Kerberos announcements

Tom Yu | 8 Mar 22:35

Picon

krb5-1.10.1 is released


The MIT Kerberos Team announces the availability of MIT Kerberos 5
Release 1.10.1.  Please see below for a list of some major changes
included, or consult the README file in the source tree for a more
detailed list of significant changes.

RETRIEVING KERBEROS 5 RELEASE 1.10.1
====================================

You may retrieve the Kerberos 5 Release 1.10.1 source from the
following URL:

        http://web.mit.edu/kerberos/dist/

The homepage for the krb5-1.10.1 release is:

        http://web.mit.edu/kerberos/krb5-1.10/

Further information about Kerberos 5 may be found at the following
URL:

        http://web.mit.edu/kerberos/

and at the MIT Kerberos Consortium web site:

        http://www.kerberos.org/

DES transition
==============

(Continue reading)

Tom Yu | 7 Feb 05:19

Picon

krb5-1.8.6 is released


The MIT Kerberos Team announces the availability of MIT Kerberos 5
Release 1.8.6.  Please see below for a list of some major changes
included, or consult the README file in the source tree for a more
detailed list of significant changes.

RETRIEVING KERBEROS 5 RELEASE 1.8.6
===================================

You may retrieve the Kerberos 5 Release 1.8.6 source from the
following URL:

        http://web.mit.edu/kerberos/dist/

The homepage for the krb5-1.8.6 release is:

        http://web.mit.edu/kerberos/krb5-1.8/

Further information about Kerberos 5 may be found at the following
URL:

        http://web.mit.edu/kerberos/

and at the MIT Kerberos Consortium web site:

        http://www.kerberos.org/

DES transition
==============

(Continue reading)

Tom Yu | 7 Feb 04:34

Picon

krb5-1.9.3 is released


The MIT Kerberos Team announces the availability of MIT Kerberos 5
Release 1.9.3.  Please see below for a list of some major changes
included, or consult the README file in the source tree for a more
detailed list of significant changes.

RETRIEVING KERBEROS 5 RELEASE 1.9.3
===================================

You may retrieve the Kerberos 5 Release 1.9.3 source from the
following URL:

        http://web.mit.edu/kerberos/dist/

The homepage for the krb5-1.9.3 release is:

        http://web.mit.edu/kerberos/krb5-1.9/

Further information about Kerberos 5 may be found at the following
URL:

        http://web.mit.edu/kerberos/

and at the MIT Kerberos Consortium web site:

        http://www.kerberos.org/

DES transition
==============

(Continue reading)

Tom Yu | 27 Jan 22:55

Picon

krb5-1.10 is released


The MIT Kerberos Team announces the availability of MIT Kerberos 5
Release 1.10.  Please see below for a list of some major changes
included, or consult the README file in the source tree for a more
detailed list of significant changes.

RETRIEVING KERBEROS 5 RELEASE 1.10
==================================

You may retrieve the Kerberos 5 Release 1.10 source from the
following URL:

        http://web.mit.edu/kerberos/dist/

The homepage for the krb5-1.10 release is:

        http://web.mit.edu/kerberos/krb5-1.10/

Further information about Kerberos 5 may be found at the following
URL:

        http://web.mit.edu/kerberos/

and at the MIT Kerberos Consortium web site:

        http://www.kerberos.org/

DES transition
==============

(Continue reading)

ghudson | 27 Dec 18:24

Picon

krb5-appl-1.0.3 is released

Version 1.0.3 of the krb5-appl package has been released.  This
package contains the Kerberized versions of telnet, ftp, and the
rlogin suite.  The new release can be found at:

  http://web.mit.edu/kerberos/dist/

This is a security bugfix release, with the following change:

  * Fix MITKRB5-SA-2011-008 (CVE-2011-4862).

