Update for krb5-1.19.2

diff --git a/README b/README
index dbec58359fd8383e1c8ba77f912cd2561bfe18da..af664943ad4bf7123ab9ed083f92f823a731cb37 100644 (file)
--- a/README
+++ b/README
@@ -75,6 +75,29 @@ default and eventually removed.
 Beginning with the krb5-1.18 release, single-DES encryption types have
 been removed.
 
+Major changes in 1.19.2 (2021-07-22)
+------------------------------------
+
+This is a bug fix release.
+
+* Fix a denial of service attack against the KDC encrypted challenge
+  code [CVE-2021-36222].
+
+* Fix a memory leak when gss_inquire_cred() is called without a
+  credential handle.
+
+krb5-1.19.2 changes by ticket ID
+--------------------------------
+
+8989    Fix typo in enctypes.rst
+8992    Avoid rand() in aes-gen test program
+9005    Fix argument type errors on Windows
+9006    doc build fails with Sphinx 4.0.2
+9007    Fix KDC null deref on bad encrypted challenge
+9014    Using locking in MEMORY krb5_cc_get_principal()
+9015    Fix use-after-free during krad remote_shutdown()
+9016    Memory leak in krb5_gss_inquire_cred
+
 Major changes in 1.19.1 (2021-02-18)
 ------------------------------------
 
@@ -329,6 +352,7 @@ reports, suggestions, and valuable resources:
     Sumit Bose
     Emmanuel Bouillon
     Isaac Boukris
+    Pavel Březina
     Philip Brown
     Samuel Cabrero
     Michael Calmer
@@ -423,6 +447,7 @@ reports, suggestions, and valuable resources:
     Patrik Kis
     Martin Kittel
     Thomas Klausner
+    Tomasz Kłoczko
     Matthew Krupcale
     Mikkel Kruse
     Reinhard Kugler
@@ -508,12 +533,14 @@ reports, suggestions, and valuable resources:
     Michael Ströder
     Bjørn Tore Sund
     Ondřej Surý
+    Joseph Sutton
     Joe Travaglini
     Sergei Trofimovich
     Greg Troxel
     Tim Uglow
     Rathor Vipin
     Denis Vlasenko
+    Thomas Wagner
     Jorgen Wahlsten
     Stef Walter
     Max (Weijun) Wang

diff --git a/src/man/k5identity.man b/src/man/k5identity.man
index 651e6ed815aad02141528007d75b321fe5693c10..ef61e308e14088465f830757e8d139fa1088686a 100644 (file)
--- a/src/man/k5identity.man
+++ b/src/man/k5identity.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "K5IDENTITY" "5" " " "1.19.1" "MIT Kerberos"
+.TH "K5IDENTITY" "5" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 k5identity \- Kerberos V5 client principal selection rules
 .

diff --git a/src/man/k5login.man b/src/man/k5login.man
index 4c314fb405d899740fc12168c1fe9f76342e79ce..331bd110a2e7482711e94b95f5ff4973061d00ef 100644 (file)
--- a/src/man/k5login.man
+++ b/src/man/k5login.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "K5LOGIN" "5" " " "1.19.1" "MIT Kerberos"
+.TH "K5LOGIN" "5" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 k5login \- Kerberos V5 acl file for host access
 .

diff --git a/src/man/k5srvutil.man b/src/man/k5srvutil.man
index daa89882c5d7c6b8e94251bb5feb1ac73eb3da72..c4553c44ae8f56b73599527914069a51758297d3 100644 (file)
--- a/src/man/k5srvutil.man
+++ b/src/man/k5srvutil.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "K5SRVUTIL" "1" " " "1.19.1" "MIT Kerberos"
+.TH "K5SRVUTIL" "1" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 k5srvutil \- host key table (keytab) manipulation utility
 .

diff --git a/src/man/kadm5.acl.man b/src/man/kadm5.acl.man
index c8dbd97919da634916bf76bbcf9bb13bcce3fa94..031ece6181b6a8c45fc55606cdb57b6d5a41a07a 100644 (file)
--- a/src/man/kadm5.acl.man
+++ b/src/man/kadm5.acl.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADM5.ACL" "5" " " "1.19.1" "MIT Kerberos"
+.TH "KADM5.ACL" "5" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kadm5.acl \- Kerberos ACL file
 .

