From 4a023499d31db923660d785889dce955e1a667c9 Mon Sep 17 00:00:00 2001 From: Nicolas Williams Date: Thu, 14 Apr 2016 15:59:49 -0500 Subject: [PATCH] Update NEWS for some recent changes - CVE-2016-2400 - OpenSSL as hcrypto backend - Thread support on Windows - HDB LMDB backend - iprop revamp --- NEWS | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/NEWS b/NEWS index b495ab29a..961efbfbe 100644 --- a/NEWS +++ b/NEWS @@ -3,9 +3,15 @@ Release Notes - Heimdal - Version Heimdal 1.6 Security - ... - kx509 realm-chopping security bug + - non-authorization of alias additions/removals in kadmind Feature + - libhcrypto has new backends: CNG (Windows), PKCS#11 (mainly for + Solaris), and OpenSSL. OpenSSL is now a first-class libhcrypto backend. + OpenSSL 1.0.x and 1.1 are both supported. + - HDB now supports LMDB + - Thread support on Windows - RFC 6113 Generalized Framework for Kerberos Pre-Authentication (FAST) - New GSS APIs: . gss_localname @@ -48,6 +54,8 @@ Release Notes - Heimdal - Version Heimdal 1.6 - Many more Bug fixes + - iprop has been revamped to fix a number of race conditions that could + lead to data loss - Include non-loopback addresses assigned to loopback interfaces when requesting tickets with addresses - KDC 1DES session key selection (for AFS rxkad-k5 compatibility)