-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 27 Jun 2024 11:54:54 -0600
Source: krb5
Architecture: source
Version: 1.21.3-1
Distribution: unstable
Urgency: high
Maintainer: Sam Hartman <hartmans@debian.org>
Changed-By: Sam Hartman <hartmans@debian.org>
Closes: 1067610
Changes:
krb5 (1.21.3-1) unstable; urgency=high
.
* New Upstream version
- CVE-2024-37370: an unauthenticated attacker can modify the
extra count in an RFC 4121 GSS token, causing the token to appear
truncated.
- CVE-2024-37371: an attacker can cause invalid memory reads by
sending an invalid GSS token.
* Drop doxygen work around patch: applied upstream
* Fix Python 3.12 tests: replace ssl.wrap_socket, Closes: #1067610
Checksums-Sha1:
7ba9b62fb92b80e9e2ce9eec7ae8f990311b0fbb 3349 krb5_1.21.3-1.dsc
3e383bbe88cbed56bdad4ba655c40abf0e961cf7 9136145 krb5_1.21.3.orig.tar.gz
bba46878ffc67fcd96821cd7b8f451b5b1b2f475 833 krb5_1.21.3.orig.tar.gz.asc
38b3cc0c755271112231eb3a9749003ea33af774 103240 krb5_1.21.3-1.debian.tar.xz
69e09fa700c6907afafa9d4ad6650258787e7573 5010 krb5_1.21.3-1_source.buildinfo
Checksums-Sha256:
e98e73700f2624bc51d53887c3260e35f28d72f0434b27ec37382b0c9736d5a7 3349 krb5_1.21.3-1.dsc
b7a4cd5ead67fb08b980b21abd150ff7217e85ea320c9ed0c6dadd304840ad35 9136145 krb5_1.21.3.orig.tar.gz
85047c935fe949ef2e275885451b168557b923dd13a5aab0ef8fe6acd27b94d7 833 krb5_1.21.3.orig.tar.gz.asc
f34037592e652dbf9765062abcadac5b89eae050f877069530535b86aca61821 103240 krb5_1.21.3-1.debian.tar.xz
58ec5ec37c4e1f68a361184e72c954605a8b75a2ec3b666bcf1394ee21a3b753 5010 krb5_1.21.3-1_source.buildinfo
Files:
9d1228d154d9fd10015a0467d69e0bdc 3349 net optional krb5_1.21.3-1.dsc
beb34d1dfc72ba0571ce72bed03e06eb 9136145 net optional krb5_1.21.3.orig.tar.gz
cc604e5e51a7c3c314751c68c0cd5a09 833 net optional krb5_1.21.3.orig.tar.gz.asc
3a1e35ef739e6793d84a6fbc87427836 103240 net optional krb5_1.21.3-1.debian.tar.xz
41e4a1dc5e0b53c9098e59efa4a7b65f 5010 net optional krb5_1.21.3-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQSj2jRwbAdKzGY/4uAsbEw8qDeGdAUCZn2oLwAKCRAsbEw8qDeG
dJT0AP95sJyeQuSUOR6UmcAb/d0GvcPEK6M9lmKiGvZREyYbmAD/b6LK0TlQSzWr
O34ABVXofzDpPTave4ebtwrFaxWnswg=
=vyw5
-----END PGP SIGNATURE-----
Attachment:
pgpAgfFUxXhDd.pgp
Description: PGP signature