Public bug reported: - Availability
Currently available in Universe, building on all currently supported architectures https://launchpad.net/ubuntu/+source/heimdal - Rationale This MIR is about the availability of libpam-heimdal. Post Lucid, libpam-heimdal and libpam-krb5 source packages were merged into a single libpam-krb5 source package which builds against both Kerberos implementations, MIT and Heimdal. Since heimdal is not in main it has not been possible to pull that version of the package in from Debian. The PAM library did not exist beyond Lucid until just recently where the Lucid version was copied to maverick-updates and natty-updates but, as of June 21, these packages failed to install due to dependency issues [1]. An SRU will be needed for 10.10 and 11.04 but an MIR is needed for 11.10. This was discussed at UDS Oneiric [2] even though this item only resides on the etherpad notes [3]. [1]: https://bugs.launchpad.net/ubuntu/+source/heimdal/+bug/663319 [2]: https://blueprints.launchpad.net/ubuntu/+spec/foundations-o-corporate-mirs [3]: http://summit.ubuntu.com/uds-o/meeting/foundations-o-corporate-mirs - Security Vulnerabilities and advisories: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=heimdal: OK, but I could not confirm CVE-2007-5939 - affects old heimdal version (0.72) http://secunia.com/advisories/search/?search=heimdal: OK http://www.h5l.org/advisories.html: OK http://people.canonical.com/~ubuntu-security/cve/2009/CVE-2009-0361.html: CVE-2009-0361 - needs triage for Ubuntu 8.04 Executables (suid or sgid): NO Executables (/sbin, /usr/sbin): heimdal-clients: usr/sbin/kimpersonate heimdal-clients: usr/sbin/kadmin heimdal-clients: usr/sbin/ktutil heimdal-clients: usr/sbin/push heimdal-kcm: usr/sbin/kcm heimdal-kdc: usr/sbin/kstash heimdal-kdc: usr/sbin/hprop heimdal-kdc: usr/sbin/hpropd heimdal-kdc: usr/sbin/iprop-log heimdal-kdc: usr/sbin/ipropd-master heimdal-kdc: usr/sbin/ipropd-slave heimdal-servers: usr/sbin/kfd heimdal-servers: usr/sbin/ftpd heimdal-servers: usr/sbin/rshd heimdal-servers: usr/sbin/telnetd heimdal-servers: usr/sbin/popper heimdal-servers-x: usr/sbin/kxd Packages which install daemons: heimdal-kdc: usr/lib/heimdal-servers/kdc Packages which open privileged ports: heimdal-kdc: 88/tcp heimdal-kdc: 88/udp heimdal-kdc: 749/tcp heimdal-kdc: 749/udp heimdal-kdc: 754/tcp Add-ons and plugins to security-sensitive software: NO - Quality assurance Major long-term outstanding usability bugs: https://bugs.launchpad.net/ubuntu/+source/heimdal/+bug/663319 (as discussed above) Important bugs: Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=430888 (old) http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457877 (old) http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=485962 Ubuntu: https://bugs.launchpad.net/ubuntu/+source/heimdal/+bug/663319 (as discussed above) Upstream: http://is.gd/k5hF6K (tracker is overrun by spam) Debconf: 2 medium priority (heimdal-kdc) - UI standards N/A - Dependencies OK - Standards compliance OK - Maintenance Package is maintained in Debian (Brian May). Recent uploads: 10 Apr 2011 21 Feb 2011 20 Feb 2011 25 Jan 2011 - Background information Canonical Support has a private bug/escalation open that corresponds to public bug #663319 (#784039). I am the contact person for this as well. ** Affects: heimdal (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/800853 Title: [MIR] heimdal To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/heimdal/+bug/800853/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs