Document new vulnerabilities in xorg-server and sub ports:
CVE-2020-14360 and CVE-2020-25712
These issues can lead to privileges elevations for authorized clients
on systems where the X server is running privileged.
Tuesday, 1 December 2020.
Today KDE releases a bugfix update to KDE Plasma 5, versioned 5.20.4 Plasma
5.20 was released in October 2020 with many feature refinements and new modules
to complete the desktop experience.
This release adds a month’s worth of new translations and fixes from KDE’s
contributors. The bugfixes are typically small but important and include:
* Use plasma theme icons in kickoff leave view.
* Weight main categories properly.
* Discover: Display title in application page.
Changelog:
https://kde.org/announcements/plasma-5.20.3-5.20.4-changelog/
This commit captures KRB5-1.19-beta. The beta announcement on
krbdev is as follows:
MIT krb5-1.19-beta1 is now available for download from
https://web.mit.edu/kerberos/dist/testing.html
The main MIT Kerberos web page is
https://web.mit.edu/kerberos/
Please send comments to the krbdev list. We plan for the final
release to occur in about one month. The README file contains a more
extensive list of changes.
Major changes in 1.19
---------------------
Administrator experience:
* When a client keytab is present, the GSSAPI krb5 mech will refresh
credentials even if the current credentials were acquired manually.
* It is now harder to accidentally delete the K/M entry from a KDB.
Developer experience:
* gss_acquire_cred_from() now supports the "password" and "verify"
options, allowing credentials to be acquired via password and
verified using a keytab key.
* When an application accepts a GSS security context, the new
GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
both provided matching channel bindings.
* Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self
requests to identify the desired client principal by certificate.
* PKINIT certauth modules can now cause the hw-authent flag to be set
in issued tickets.
* The krb5_init_creds_step() API will now issue the same password
expiration warnings as krb5_get_init_creds_password().
Protocol evolution:
* Added client and KDC support for Microsoft's Resource-Based
Constrained Delegation, which allows cross-realm S4U2Proxy requests.
A third-party database module is required for KDC support.
* kadmin/admin is now the preferred server principal name for kadmin
connections, and the host-based form is no longer created by
default. The client will still try the host-based form as a
fallback.
* Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
extension, which causes channel bindings to be required for the
initiator if the acceptor provided them. The client will send this
option if the client_aware_gss_bindings profile option is set.
User experience:
* The default setting of dns_canonicalize_realm is now "fallback".
Hostnames provided from applications will be tried in principal
names as given (possibly with shortname qualification), falling back
to the canonicalized name.
* kinit will now issue a warning if the des3-cbc-sha1 encryption type
is used in the reply. This encryption type will be deprecated and
removed in future releases.
* Added kvno flags --out-cache, --no-store, and --cached-only
(inspired by Heimdal's kgetcred).
aes_power8.cpp needs VSX too apart from crypto:
src/lib/block/aes/aes_power8/aes_power8.cpp:43:49: error: use of undeclared identifier 'vec_vsx_ld'
return (Altivec64x2)reverse_vec((Altivec8x16)vec_vsx_ld(0, key));;
^
src/lib/block/aes/aes_power8/aes_power8.cpp:48:36: error: use of undeclared identifier 'vec_vsx_ld'
return (Altivec64x2)reverse_vec(vec_vsx_ld(0, src));
* scd: Fix regression in 2.2.24 requiring gpg --card-status before
signing or decrypting. [#5065]
* gpgsm: Using Libksba 1.5.0 signatures with a rarely used
combination of attributes can now be verified. [#5146]
Release-info: https://dev.gnupg.org/T5140
November 07, 2020. KDE today announces the release of KDE Frameworks 5.76.0.
KDE Frameworks are 70 addon libraries to Qt which provide a wide variety of
commonly needed functionality in mature, peer reviewed and well tested
libraries with friendly licensing terms. For an introduction see the KDE
Frameworks release announcement.
This release is part of a series of planned monthly releases making
improvements available to developers in a quick and predictable manner.
Announcement:
https://kde.org/announcements/kde-frameworks-5.76.0/
PR: 251135
Exp-run by: antoine
Philip Paeps
Niclas Zeising
Dan Langille
Tobias C. Berner
Antoine Brodin
Cy Schubert
Yuri Victorovich
Bernard Spil
Kirill Ponomarev
Mark Linimon
Piotr Kubaj
Matthias Fechner
Mikhail Pchelin
Brad Davis
Fernando Apesteguía
Jose Alonso Cardenas Marquez
Guido Falsi
Sunpoet Po-Chuan Hsieh
Bryan Drewery
Alex Dupre
Adam Weinberger
Mikael Urankar
Bradley T. Hughes
Mark Felder
Dmitri Goutnik