diff --git a/src/man/kadmin.man b/src/man/kadmin.man
index 6ca75088b1f6529c955e45159019ec9abdfeaa9b..a42a9870581aea292d40422d0c236a0206b9ebb3 100644 (file)
--- a/src/man/kadmin.man
+++ b/src/man/kadmin.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADMIN" "1" " " "1.19.1" "MIT Kerberos"
+.TH "KADMIN" "1" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kadmin \- Kerberos V5 database administration program
 .

diff --git a/src/man/kadmind.man b/src/man/kadmind.man
index 1ea3b3d53860d15b3db0734648fcd964416cbf89..81991ca6cf3566dc25d713a8d6708dc9cdd7f082 100644 (file)
--- a/src/man/kadmind.man
+++ b/src/man/kadmind.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADMIND" "8" " " "1.19.1" "MIT Kerberos"
+.TH "KADMIND" "8" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kadmind \- KADM5 administration server
 .

diff --git a/src/man/kdb5_ldap_util.man b/src/man/kdb5_ldap_util.man
index 62ab464a164f6f7d967c45e5c470736763317e3b..9c8603e4274f5029fc71c38d11f18b1174bb8893 100644 (file)
--- a/src/man/kdb5_ldap_util.man
+++ b/src/man/kdb5_ldap_util.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDB5_LDAP_UTIL" "8" " " "1.19.1" "MIT Kerberos"
+.TH "KDB5_LDAP_UTIL" "8" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kdb5_ldap_util \- Kerberos configuration utility
 .

diff --git a/src/man/kdb5_util.man b/src/man/kdb5_util.man
index e56b4bb5294d0cdf6937e8359efc8ea78292b59a..a8244cb4d981907ee50c52e840a18ccbbabb6268 100644 (file)
--- a/src/man/kdb5_util.man
+++ b/src/man/kdb5_util.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDB5_UTIL" "8" " " "1.19.1" "MIT Kerberos"
+.TH "KDB5_UTIL" "8" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kdb5_util \- Kerberos database maintenance utility
 .

diff --git a/src/man/kdc.conf.man b/src/man/kdc.conf.man
index 371fd2d19dc1de42a259151b0f50913006bebf43..2a96357c264b5020d5b5b05a70bf38e2cc584099 100644 (file)
--- a/src/man/kdc.conf.man
+++ b/src/man/kdc.conf.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDC.CONF" "5" " " "1.19.1" "MIT Kerberos"
+.TH "KDC.CONF" "5" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kdc.conf \- Kerberos V5 KDC configuration file
 .

diff --git a/src/man/kdestroy.man b/src/man/kdestroy.man
index f4fb52e48d153b13cc149b97698d40b7904d3945..31af8299807ae3470cd5593222d0a64133a5095a 100644 (file)
--- a/src/man/kdestroy.man
+++ b/src/man/kdestroy.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDESTROY" "1" " " "1.19.1" "MIT Kerberos"
+.TH "KDESTROY" "1" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kdestroy \- destroy Kerberos tickets
 .

diff --git a/src/man/kerberos.man b/src/man/kerberos.man
index 704778ff38bae293b83826504bd3eee7fffd00da..e7b15c37ddfab09e838b717701cc50b8861f3b30 100644 (file)
--- a/src/man/kerberos.man
+++ b/src/man/kerberos.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KERBEROS" "7" " " "1.19.1" "MIT Kerberos"
+.TH "KERBEROS" "7" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kerberos \- Overview of using Kerberos
 .

diff --git a/src/man/kinit.man b/src/man/kinit.man
index 3b97af7599777e8c48005a4bb41910cbed9082c3..11451421e2ac501f5a120bf9345b199688f754d8 100644 (file)
--- a/src/man/kinit.man
+++ b/src/man/kinit.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KINIT" "1" " " "1.19.1" "MIT Kerberos"
+.TH "KINIT" "1" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kinit \- obtain and cache Kerberos ticket-granting ticket
 .

