diff --git a/README b/README index 8bfb774..73c476d 100644 --- a/README +++ b/README @@ -84,6 +84,31 @@ Beginning with the krb5-1.18 release, single-DES encryption types have been removed. + +Major changes in 1.20.1 (2022-11-15) +------------------------------------ + +This is a bug fix release. + +* Fix integer overflows in PAC parsing [CVE-2022-42898]. + +* Fix null deref in KDC when decoding invalid NDR. + +* Fix memory leak in OTP kdcpreauth module. + +* Fix PKCS11 module path search. + +krb5-1.20.1 changes by ticket ID +-------------------------------- + +9061 Fix memory leak in SPAKE kdcpreauth module +9062 Fix net-server.c when AI_NUMERICSERV is undefined +9063 Fix memory leak in OTP kdcpreauth module +9064 Free verto context later in KDC cleanup +9065 Fix uncommon PKINIT memory leak +9067 Fix PKCS11 module path search +9073 Fix null deref in KDC when decoding invalid NDR +9074 Fix integer overflows in PAC parsing Major changes in 1.20 (2022-05-26) ---------------------------------- diff --git a/doc/html/_sources/appdev/refs/api/krb5_c_verify_checksum.rst.txt b/doc/html/_sources/appdev/refs/api/krb5_c_verify_checksum.rst.txt index 0061c8f..49eb599 100644 --- a/doc/html/_sources/appdev/refs/api/krb5_c_verify_checksum.rst.txt +++ b/doc/html/_sources/appdev/refs/api/krb5_c_verify_checksum.rst.txt @@ -38,7 +38,7 @@ -This function verifies that *cksum* is a valid checksum for *data* . If the checksum type of *cksum* is a keyed checksum, *key* is used to verify the checksum. If the checksum type in *cksum* is 0 and *key* is not NULL, the mandatory checksum type for *key* will be used. The actual checksum key will bederived from *key* and *usage* if key derivation is specified for the checksum type. +This function verifies that *cksum* is a valid checksum for *data* . If the checksum type of *cksum* is a keyed checksum, *key* is used to verify the checksum. If the checksum type in *cksum* is 0 and *key* is not NULL, the mandatory checksum type for *key* will be used. The actual checksum key will be derived from *key* and *usage* if key derivation is specified for the checksum type. diff --git a/doc/html/_sources/appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.rst.txt b/doc/html/_sources/appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.rst.txt index 099644f..15c1150 100644 --- a/doc/html/_sources/appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.rst.txt +++ b/doc/html/_sources/appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.rst.txt @@ -1,5 +1,5 @@ -krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options. -============================================================================================================== +krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options. +============================================================================================================= .. diff --git a/doc/html/about.html b/doc/html/about.html index 6334e75..9e099c0 100644 --- a/doc/html/about.html +++ b/doc/html/about.html @@ -12,7 +12,7 @@