path: root/third_party/heimdal/NEWS

Partial news for a future Heimdal 8.0 release -- but NOTE WELL that this is NOT
a release at this time!

Bug fixes

 - Errors found by the Coverity static analysis.
 - Errors found by the LLVM scan-build static analyzer.
 - Errors found by the valgrind memory debugger.
 - Fix out-of-tree SQLite3 ccache permissions / umask issues.
 - iprop bugs, race conditions, and performance
 - Many misc. bugs

Features:

 - KDC: Add FAST support for TGS.
 - KDC: Greatly improved plugin facility for Samba.
 - KDC: Add httpkadmind service providing a subset of kadmin
        functionality over HTTP.
 - KDC: Add support for virtual service principal namespaces.
 - KDC: Add support for synthetic client principals that exist if the
        pre-authentication mechanism (e.g., PKINIT) can authenticate
        them, thus not requiring an HDB entry.
 - KDC: Add experimental GSS-API pre-authentication support.
 - KDC: Revamp and enhance kx509 support (though bx509d mostly replaces kx509).
 - KDC: Better support for aliases and referrals.
 - KDC: Always return the salt in the PA-ETYPE-INFO[2].
 - KDC: Add warn_ticket_addresses configuration parameter.
 - KDC: allow anonymous AS requests with long-term keys.
 - KDC: Do not include PAC for anonymous AS requests.
 - KDC: Enable keepalive mode on incoming sockets.
 - KDC: Greatly improved logging.
 - KDC: Remove KRB5SignedPath, to be replaced with PAC.
 - PKIX: Add bx509d -- an online certification authority (CA) with an HTTP API.
 - kadmin: Add HTTP-based kadmin protocol.
 - kadmin: Add add_alias, del_alias.
 - kadmin: Add command aliases to man page.
 - kadmin: Add disallow-client attribute.
 - kadmin: add --hdb / -H argument.
 - kadmin: Allow enforcing password quality on admin password change.
 - kadmin: Improve ext_keytab usage.
 - kadmin: Selective pruning of historic key for principal.
 - krb5: Add client_aware_channel_bindings option.
 - krb5: Add constrained credential delegation option "destination TGT"
 - krb5: Add "EFILE:" target for logging.
 - krb5: Add include/includedir directives for krb5.conf.
 - krb5: Complete DIR ccache collection support.
 - krb5: Add FILE ccache collection support.
 - krb5: Improved FILE ccache performance.
 - krb5: Add KEYRING ccache support.
 - krb5: Add kx509 client.
 - krb5: Improve FILE keytab performance.
 - krb5: Implement KRB5_TRACE environment variable.
 - krb5: Add experimental name canonicalization rules configuration.
 - krb5: Support start_realm ccconfig entry type.
 - kinit: Add --default-for option for ccache collection support.
 - kinit: Add --pk-anon-fast-armor option.
 - kinit: Don't leave dangling temporary ccaches.
 - klist: Better --json
 - iprop: Many performance and scaling enhancements.
 - iprop: Support hierarchical propagation.
 - ASN.1: Document fuzzing process.
 - ASN.1: Complete template backend.
 - ASN.1: Add partial Information Object System support (template backend
          only).  This means that open type holes can be decoded recursively
          with one codec function call.
 - ASN.1: Add JSON encoder functionality (template backend only).
 - ASN.1: Greatly enhanced asn1_print(1) command, which can now print a
          JSON representation of any DER-encoded value of any type exported
          by ASN.1 modules in Heimdal.
 - ASN.1: Support circular types.
 - ASN.1: Topographically sort declarations.
 - ASN.1: Proper support for IMPLICIT tags.
 - GSS: Import gss-token(1) command.
 - GSS: Add advanced credential store / load functionality.
 - GSS: Add name attributes support, with support for many basic attributes
        and PAC buffer accessors too.
 - GSS: Add SANON mechanism for anonymous-only key exchange using
   elliptic curve Diffie-Hellman (ECDH) with Curve25519.
 - GSS: Add gss_acquire_cred_from() and credential store extensions.
 - GSS: Support fragmented tokens reassembly (for SMB).
 - GSS: Support client keytab.
 - GSS: Add NegoEx support.
 - libhx509: Lots of improvements.
 - hxtool: Add "acert" (assert cert contents) command
 - hxtool: add cert type: https-negotiate-server
 - hxtool: add generate-key command
 - hxtool: Add OID symbol resolution and printing of OIDs known to hxtool.
 - hxtool: Add print --raw-json option that shows certificates in JSON, with
           all extensions and attributes known to Heimdal fully decoded.
 - hxtool: Improved SAN support.
 - hxtool: Improved CSR support.
 - Improved plugin interfaces.
 - hcrypto: Add X25519.
 - hcrypto: Better RSA key generation.
 - hcrypto: import libtommath v1.2.0.
 - roken: Add secure_getenv() and issuid(), use them extensively.

