Changes 1.8.6:

This is primarily a bugfix release.
* Fix an interaction in iprop that could cause spurious excess kadmind processes
  when a kprop child fails.

Changes 1.8.5:
This is primarily a bugfix release.
* Fix MITKRB5-SA-2011-006 KDC denial of service vulnerabilities
  [CVE-2011-1528 CVE-2011-1529 CVE-2011-4151].

3 files changed, 13 insertions, 14 deletions

diff --git a/security/mit-krb5/Makefile b/security/mit-krb5/Makefile
index c0559092b96..7d2fc75669f 100644
--- a/security/mit-krb5/Makefile
+++ b/security/mit-krb5/Makefile
@@ -1,15 +1,14 @@
-# $NetBSD: Makefile,v 1.55 2011/10/23 19:58:16 tez Exp $
+# $NetBSD: Makefile,v 1.56 2012/02/26 13:14:19 adam Exp $
 
-DISTNAME=	krb5-1.8.4
+DISTNAME=	krb5-1.8.6
 PKGNAME=	mit-${DISTNAME}
-PKGREVISION=	1
 CATEGORIES=	security
 MASTER_SITES=	http://web.mit.edu/kerberos/dist/krb5/1.8/
 EXTRACT_SUFX=	.tar
 DISTFILES=	${DISTNAME}-signed${EXTRACT_SUFX}
 
-PATCH_SITES=	http://web.mit.edu/kerberos/advisories/
-PATCHFILES=	2011-006-patch-r18.txt
+#PATCH_SITES=	http://web.mit.edu/kerberos/advisories/
+#PATCHFILES=	2011-006-patch-r18.txt
 
 MAINTAINER=	tez@NetBSD.org
 HOMEPAGE=	http://web.mit.edu/kerberos/
diff --git a/security/mit-krb5/PLIST b/security/mit-krb5/PLIST
index 52bec8c0996..a14b6484f03 100644
--- a/security/mit-krb5/PLIST
+++ b/security/mit-krb5/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.14 2011/03/22 23:31:04 tez Exp $
+@comment $NetBSD: PLIST,v 1.15 2012/02/26 13:14:19 adam Exp $
 bin/compile_et
 bin/gss-client
 bin/k5srvutil
@@ -20,12 +20,12 @@ include/gssapi/gssapi.h
 include/gssapi/gssapi_ext.h
 include/gssapi/gssapi_generic.h
 include/gssapi/gssapi_krb5.h
+include/gssapi/mechglue.h
 include/gssrpc/auth.h
 include/gssrpc/auth_gss.h
 include/gssrpc/auth_gssapi.h
 include/gssrpc/auth_unix.h
 include/gssrpc/clnt.h
-include/gssapi/mechglue.h
 include/gssrpc/netdb.h
 include/gssrpc/pmap_clnt.h
 include/gssrpc/pmap_prot.h
@@ -48,6 +48,9 @@ include/profile.h
 info/krb5-admin.info
 info/krb5-install.info
 info/krb5-user.info
+lib/krb5/plugins/kdb/libdb2.la
+lib/krb5/plugins/preauth/libencrypted_challenge.la
+lib/krb5/plugins/preauth/libpkinit.la
 lib/libcom_err.la
 lib/libgssapi_krb5.la
 lib/libgssrpc.la
@@ -59,9 +62,6 @@ lib/libkadm5srv_mit.la
 lib/libkdb5.la
 lib/libkrb5.la
 lib/libkrb5support.la
-lib/krb5/plugins/kdb/libdb2.la
-lib/krb5/plugins/preauth/libencrypted_challenge.la
-lib/krb5/plugins/preauth/libpkinit.la
 man/man1/compile_et.1
 man/man1/k5srvutil.1
 man/man1/kadmin.1
diff --git a/security/mit-krb5/distinfo b/security/mit-krb5/distinfo
index 605b687c13a..fcee86724c3 100644
--- a/security/mit-krb5/distinfo
+++ b/security/mit-krb5/distinfo
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.32 2011/10/23 19:58:16 tez Exp $
+$NetBSD: distinfo,v 1.33 2012/02/26 13:14:19 adam Exp $
 
 SHA1 (2011-006-patch-r18.txt) = 30b66b6c5dce537d66874ac58e622b3f6e992ac6
 RMD160 (2011-006-patch-r18.txt) = 829a6d2dc876190996e90e0a6a43e2d018cbaaa5
 Size (2011-006-patch-r18.txt) = 2908 bytes
-SHA1 (krb5-1.8.4-signed.tar) = fe1fc21e923ae8dcaa7a26f4f97e0ac49c8e3115
-RMD160 (krb5-1.8.4-signed.tar) = 34d6df8248007bac0321400b2650c2aca774af16
-Size (krb5-1.8.4-signed.tar) = 11642880 bytes
+SHA1 (krb5-1.8.6-signed.tar) = 0a1356c6680578f683b6ffd33044f6f02d69b315
+RMD160 (krb5-1.8.6-signed.tar) = 3faad0306482f99c1467d045767090d298a20ce4
+Size (krb5-1.8.6-signed.tar) = 11950080 bytes
 SHA1 (patch-aa) = cd8cdc594bc872d641ceaba0aa0d91b5f1caf2ae
 SHA1 (patch-ad) = 49a9429d163adb872b1c97ade8ed0e13d8eec3cb
 SHA1 (patch-ae) = c7395b9de5baf6612b8787fad55dbc051a680bfd