diff --git a/NOTICE b/NOTICE index 3d78b73035c..20d8ef24e60 100644 --- a/NOTICE +++ b/NOTICE @@ -1,4 +1,4 @@ -Copyright (C) 1985-2025 by the Massachusetts Institute of Technology. +Copyright (C) 1985-2026 by the Massachusetts Institute of Technology. All rights reserved. diff --git a/README b/README index d1de8357e38..73eafa585dc 100644 --- a/README +++ b/README @@ -6,7 +6,7 @@ Copyright and Other Notices --------------------------- -Copyright (C) 1985-2025 by the Massachusetts Institute of Technology +Copyright (C) 1985-2026 by the Massachusetts Institute of Technology and its contributors. All rights reserved. Please see the file named NOTICE for additional notices. @@ -97,6 +97,24 @@ removed. Beginning with the krb5-1.18 release, all support for single-DES encryption types has been removed. +Major changes in 1.22.2 (2026-01-29) +------------------------------------ + +This is a bug fix release. + +* Fix a SPNEGO packet parsing bug which could cause GSS mechanism + negotiation failure. + +krb5-1.22.2 changes by ticket ID +-------------------------------- + +9183 Fix SPNEGO mechListMIC parsing +9188 Improve MSLSA ccache timestamp conversion +9189 Fix krb5 gss_acquire_cred() leak on some errors +9190 Make atomic ccache replacement work on Windows +9193 Fix uninitialized pointer dereference in libkrad +9194 Fix IAKERB realm discovery state machine logic + Major changes in 1.22.1 (2025-08-20) ------------------------------------ @@ -378,6 +396,7 @@ reports, suggestions, and valuable resources: Gerald Combs Simon Cooper Sylvain Cortes + Robert Crowston Ian Crowther Arran Cudbard-Bell Adam Dabrowski @@ -475,6 +494,7 @@ reports, suggestions, and valuable resources: Tomas Kuthan Pierre Labastie Andreas Ladanyi + Yubi Lee Chris Leick Volker Lendecke Jan iankko Lieskovsky @@ -519,6 +539,7 @@ reports, suggestions, and valuable resources: Felipe Ortega Michael Osipov Andrej Ota + Dmitry Ovsyannikov Dmitri Pal Javier Palacios Dilyan Palauzov @@ -530,6 +551,7 @@ reports, suggestions, and valuable resources: Zoran Pericic W. Michael Petullo Mark Phalan + Ben Pope Sharwan Ram Brett Randall Jonathan Reams diff --git a/doc/conf.py b/doc/conf.py index 60835e9361a..2fa3d8b3580 100644 --- a/doc/conf.py +++ b/doc/conf.py @@ -45,7 +45,7 @@ # General information about the project. project = u'MIT Kerberos' -copyright = u'1985-2025, MIT' +copyright = u'1985-2026, MIT' # The version info for the project you're documenting, acts as replacement for # |version| and |release|, also used in various other places throughout the diff --git a/doc/copyright.rst b/doc/copyright.rst index da8e62cc2a8..f30e22edf1a 100644 --- a/doc/copyright.rst +++ b/doc/copyright.rst @@ -1,7 +1,7 @@ Copyright ========= -Copyright |copy| 1985-2025 by the Massachusetts Institute of +Copyright |copy| 1985-2026 by the Massachusetts Institute of Technology and its contributors. All rights reserved. See :ref:`mitK5license` for additional copyright and license diff --git a/doc/html/.buildinfo b/doc/html/.buildinfo index 7512369abb8..11773c265f5 100644 --- a/doc/html/.buildinfo +++ b/doc/html/.buildinfo @@ -1,4 +1,4 @@ # Sphinx build info version 1 # This file hashes the configuration used when building these files. When it is not found, a full rebuild will be done. -config: 62c817db4dbe5853c22bc095f98b965a +config: 13ca906939ef37cdc7108479fbe71174 tags: 645f666f9bcd5a90fca523b33c5a78b7 diff --git a/doc/html/_sources/copyright.rst.txt b/doc/html/_sources/copyright.rst.txt index da8e62cc2a8..f30e22edf1a 100644 --- a/doc/html/_sources/copyright.rst.txt +++ b/doc/html/_sources/copyright.rst.txt @@ -1,7 +1,7 @@ Copyright ========= -Copyright |copy| 1985-2025 by the Massachusetts Institute of +Copyright |copy| 1985-2026 by the Massachusetts Institute of Technology and its contributors. All rights reserved. See :ref:`mitK5license` for additional copyright and license diff --git a/doc/html/_static/documentation_options.js b/doc/html/_static/documentation_options.js index ac523660143..e96f31aa107 100644 --- a/doc/html/_static/documentation_options.js +++ b/doc/html/_static/documentation_options.js @@ -1,5 +1,5 @@ const DOCUMENTATION_OPTIONS = { - VERSION: '1.22.1', + VERSION: '1.22.2', LANGUAGE: 'en', COLLAPSE_INDEX: false, BUILDER: 'html', diff --git a/doc/html/about.html b/doc/html/about.html index e7864cc3ac7..d0cb48ead32 100644 --- a/doc/html/about.html +++ b/doc/html/about.html @@ -9,7 +9,7 @@ - + @@ -131,8 +131,8 @@ to maintain.
