Merge in github/tags/krb5-1-10-1-final to upstream by unpacking krb5-1.10.1.tar.gz.

Author: hartmans

README

@@ -70,6 +70,34 @@ from using single-DES cryptosystems.  Among these is a configuration
 variable that enables "weak" enctypes, which defaults to "false"
 beginning with krb5-1.8.
 
+Major changes in 1.10.1
+-----------------------
+
+This is a bugfix release.
+
+* Fix access controls for KDB string attributes [CVE-2012-1012]
+
+* Make the ASN.1 encoding of key version numbers interoperate with
+  Windows Read-Only Domain Controllers
+
+* Avoid generating spurious password expiry warnings in cases where
+  the KDC sends an account expiry time without a password expiry time.
+
+krb5-1.10.1 changes by ticket ID
+--------------------------------
+
+7074    workaround for Solaris 8 lacking isblank
+7081    Don't use stack variable address in as_req state
+7082    Various lookaside cache fixes
+7084    Don't check mech in krb5_gss_inquire_cred_by_mech
+7087    krb5_gss_get_name_attribute fails to set display_value
+7088    Fix uninitialized variable warning in trval.c
+7089    Initialize gss_get_name_attribute output buffers
+7092    kvno ASN.1 encoding interop with Windows RODCs
+7093    Access controls for string RPCs [CVE-2012-1012]
+7096    Fix KDB iteration when callback does write calls
+7098    Fix spurious password expiry warning
+
 Major changes in 1.10
 ---------------------
 
@@ -83,8 +111,8 @@ and
 
 Code quality:
 
-* Fix MITKRB5-SA-2011-006 and MITKRB5SA-2011-007 KDC denial of service
-  vulnerabilities [CVE-2011-1527 CVE-2011-1528 CVE-2011-1529
+* Fix MITKRB5-SA-2011-006 and MITKRB5-SA-2011-007 KDC denial of
+  service vulnerabilities [CVE-2011-1527 CVE-2011-1528 CVE-2011-1529
   CVE-2011-1530].
 
 * Update the Fortuna implementation to more accurately implement the
@@ -272,6 +300,8 @@ krb5-1.10 changes by ticket ID
 7060    Convert securid module edata method
 7065    delete duplicate NOTICE file
 7067    documentation license to CC-BY-SA 3.0 Unported
+7077    LIBS should not include PKINIT_CRYPTO_IMPL_LIBS
+7078    Use INSTALL_DATA to install message catalogues
 
 Acknowledgements
 ----------------
@@ -361,6 +391,7 @@ Past and present members of the Kerberos Team at MIT:
 The following external contributors have provided code, patches, bug
 reports, suggestions, and valuable resources:
 
+    Ian Abbott
     Brandon Allbery
     Russell Allbery
     Brian Almeida
@@ -370,6 +401,7 @@ reports, suggestions, and valuable resources:
     Mark Bannister
     David Bantz
     Alex Baule
+    Adam Bernstein
     Arlene Berry
     Jeff Blaine
     Radoslav Bodo
@@ -386,6 +418,7 @@ reports, suggestions, and valuable resources:
     Simon Cooper
     Sylvain Cortes
     Nalin Dahyabhai
+    Mark Davies
     Dennis Davis
     Mark Deneen
     Roland Dowdeswell