-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Wed, 13 Jun 2007 13:07:44 -0700 Source: krb5 Binary: krb5-doc libkrb5-dev krb5-rsh-server krb5-user krb5-ftpd libkadm55 libkrb53 krb5-clients krb5-telnetd krb5-kdc krb5-admin-server libkrb5-dbg Architecture: source i386 all Version: 1.6.dfsg.1-5 Distribution: unstable Urgency: emergency Maintainer: Sam Hartman <hartmans@debian.org> Changed-By: Russ Allbery <rra@debian.org> Description: krb5-admin-server - MIT Kerberos master server (kadmind) krb5-clients - Secure replacements for ftp, telnet and rsh using MIT Kerberos krb5-doc - Documentation for MIT Kerberos krb5-ftpd - Secure FTP server supporting MIT Kerberos krb5-kdc - MIT Kerberos key server (KDC) krb5-rsh-server - Secure replacements for rshd and rlogind using MIT Kerberos krb5-telnetd - Secure telnet server supporting MIT Kerberos krb5-user - Basic programs to authenticate using MIT Kerberos libkadm55 - MIT Kerberos administration runtime libraries libkrb5-dbg - Debugging files for MIT Kerberos libkrb5-dev - Headers and development libraries for MIT Kerberos libkrb53 - MIT Kerberos runtime libraries Changes: krb5 (1.6.dfsg.1-5) unstable; urgency=emergency . * MIT-SA-2007-4: The kadmin RPC library can free an uninitialized pointer or write past the end of a stack buffer. This may lead to execution of arbitrary code. (CVE-2007-2442, CVE-2007-2443) * MIT-SA-2007-5: kadmind is vulnerable to a stack buffer overflow that may lead to execution of arbitrary code. (CVE-2007-2798) Files: 9dd153b5226963f14e50eab9b616530b 898 net standard krb5_1.6.dfsg.1-5.dsc c4f41d2303a3d99a32501a62e46f9bac 1658176 net standard krb5_1.6.dfsg.1-5.diff.gz a204c305598ab32061e2c9f99ce864dc 2075882 doc optional krb5-doc_1.6.dfsg.1-5_all.deb bd557b2d4cf0339156faf3549659b1ca 146410 libs optional libkadm55_1.6.dfsg.1-5_i386.deb 1997ee8125a457a80352cb6a8fa7aa3e 455896 libs standard libkrb53_1.6.dfsg.1-5_i386.deb 3d65906ce84db042949a2b150cbccdaa 126822 net optional krb5-user_1.6.dfsg.1-5_i386.deb f087ddeddc50dc8192748d0f53414869 194846 net optional krb5-clients_1.6.dfsg.1-5_i386.deb 80e7740806891cc192e205a3546ba892 80804 net optional krb5-rsh-server_1.6.dfsg.1-5_i386.deb c4661d7738811314d77ac9a912ce2759 59704 net extra krb5-ftpd_1.6.dfsg.1-5_i386.deb a430bc58126f6d4e9720c650c1917275 64936 net extra krb5-telnetd_1.6.dfsg.1-5_i386.deb aaec396698415ee99092a86ee05efb37 171028 net optional krb5-kdc_1.6.dfsg.1-5_i386.deb fdd413ed6c90deb2aef416abb96846e3 82376 net optional krb5-admin-server_1.6.dfsg.1-5_i386.deb 7eaa5f6ac68e36de34d46a2ea2ba60ef 87752 libdevel extra libkrb5-dev_1.6.dfsg.1-5_i386.deb 801e4ea5885b9469ae32cd624ea1354c 1264084 libdevel extra libkrb5-dbg_1.6.dfsg.1-5_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGgVaN+YXjQAr8dHYRAoNEAJwNlBigrfwwLspBpU+ntuc+dclcewCePUwM NHpnmV9VpggJdLj451f0Ozc= =dNx6 -----END PGP SIGNATURE----- Accepted: krb5-admin-server_1.6.dfsg.1-5_i386.deb to pool/main/k/krb5/krb5-admin-server_1.6.dfsg.1-5_i386.deb krb5-clients_1.6.dfsg.1-5_i386.deb to pool/main/k/krb5/krb5-clients_1.6.dfsg.1-5_i386.deb krb5-doc_1.6.dfsg.1-5_all.deb to pool/main/k/krb5/krb5-doc_1.6.dfsg.1-5_all.deb krb5-ftpd_1.6.dfsg.1-5_i386.deb to pool/main/k/krb5/krb5-ftpd_1.6.dfsg.1-5_i386.deb krb5-kdc_1.6.dfsg.1-5_i386.deb to pool/main/k/krb5/krb5-kdc_1.6.dfsg.1-5_i386.deb krb5-rsh-server_1.6.dfsg.1-5_i386.deb to pool/main/k/krb5/krb5-rsh-server_1.6.dfsg.1-5_i386.deb krb5-telnetd_1.6.dfsg.1-5_i386.deb to pool/main/k/krb5/krb5-telnetd_1.6.dfsg.1-5_i386.deb krb5-user_1.6.dfsg.1-5_i386.deb to pool/main/k/krb5/krb5-user_1.6.dfsg.1-5_i386.deb krb5_1.6.dfsg.1-5.diff.gz to pool/main/k/krb5/krb5_1.6.dfsg.1-5.diff.gz krb5_1.6.dfsg.1-5.dsc to pool/main/k/krb5/krb5_1.6.dfsg.1-5.dsc libkadm55_1.6.dfsg.1-5_i386.deb to pool/main/k/krb5/libkadm55_1.6.dfsg.1-5_i386.deb libkrb5-dbg_1.6.dfsg.1-5_i386.deb to pool/main/k/krb5/libkrb5-dbg_1.6.dfsg.1-5_i386.deb libkrb5-dev_1.6.dfsg.1-5_i386.deb to pool/main/k/krb5/libkrb5-dev_1.6.dfsg.1-5_i386.deb libkrb53_1.6.dfsg.1-5_i386.deb to pool/main/k/krb5/libkrb53_1.6.dfsg.1-5_i386.deb