kinit
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/index.html b/doc/html/admin/index.html
index 1e6e0997964..215d286b96f 100644
--- a/doc/html/admin/index.html
+++ b/doc/html/admin/index.html
@@ -9,7 +9,7 @@
-
+
@@ -160,8 +160,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/install.html b/doc/html/admin/install.html
index cf6d1aef7f7..cb8f522586e 100644
--- a/doc/html/admin/install.html
+++ b/doc/html/admin/install.html
@@ -9,7 +9,7 @@
-
+
@@ -171,8 +171,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/install_appl_srv.html b/doc/html/admin/install_appl_srv.html
index 11f7b82a2c1..855a7110503 100644
--- a/doc/html/admin/install_appl_srv.html
+++ b/doc/html/admin/install_appl_srv.html
@@ -9,7 +9,7 @@
-
+
@@ -199,8 +199,8 @@ readable only by root.
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/install_clients.html b/doc/html/admin/install_clients.html
index 52850acb1fa..842ddf5c327 100644
--- a/doc/html/admin/install_clients.html
+++ b/doc/html/admin/install_clients.html
@@ -9,7 +9,7 @@
-
+
@@ -181,8 +181,8 @@ krb5.conf.
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/install_kdc.html b/doc/html/admin/install_kdc.html
index 1f1e3b2a715..a5a511c4ece 100644
--- a/doc/html/admin/install_kdc.html
+++ b/doc/html/admin/install_kdc.html
@@ -9,7 +9,7 @@
-
+
@@ -627,8 +627,8 @@ set up incremental propagation to replica KDCs. See
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/lockout.html b/doc/html/admin/lockout.html
index 38c420b0aca..5fc57ea5fba 100644
--- a/doc/html/admin/lockout.html
+++ b/doc/html/admin/lockout.html
@@ -9,7 +9,7 @@
-
+
@@ -267,8 +267,8 @@ read access, account lockout will not function.
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/otp.html b/doc/html/admin/otp.html
index 81f2902b37d..24c2e48084c 100644
--- a/doc/html/admin/otp.html
+++ b/doc/html/admin/otp.html
@@ -9,7 +9,7 @@
-
+
@@ -215,8 +215,8 @@ equivalent to one DEFAULT token (
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/pkinit.html b/doc/html/admin/pkinit.html
index d1bb59ba967..b812e3b9ae7 100644
--- a/doc/html/admin/pkinit.html
+++ b/doc/html/admin/pkinit.html
@@ -9,7 +9,7 @@
-
+
@@ -456,8 +456,8 @@ and verify that authentication is unsuccessful.
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/princ_dns.html b/doc/html/admin/princ_dns.html
index 6b4e6e6181b..d5b0fffbe17 100644
--- a/doc/html/admin/princ_dns.html
+++ b/doc/html/admin/princ_dns.html
@@ -9,7 +9,7 @@
-
+
@@ -242,8 +242,8 @@ add SASL_NOCANON
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/realm_config.html b/doc/html/admin/realm_config.html
index 0e01c9bd564..bb7b90afb7e 100644
--- a/doc/html/admin/realm_config.html
+++ b/doc/html/admin/realm_config.html
@@ -9,7 +9,7 @@
-
+
@@ -376,8 +376,8 @@ the database to additional replicas.
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/spake.html b/doc/html/admin/spake.html
index fded4104170..822031e0452 100644
--- a/doc/html/admin/spake.html
+++ b/doc/html/admin/spake.html
@@ -9,7 +9,7 @@
-
+
@@ -173,8 +173,8 @@ used.
