Change log for heimdal package in Ubuntu

heimdal (0.6.2-3ubuntu0.2) warty-security; urgency=low

  * SECURITY UPDATE: Privilege escalation in rshd: local overwrite and owner
    change of any root writable file.
  * Add debian/patches/035_CVE-2006-0582:
    - rshd.c: Move creation of users ticket file to later to avoid
      seteuid/setuid dance.
  * CVE-2006-0582

 -- Martin Pitt <email address hidden>   Wed,  8 Feb 2006 12:09:46 +0100

heimdal (0.7.1-1ubuntu2) dapper; urgency=low

  * Add debian/patches/001_rsdh_fixes.patch: Security and bug fixes
    for rshd, backported from 0.7.2 release:
    - Move creation of users ticket file to later to avoid seteuid/setuid
      dance. This allowed an authenticated user to overwrite and change the
      owner of arbitrary files. [CVE-2006-0582]
    - Disable DCE since above patch breaks it.
    - Check return value from asprintf instead of string != NULL since it
      is undefined behavior on Linux.

heimdal (0.7.1-1ubuntu1) dapper; urgency=low


  * Upgrade to new heimdal version to get rid of Kerberos 4.
  * debian/control: Build against libdb4.3.
  * debian/rules: Do not install /usr/include/ss/ss.h, that's ss-dev's area.

 -- Martin Pitt <email address hidden>  Wed, 23 Nov 2005 11:24:22 +0100

heimdal (0.6.3-11ubuntu1) breezy; urgency=low


  * Resynchronise with Debian.
  * added "libldap2-dev" to the build-deps (was dropped by MoM)

 -- Michael Vogt <email address hidden>  Wed,  6 Jul 2005 15:23:14 +0200

heimdal (0.6.3-7ubuntu1.1) hoary-security; urgency=low


  * Non-maintainer upload.
  * Fixes from Debian Sarge security update
  * Fix buffer overflow security bug in telnet client, CAN-2005-0469, closes:
    #305574.
  * Applied upstream patch to fix buffer overflow in telnetd, fixes
    CAN-2005-2040

 -- Björn Torkelsson <email address hidden>  Mon, 15 Aug 2005 14:36:41 +0200

heimdal (0.6.3-7ubuntu1) hoary; urgency=low


  * Synchronise with Debian's 0.6.3-7, fixing Ubuntu bug #8501.

 -- Adam Conrad <adconrad@0c3.net>  Mon,  4 Apr 2005 02:09:05 +0000

heimdal (0.6.2-3ubuntu0.1) warty-security; urgency=low


  * Non-maintainer upload.
  * Fixes from Debian Sarge security update
  * Fix buffer overflow security bug in telnet client, CAN-2005-0469, closes:
    #305574.
  * Applied upstream patch to fix buffer overflow in telnetd, fixes
    CAN-2005-2040
  * Thanks to Björn Torkelsson <email address hidden> for preparing the Hoary
    update.

 -- Martin Pitt <email address hidden>  Tue, 13 Sep 2005 18:35:08 +0200

heimdal (0.6.2-3) unstable; urgency=low


  * Use default realm configured by krb5-config for KDC (closes:
    #251725).
  * Move push.8 man page from heimdal-servers to heimdal-clients
    (push binary is already in heimdal-clients).

 -- Brian May <email address hidden>  Mon, 31 May 2004 08:30:54 +1000