Tom Yu | 26 Dec 22:14

Picon

MITKRB5-SA-2011-008 buffer overflow in telnetd [CVE-2011-4862]


MITKRB5-SA-2011-008

MIT krb5 Security Advisory 2011-008
Original release: 2011-12-26
Last update: 2011-12-26

Topic: buffer overflow in telnetd

CVE-2011-4862

CVSSv2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C

CVSSv2 Base Score:      10

Access Vector:          Network
Access Complexity:      Low
Authentication:         None
Confidentiality Impact: Complete
Integrity Impact:       Complete
Availability Impact:    Complete

CVSSv2 Temporal Score:  8.3

Exploitability:         Functional
Remediation Level:      Official Fix
Report Confidence:      Confirmed

SUMMARY
=======

(Continue reading)

Tom Yu | 6 Dec 20:07

Picon

MITKRB5-SA-2011-007 KDC null pointer dereference in TGS handling [CVE-2011-1530]


MITKRB5-SA-2011-007

MIT krb5 Security Advisory 2011-007
Original release: 2011-12-06
Last update: 2011-12-06

Topic: KDC null pointer dereference in TGS handling

CVE-2011-1530
KDC null pointer dereference in TGS handling

CVSSv2 Vector:          AV:N/AC:L/Au:S/C:N/I:C/A:C/E:H/RL:OF/RC:C

CVSSv2 Base Score:      6.8

Access Vector:          Network
Access Complexity:      Low
Authentication:         Single
Confidentiality Impact: None
Integrity Impact:       None
Availability Impact:    Complete

CVSSv2 Temporal Score:  5.9

Exploitability:         High
Remediation Level:      Official Fix
Report Confidence:      Confirmed

SUMMARY

(Continue reading)

Tom Yu | 5 Nov 00:53

Picon

krb5-1.8.5 is released


The MIT Kerberos Team announces the availability of MIT Kerberos 5
Release 1.8.5.  Please see below for a list of some major changes
included, or consult the README file in the source tree for a more
detailed list of significant changes.

RETRIEVING KERBEROS 5 RELEASE 1.8.5
===================================

You may retrieve the Kerberos 5 Release 1.8.5 source from the
following URL:

        http://web.mit.edu/kerberos/dist/

The homepage for the krb5-1.8.5 release is:

        http://web.mit.edu/kerberos/krb5-1.8/

Further information about Kerberos 5 may be found at the following
URL:

        http://web.mit.edu/kerberos/

and at the MIT Kerberos Consortium web site:

        http://www.kerberos.org/

DES transition
==============

(Continue reading)

Tom Yu | 2 Nov 23:56

Picon

krb5-1.9.2 is released


The MIT Kerberos Team announces the availability of MIT Kerberos 5
Release 1.9.2.  Please see below for a list of some major changes
included, or consult the README file in the source tree for a more
detailed list of significant changes.

RETRIEVING KERBEROS 5 RELEASE 1.9.2
===================================

You may retrieve the Kerberos 5 Release 1.9.2 source from the
following URL:

        http://web.mit.edu/kerberos/dist/

The homepage for the krb5-1.9.2 release is:

        http://web.mit.edu/kerberos/krb5-1.9/

Further information about Kerberos 5 may be found at the following
URL:

        http://web.mit.edu/kerberos/

and at the MIT Kerberos Consortium web site:

        http://www.kerberos.org/

DES transition
==============

(Continue reading)

Tom Yu | 18 Oct 20:06

Picon

MITKRB5-SA-2011-006 KDC denial of service vulnerabilities [CVE-2011-1527 CVE-2011-1528 CVE-2011-1529]


MITKRB5-SA-2011-006

MIT krb5 Security Advisory 2011-006
Original release: 2011-10-18
Last update: 2011-10-18

Topic: KDC denial of service vulnerabilities

CVE-2011-1527: null pointer dereference in KDC LDAP back end

CVSSv2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:H/RL:OF/RC:C

CVSSv2 Base Score:      7.8

Access Vector:          Network
Access Complexity:      Low
Authentication:         None
Confidentiality Impact: None
Integrity Impact:       None
Availability Impact:    Complete

CVSSv2 Temporal Score:  6.8

Exploitability:         High
Remediation Level:      Official Fix
Report Confidence:      Confirmed

CVE-2011-1528: assertion failure in multiple KDC back ends

(Continue reading)

ghudson | 11 Jul 22:00

Picon

krb5-appl-1.0.2 is released

Version 1.0.2 of the krb5-appl package has been released.  This
package contains the Kerberized versions of telnet, ftp, and the
rlogin suite.  The new release can be found at:

       http://web.mit.edu/kerberos/dist/

This is a bugfix release, with the following changes:

  * Fix MITKRB5-SA-2011-005 (CVE-2011-1526).