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/troubleshoot.html b/doc/html/admin/troubleshoot.html
index 373107025b1..66be1da3bf3 100644
--- a/doc/html/admin/troubleshoot.html
+++ b/doc/html/admin/troubleshoot.html
@@ -9,7 +9,7 @@
-
+
@@ -240,8 +240,8 @@ location on the replica.
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/admin/various_envs.html b/doc/html/admin/various_envs.html
index bb605d2616b..78bc8f904a7 100644
--- a/doc/html/admin/various_envs.html
+++ b/doc/html/admin/various_envs.html
@@ -9,7 +9,7 @@
-
+
@@ -153,8 +153,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/gssapi.html b/doc/html/appdev/gssapi.html
index 12e58f03e18..16614a0e6ec 100644
--- a/doc/html/appdev/gssapi.html
+++ b/doc/html/appdev/gssapi.html
@@ -9,7 +9,7 @@
-
+
@@ -803,8 +803,8 @@ gss_get_mic_iov_length and gss_get_mic_iov:
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/h5l_mit_apidiff.html b/doc/html/appdev/h5l_mit_apidiff.html
index 5ca1c9bb7e6..91142c7a640 100644
--- a/doc/html/appdev/h5l_mit_apidiff.html
+++ b/doc/html/appdev/h5l_mit_apidiff.html
@@ -9,7 +9,7 @@
-
+
@@ -147,8 +147,8 @@ if it wasn’t explicitly set in the context
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/index.html b/doc/html/appdev/index.html
index cc9635e9acf..c81e1da3842 100644
--- a/doc/html/appdev/index.html
+++ b/doc/html/appdev/index.html
@@ -9,7 +9,7 @@
-
+
@@ -124,8 +124,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/init_creds.html b/doc/html/appdev/init_creds.html
index b5c1d10e1fe..0fb0bc47fda 100644
--- a/doc/html/appdev/init_creds.html
+++ b/doc/html/appdev/init_creds.html
@@ -9,7 +9,7 @@
-
+
@@ -407,8 +407,8 @@ that the users would access reside on networked servers.
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/princ_handle.html b/doc/html/appdev/princ_handle.html
index 99df6469c65..4fe804520f9 100644
--- a/doc/html/appdev/princ_handle.html
+++ b/doc/html/appdev/princ_handle.html
@@ -9,7 +9,7 @@
-
+
@@ -136,8 +136,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/index.html b/doc/html/appdev/refs/api/index.html
index e9906814171..c894afb0eb2 100644
--- a/doc/html/appdev/refs/api/index.html
+++ b/doc/html/appdev/refs/api/index.html
@@ -9,7 +9,7 @@
-
+
@@ -529,8 +529,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_425_conv_principal.html b/doc/html/appdev/refs/api/krb5_425_conv_principal.html
index 84c2d422162..5da6cfa06d5 100644
--- a/doc/html/appdev/refs/api/krb5_425_conv_principal.html
+++ b/doc/html/appdev/refs/api/krb5_425_conv_principal.html
@@ -9,7 +9,7 @@
-
+
@@ -136,8 +136,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_524_conv_principal.html b/doc/html/appdev/refs/api/krb5_524_conv_principal.html
index e2fc677cb92..fe130c2acc8 100644
--- a/doc/html/appdev/refs/api/krb5_524_conv_principal.html
+++ b/doc/html/appdev/refs/api/krb5_524_conv_principal.html
@@ -9,7 +9,7 @@
-
+
@@ -142,8 +142,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_524_convert_creds.html b/doc/html/appdev/refs/api/krb5_524_convert_creds.html
index 9f2c4118584..1f548685843 100644
--- a/doc/html/appdev/refs/api/krb5_524_convert_creds.html
+++ b/doc/html/appdev/refs/api/krb5_524_convert_creds.html
@@ -9,7 +9,7 @@
-
+
@@ -136,8 +136,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_address_compare.html b/doc/html/appdev/refs/api/krb5_address_compare.html
index e00fc6d9732..0fd23c127e9 100644
--- a/doc/html/appdev/refs/api/krb5_address_compare.html
+++ b/doc/html/appdev/refs/api/krb5_address_compare.html
@@ -9,7 +9,7 @@
-
+
@@ -132,8 +132,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_address_order.html b/doc/html/appdev/refs/api/krb5_address_order.html
