64c5c4cca2edec343a8..1cbcba22c8df667116ea3956f68e1c7b6868fa4c 100644 (file)
--- a/src/man/ktutil.man
+++ b/src/man/ktutil.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KTUTIL" "1" " " "1.15.1" "MIT Kerberos"
+.TH "KTUTIL" "1" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 ktutil \- Kerberos keytab file maintenance utility
 .

diff --git a/src/man/kvno.man b/src/man/kvno.man
index 4d510ca51f211a22404a9226407b9eeb1776eade..441ebb9d462a449e38c58e84ce6544a172dde619 100644 (file)
--- a/src/man/kvno.man
+++ b/src/man/kvno.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KVNO" "1" " " "1.15.1" "MIT Kerberos"
+.TH "KVNO" "1" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 kvno \- print key version numbers of Kerberos principals
 .

diff --git a/src/man/sclient.man b/src/man/sclient.man
index 1d5c4c5e704822bcb511ea98b8de1cc35a4500ee..42434a6310827d0918b9c9d7e61b6517f4fd394b 100644 (file)
--- a/src/man/sclient.man
+++ b/src/man/sclient.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SCLIENT" "1" " " "1.15.1" "MIT Kerberos"
+.TH "SCLIENT" "1" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 sclient \- sample Kerberos version 5 client
 .

diff --git a/src/man/sserver.man b/src/man/sserver.man
index 514128018c36043de1d6db1e3744ec473b65fe1a..2d975ba4ecf9a4eab98562914a16beaec4dac32d 100644 (file)
--- a/src/man/sserver.man
+++ b/src/man/sserver.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SSERVER" "8" " " "1.15.1" "MIT Kerberos"
+.TH "SSERVER" "8" " " "1.15.2" "MIT Kerberos"
 .SH NAME
 sserver \- sample Kerberos version 5 server
 .

diff --git a/src/patchlevel.h b/src/patchlevel.h
index 30a8afa64289808368663eb9d54d30e1df711a51..d09c992799c4b9cef74ff3eedfe3db576e3ddf99 100644 (file)
--- a/src/patchlevel.h
+++ b/src/patchlevel.h
@@ -51,7 +51,7 @@
  */
 #define KRB5_MAJOR_RELEASE 1
 #define KRB5_MINOR_RELEASE 15
-#define KRB5_PATCHLEVEL 1
-#define KRB5_RELTAIL "postrelease"
+#define KRB5_PATCHLEVEL 2
+/* #undef KRB5_RELTAIL */
 /* #undef KRB5_RELDATE */
-#define KRB5_RELTAG "krb5-1.15"
+#define KRB5_RELTAG "krb5-1.15.2-final"

diff --git a/src/po/mit-krb5.pot b/src/po/mit-krb5.pot
index 475188587e541dccc40118915362ac949886c007..446d325a79497fedacbc92af5cae5211366e05d6 100644 (file)
--- a/src/po/mit-krb5.pot
+++ b/src/po/mit-krb5.pot
@@ -6,9 +6,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: mit-krb5 1.15.1-postrelease\n"
+"Project-Id-Version: mit-krb5 1.15.2\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-09-25 11:44-0400\n"
+"POT-Creation-Date: 2017-09-25 12:24-0400\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"