Release Notes - Heimdal - Version Heimdal 7.8

 Bug fixes

 - CVE-2022-42898 PAC parse integer overflows

 - CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour
    - Pass correct length to _gssapi_verify_pad()
    - Check for overflow in _gsskrb5_get_mech()
    - Check buffer length against overflow for DES{,3} unwrap
    - Check the result of _gsskrb5_get_mech()
    - Avoid undefined behaviour in _gssapi_verify_pad()
    - Don't pass NULL pointers to memcpy() in DES unwrap
    - Use constant-time memcmp() in unwrap_des3()
    - Use constant-time memcmp() for arcfour unwrap

 - CVE-2021-44758 NULL dereference DoS in SPNEGO acceptors

 - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec

    This is a 10.0 on the Common Vulnerability Scoring System (CVSS) v3.

    Heimdal's ASN.1 compiler generates code that allows specially
    crafted DER encodings of CHOICEs to invoke the wrong free function
    on the decoded structure upon decode error.  This is known to impact
    the Heimdal KDC, leading to an invalid free() of an address partly
    or wholly under the control of the attacker, in turn leading to a
    potential remote code execution (RCE) vulnerability.

    This error affects the DER codec for all CHOICE types used in
    Heimdal, though not all cases will be exploitable.  We have not
    completed a thorough analysis of all the Heimdal components
    affected, thus the Kerberos client, the X.509 library, and other
    parts, may be affected as well.

    This bug has been in Heimdal since 2005.  It was first reported by
    Douglas Bagnall, though it had been found independently by the
    Heimdal maintainers via fuzzing.

    While no zero-day exploit is known, such an exploit will likely be
    available soon after public disclosure.

 - Errors found by the LLVM scan-build static analyzer.

 - Errors found by the valgrind memory debugger.

 - Work around GCC Bug 95189 (memcmp wrongly stripped like strcmp).

 - Fix Unicode normalization read of 1 bytes past end of array.

 - Correct ASN.1 OID typo for SHA-384

 - Fix a deadlock in in the MEMORY ccache type.

 - TGS: strip forwardable and proxiable flags if the server is
   disallowed.

 - CVE-2019-14870: Validate client attributes in protocol-transition
 - CVE-2019-14870: Apply forwardable policy in protocol-transition
 - CVE-2019-14870: Always lookup impersonate client in DB

 - Incremental HDB propagation improvements

    - Refactor send_diffs making it progressive
    - Handle partial writes on non-blocking sockets
    - Disable Nagle in iprop master and slave
    - Use async I/O
    - Don't send I_HAVE in response to AYT
    - Do not recover log in kadm5_get_principal()
    - Don't send diffs to slaves with not yet known version
    - Don't stutter in send_diffs

 - Optional backwards-compatible anon-pkinit behaviour

Release Notes - Heimdal - Version Heimdal 7.7

 Bug fixes

 - PKCS#11 hcrypto back-end
   . initialize the p11_module_load function list
   . verify that not only is a mechanism present but that its mechanism
     info states that it offers the required encryption, decryption or
     digest services
 - krb5:
   . Starting with 7.6, Heimdal permitted requesting authenticat