lp://staging/~hartmans/ubuntu/trusty/krb5/gss-infinite-loop

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #1326500: libgssapi-krb5-2: segfault when mechglue loops endlessly on call to gss_add_cred_from	High	Fix Released
Bug #1334052: package libkadm5srv-mit8 1.10.1+dfsg-6.1ubuntu1 failed to install/upgrade: libkadm5srv-mit8:all 1.12+dfsg-2ubuntu4 (Multi-Arch: no) kann nicht zusammen mit libkadm5srv-mit8 installiert werden, welches mehrere installierte Instanzen hat	High	Fix Released
Bug #1347147: krb5 database operations enter infinite loop	High	Fix Released

Link a bug report

Related blueprints

63. By Sam Hartman on 2014-08-12

* SECURITY UPDATE: denial of service via invalid tokens
  - debian/patches/CVE-2014-4341-4342.patch: handle invalid tokens in
    src/lib/gssapi/krb5/k5unseal.c, src/lib/gssapi/krb5/k5unsealiov.c.
  - CVE-2014-4341
  - CVE-2014-4342
* SECURITY UPDATE: denial of service via double-free in SPNEGO
  - debian/patches/CVE-2014-4343.patch: fix double-free in
    src/lib/gssapi/spnego/spnego_mech.c.
  - CVE-2014-4343
* SECURITY UPDATE: denial of service via null deref in SPNEGO acceptor
  - debian/patches/CVE-2014-4344.patch: validate REMAIN in
    src/lib/gssapi/spnego/spnego_mech.c.
  - CVE-2014-4344
* SECURITY UPDATE: denial of service and possible code execution in
  kadmind with LDAP backend
  - debian/patches/CVE-2014-4345.patch: fix off-by-one in
    src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c
  - CVE-2014-4345

62. By Sam Hartman on 2014-07-31

Use tailq macros to work around GCC 4.8 optimizer bug and prevent
infinite loop for database propagation (LP: #1347147)

61. By Sam Hartman on 2014-06-25

Make libkadm5srv-mit8 be arch: any multi-arch: same to work around
upgrade bug (LP: #1334052

60. By Sam Hartman on 2014-06-04

Fix segfault in infinite loop for GSS mechglue methods.

59. By Michael Vogt on 2014-04-09

Add transitional libkadm5srv-mit8 package to help libapt
calculating the upgrade (LP: #1304403) to trusty.
This transitional package can be dropped once trusty is
released.

58. By Martin Pitt on 2014-04-08

Add missing versioned Replaces: libkadm5srv-mit8 to the libkdb5-7 package.
Fixes upgrades from trusty. (LP: #1304403)

57. By Adam Conrad on 2014-02-17

debian/rules: force -O2 to work around build failure with -O3.

56. By Timo Aaltonen on 2014-02-04

* Merge from Debian unstable. Remaining changes:
  - Add alternate dependency on libverto-libevent1 as that's the
    package ABI name in ubuntu.

55. By Dimitri John Ledkov on 2013-11-10

Add alternate dependency on libverto-libevent1 as that's the package
ABI name in ubuntu.

54. By Matthias Klose on 2013-07-23

Update config.{guess,sub} for Aarch64.