index acdde1a6478..824c4bc8d2d 100644
--- a/doc/html/appdev/refs/api/krb5_address_order.html
+++ b/doc/html/appdev/refs/api/krb5_address_order.html
@@ -9,7 +9,7 @@
-
+
@@ -134,8 +134,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_address_search.html b/doc/html/appdev/refs/api/krb5_address_search.html
index 489de7928bd..cdea98b0442 100644
--- a/doc/html/appdev/refs/api/krb5_address_search.html
+++ b/doc/html/appdev/refs/api/krb5_address_search.html
@@ -9,7 +9,7 @@
-
+
@@ -136,8 +136,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_allow_weak_crypto.html b/doc/html/appdev/refs/api/krb5_allow_weak_crypto.html
index 9f0cdf4a16f..7731b59d3cc 100644
--- a/doc/html/appdev/refs/api/krb5_allow_weak_crypto.html
+++ b/doc/html/appdev/refs/api/krb5_allow_weak_crypto.html
@@ -9,7 +9,7 @@
-
+
@@ -132,8 +132,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_aname_to_localname.html b/doc/html/appdev/refs/api/krb5_aname_to_localname.html
index 517c65c1f93..66cf08f3fae 100644
--- a/doc/html/appdev/refs/api/krb5_aname_to_localname.html
+++ b/doc/html/appdev/refs/api/krb5_aname_to_localname.html
@@ -9,7 +9,7 @@
-
+
@@ -141,8 +141,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_anonymous_principal.html b/doc/html/appdev/refs/api/krb5_anonymous_principal.html
index 74d0005bd74..b9639150a59 100644
--- a/doc/html/appdev/refs/api/krb5_anonymous_principal.html
+++ b/doc/html/appdev/refs/api/krb5_anonymous_principal.html
@@ -9,7 +9,7 @@
-
+
@@ -128,8 +128,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_anonymous_realm.html b/doc/html/appdev/refs/api/krb5_anonymous_realm.html
index 545bb6d97ba..38d82b972a8 100644
--- a/doc/html/appdev/refs/api/krb5_anonymous_realm.html
+++ b/doc/html/appdev/refs/api/krb5_anonymous_realm.html
@@ -9,7 +9,7 @@
-
+
@@ -128,8 +128,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_appdefault_boolean.html b/doc/html/appdev/refs/api/krb5_appdefault_boolean.html
index 0c938dc1f13..8a71d733375 100644
--- a/doc/html/appdev/refs/api/krb5_appdefault_boolean.html
+++ b/doc/html/appdev/refs/api/krb5_appdefault_boolean.html
@@ -9,7 +9,7 @@
-
+
@@ -133,8 +133,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_appdefault_string.html b/doc/html/appdev/refs/api/krb5_appdefault_string.html
index 381359c8469..5999f6743e7 100644
--- a/doc/html/appdev/refs/api/krb5_appdefault_string.html
+++ b/doc/html/appdev/refs/api/krb5_appdefault_string.html
@@ -9,7 +9,7 @@
-
+
@@ -133,8 +133,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_auth_con_free.html b/doc/html/appdev/refs/api/krb5_auth_con_free.html
index 3340f9ae02c..041e5e7ac18 100644
--- a/doc/html/appdev/refs/api/krb5_auth_con_free.html
+++ b/doc/html/appdev/refs/api/krb5_auth_con_free.html
@@ -9,7 +9,7 @@
-
+
@@ -132,8 +132,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_auth_con_genaddrs.html b/doc/html/appdev/refs/api/krb5_auth_con_genaddrs.html
index a20a69f10cf..22fc65496ea 100644
--- a/doc/html/appdev/refs/api/krb5_auth_con_genaddrs.html
+++ b/doc/html/appdev/refs/api/krb5_auth_con_genaddrs.html
@@ -9,7 +9,7 @@
-
+
@@ -142,8 +142,8 @@
- Release: 1.22.1
- © Copyright 1985-2025, MIT.
+ Release: 1.22.2
+ © Copyright 1985-2026, MIT.
diff --git a/doc/html/appdev/refs/api/krb5_auth_con_get_checksum_func.html b/doc/html/appdev/refs/api/krb5_auth_con_get_checksum_func.html
index 26626bb385f..079140fcddb 100644
--- a/doc/html/appdev/refs/api/krb5_auth_con_get_checksum_func.html
+++ b/doc/html/appdev/refs/api/krb5_auth_con_get_checksum_func.html
@@ -9,7 +9,7 @@
-
+
@@ -133,8 +133,8 @@