diff --git a/src/man/klist.man b/src/man/klist.man
index eedcbece0fb0f4a70a5aeeecbd26ff62d7d3e34a..2ffad8542f49a8d028d372b1d987d7fffd047f37 100644 (file)
--- a/src/man/klist.man
+++ b/src/man/klist.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KLIST" "1" " " "1.19.1" "MIT Kerberos"
+.TH "KLIST" "1" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 klist \- list cached Kerberos tickets
 .

diff --git a/src/man/kpasswd.man b/src/man/kpasswd.man
index 7c037e75fb12987acbcbc3976b24b9cf6b399bf7..0d902d5c8728574bdacc44b417a235fba4eaf903 100644 (file)
--- a/src/man/kpasswd.man
+++ b/src/man/kpasswd.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPASSWD" "1" " " "1.19.1" "MIT Kerberos"
+.TH "KPASSWD" "1" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kpasswd \- change a user's Kerberos password
 .

diff --git a/src/man/kprop.man b/src/man/kprop.man
index b6b6b98c20e0c95a0f979cba80aa59bfa18bc44c..578f876d0f6e425d8fa271574d4216644aac3837 100644 (file)
--- a/src/man/kprop.man
+++ b/src/man/kprop.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPROP" "8" " " "1.19.1" "MIT Kerberos"
+.TH "KPROP" "8" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kprop \- propagate a Kerberos V5 principal database to a replica server
 .

diff --git a/src/man/kpropd.man b/src/man/kpropd.man
index 79bddafdf696e1aa605666c3fd28b16e2b8c430b..400d906c4b65e601445472ec6026603f791cb0da 100644 (file)
--- a/src/man/kpropd.man
+++ b/src/man/kpropd.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPROPD" "8" " " "1.19.1" "MIT Kerberos"
+.TH "KPROPD" "8" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kpropd \- Kerberos V5 replica KDC update server
 .

diff --git a/src/man/kproplog.man b/src/man/kproplog.man
index e382e58aaa0ebfafa2c5dc68b5ec17201bd011dd..dc12a1097efed456e9637c49595be4d31f710cd9 100644 (file)
--- a/src/man/kproplog.man
+++ b/src/man/kproplog.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPROPLOG" "8" " " "1.19.1" "MIT Kerberos"
+.TH "KPROPLOG" "8" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kproplog \- display the contents of the Kerberos principal update log
 .

diff --git a/src/man/krb5-config.man b/src/man/krb5-config.man
index ac810059822c8efd259bcd1ff9a65666924da8b1..cf230b23dc828dc429c01b451344d69912569ed3 100644 (file)
--- a/src/man/krb5-config.man
+++ b/src/man/krb5-config.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5-CONFIG" "1" " " "1.19.1" "MIT Kerberos"
+.TH "KRB5-CONFIG" "1" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 krb5-config \- tool for linking against MIT Kerberos libraries
 .

diff --git a/src/man/krb5.conf.man b/src/man/krb5.conf.man
index 3a702ca8f746088ef249d1b00950853ab75d64b8..e993d5c09b28d7c1b02bf16ae56cbf244377ebfa 100644 (file)
--- a/src/man/krb5.conf.man
+++ b/src/man/krb5.conf.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5.CONF" "5" " " "1.19.1" "MIT Kerberos"
+.TH "KRB5.CONF" "5" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 krb5.conf \- Kerberos configuration file
 .

diff --git a/src/man/krb5kdc.man b/src/man/krb5kdc.man
index 9196a256686e55f0c6a55f6db7da1cca8eacd60b..a6ddc5e0c6ddbd12d48de163eb3c663def9284bd 100644 (file)
--- a/src/man/krb5kdc.man
+++ b/src/man/krb5kdc.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5KDC" "8" " " "1.19.1" "MIT Kerberos"
+.TH "KRB5KDC" "8" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 krb5kdc \- Kerberos V5 KDC
 .