  * Man page formatting fixes.

  * Portability fixes to GNU Hurd and Alpha Linux.

  * Correctly parse "restrict" lines in the ftpusers file.

  * Allow username lengths up to UT_NAMESIZE characters in rshd.

Group

gmane.comp.encryption.kerberos.announce.

Search Archive

Page

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11

May 2012

Language

Change language

Options

Current view: Threads only / Showing only 20 lines / Not hiding cited text.
Change to All messages, whole messages, or hide cited text.

Post a message
NNTP Newsgroup
Classic Gmane web interface
XML

XML

RSS Feed
List Information

About Gmane

Recent entries

krb5-1.10.1 is released (8 Mar 22:35)
krb5-1.8.6 is released (7 Feb 05:19)
krb5-1.9.3 is released (7 Feb 04:34)
krb5-1.10 is released (27 Jan 22:55)
krb5-appl-1.0.3 is released (27 Dec 18:24)
MITKRB5-SA-2011-008 buffer overflow in telnetd [CVE-2011-4862] (26 Dec 22:14)
MITKRB5-SA-2011-007 KDC null pointer dereference in TGS handling [CVE- (6 Dec 20:07)
krb5-1.8.5 is released (5 Nov 00:53)
krb5-1.9.2 is released (2 Nov 23:56)
MITKRB5-SA-2011-006 KDC denial of service vulnerabilities [CVE-2011-15 (18 Oct 20:06)
krb5-appl-1.0.2 is released (11 Jul 22:00)
MITKRB5-SA-2011-005 FTP daemon fails to set effective group ID [CVE-20 (5 Jul 20:06)
krb5-1.7.2 is released (25 May 01:35)
krb5-1.8.4 is released (25 May 01:34)
krb5-1.9.1 is released (6 May 00:28)
MITKRB5-SA-2011-004 kadmind invalid pointer free() [CVE-2011-0285] (13 Apr 20:33)
MITKRB5-SA-2011-003 [CVE-2011-0284] KDC double-free when PKINIT enable (15 Mar 19:06)
MITKRB5-SA-2011-001 kpropd denial of service [CVE-2010-4022] (8 Feb 20:53)
MITKRB5-SA-2011-002 KDC denial of service attacks [CVE-2011-0281 CVE-2 (8 Feb 20:53)
krb5-1.9 is released (22 Dec 23:03)
MITKRB5-SA-2010-007 Multiple checksum handling vulnerabilities [CVE-20 (30 Nov 20:13)

Archives

1	March 2012
2	February 2012
1	January 2012
3	December 2011
2	November 2011
1	October 2011
2	July 2011
3	May 2011
1	April 2011
1	March 2011
2	February 2011
1	December 2010
1	November 2010
1	October 2010
1	August 2010
1	June 2010
2	May 2010
3	April 2010
3	March 2010
2	February 2010
2	January 2010
1	December 2009
1	June 2009
2	April 2009
1	February 2009
3	March 2008
4	October 2007
2	September 2007
1	August 2007
2	July 2007
2	June 2007
1	May 2007
10	April 2007
1	March 2007
4	January 2007
4	November 2006
1	October 2006
4	August 2006
1	July 2006
1	December 2005
1	November 2005
1	August 2005
2	July 2005
1	April 2005
1	March 2005
1	January 2005
2	December 2004
2	September 2004
2	August 2004
1	July 2004
3	June 2004
2	May 2004
2	April 2004
1	March 2004
1	February 2004
1	January 2004
1	November 2003
3	October 2003
3	August 2003
5	July 2003
1	June 2003
1	April 2003
5	March 2003
1	January 2003
1	November 2002
2	October 2002
2	September 2002
3	August 2002

Design

Zawodny | Right Menu | Left Menu

Your Own Design

Paste the URL of your CSS below. Download CSS template