diff --git a/src/man/ksu.man b/src/man/ksu.man
index 11769704fdd542d8b3d952665a4786be47d0d6ad..f1142cf0298a27a86a3283d07c4617b00177d49c 100644 (file)
--- a/src/man/ksu.man
+++ b/src/man/ksu.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KSU" "1" " " "1.19.1" "MIT Kerberos"
+.TH "KSU" "1" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 ksu \- Kerberized super-user
 .

diff --git a/src/man/kswitch.man b/src/man/kswitch.man
index 9d4f271029283f0e73d0e3899cb393b3f1705ed3..414789ff9ce42e77677c05f3173100b671b2cb35 100644 (file)
--- a/src/man/kswitch.man
+++ b/src/man/kswitch.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KSWITCH" "1" " " "1.19.1" "MIT Kerberos"
+.TH "KSWITCH" "1" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kswitch \- switch primary ticket cache
 .

diff --git a/src/man/ktutil.man b/src/man/ktutil.man
index eb340ab6c6eba78f8e2c3c532be581fa1a9b2d9c..a9e030148dd067c75a97d7f99d42adcdd6e8dbb6 100644 (file)
--- a/src/man/ktutil.man
+++ b/src/man/ktutil.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KTUTIL" "1" " " "1.19.1" "MIT Kerberos"
+.TH "KTUTIL" "1" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 ktutil \- Kerberos keytab file maintenance utility
 .

diff --git a/src/man/kvno.man b/src/man/kvno.man
index b8f44a39c985433a6e62eb5c0c205ced9056d4f2..0eb8494faafa8d6a0f0f8edde11ee64052ea0e9e 100644 (file)
--- a/src/man/kvno.man
+++ b/src/man/kvno.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KVNO" "1" " " "1.19.1" "MIT Kerberos"
+.TH "KVNO" "1" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 kvno \- print key version numbers of Kerberos principals
 .

diff --git a/src/man/sclient.man b/src/man/sclient.man
index 47ed5ab0645ca1d3917a2d00207370235ab0bd0d..e409070dbcc32a76199a5f0a4bc8e91d362d4956 100644 (file)
--- a/src/man/sclient.man
+++ b/src/man/sclient.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SCLIENT" "1" " " "1.19.1" "MIT Kerberos"
+.TH "SCLIENT" "1" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 sclient \- sample Kerberos version 5 client
 .

diff --git a/src/man/sserver.man b/src/man/sserver.man
index dac9fe97dac1c1f374772f4a23b237f29e857d5c..b36f51e999a1ef2e2372f08d7f26ca9aadf4070d 100644 (file)
--- a/src/man/sserver.man
+++ b/src/man/sserver.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SSERVER" "8" " " "1.19.1" "MIT Kerberos"
+.TH "SSERVER" "8" " " "1.19.2" "MIT Kerberos"
 .SH NAME
 sserver \- sample Kerberos version 5 server
 .

diff --git a/src/patchlevel.h b/src/patchlevel.h
index 3c24e178baf4d898b6f647b747c715e8f1087ca0..3d6f6b3283782d417f74561b01dcd53841219268 100644 (file)
--- a/src/patchlevel.h
+++ b/src/patchlevel.h
@@ -51,7 +51,7 @@
  */
 #define KRB5_MAJOR_RELEASE 1
 #define KRB5_MINOR_RELEASE 19
-#define KRB5_PATCHLEVEL 1
-#define KRB5_RELTAIL "postrelease"
+#define KRB5_PATCHLEVEL 2
+/* #undef KRB5_RELTAIL */
 /* #undef KRB5_RELDATE */
-#define KRB5_RELTAG "krb5-1.19"
+#define KRB5_RELTAG "krb5-1.19.2-final"

diff --git a/src/po/mit-krb5.pot b/src/po/mit-krb5.pot
index d74a77c160c86c176f97b1bdfb0904cae315dcf9..576ad92abc862bf665343e1bc392640283b453cf 100644 (file)
--- a/src/po/mit-krb5.pot
+++ b/src/po/mit-krb5.pot
@@ -6,9 +6,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: mit-krb5 1.19.1-postrelease\n"
+"Project-Id-Version: mit-krb5 1.19.2\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2021-07-21 19:49-0400\n"
+"POT-Creation-Date: 2021-07-22 00:36-0400\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"