summaryrefslogtreecommitdiff
path: root/security/mit-krb5
AgeCommit message (Collapse)AuthorFilesLines
2008-06-07Add more patches, now for MITKRB5-SA-2007-006, MITKRB5-SA-2008-001 andtonnerre8-10/+421
MITKRB5-SA-2008-002. Bump PKGREVISION now finally.
2008-06-07Add patches for MITKRB5-SA-2007-004 and MITKRB5-SA-2007-005. PKGREVISIONtonnerre4-28/+132
will be bumped again once some other patches are in.
2008-06-07Remove parts of a different security patch which slipped in but are nottonnerre13-47/+46
supported yet. Don't bump revision as the package didn't build before.
2008-06-07Add security patches for 3 Kerberos vulnerabilities:tonnerre14-3/+932
- telnetd username and environment sanitizing vulnerabilities ("-f root") as described in MIT Kerberos advisory 2007-001. - krb5_klog_syslog() problems with overly long log strings as described in MIT Kerberos advisory 2007-002. - GSS API kg_unseal_v1() double free vulnerability as described in the MIT Kerberos advisory 2007-003.
2007-12-28Recognize the MIT Kerberos bundled with Mac OS X Leopard.tron1-1/+7
2007-06-22Remove RESTRICTED comment about US export control. (While lots ofgdt1-3/+1
things are restricted, pkgsrc's labeling rules aren't intended to address export control issues, and there are vast numbers of packages with apparently similar export control status and no RESTRICTED.)
2007-02-22Whitespace cleanup, courtesy of pkglint.wiz1-2/+2
Patch provided by Sergey Svishchev in private mail.
2007-01-18Fix building with Autoconf 2.60 and newer.salo1-5/+62
Addresses PR pkg/34252 by Matthias Petermann. Also delint a bit.
2007-01-17Security fix for CVE-2006-6143:salo3-3/+29
"An unauthenticated user may cause execution of arbitrary code in kadmind, which can compromise the Kerberos key database and host security. (kadmind usually runs as root.) Unsuccessful exploitation, or even accidental replication of the required conditions by non-malicious users, can result in kadmind crashing." http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-002-rpc.txt http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6143 Patch from MIT.
2006-08-09Security fixes for SA21402:salo9-3/+199
"A security issue has been reported in Kerberos, which potentially can be exploited by malicious, local users to perform certain actions with escalated privileges. The security issue is caused due to missing checks for whether the "setuid()" call has succeeded in the bundled krshd and v4rcp applications. This can be exploited to disclose or manipulate the contents of arbitrary files or execute arbitrary code with root privileges if the "setuid()" call fails due to e.g. resource limits." http://secunia.com/advisories/21402/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3083 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3084 http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-001-setuid.txt Bump PKGREVISION.
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-04-22Removed the superfluous "quotes" and 'quotes' from variables that don'trillig1-2/+2
need them, for example RESTRICTED and SUBST_MESSAGE.*.
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-10At least look for "Massachusetts Institute of Technology" as a crudejlam1-23/+18
check for MIT Kerberos 5 when inspecting /usr/include/krb5.h. Also, bring this file more in line with heimdal/builtin.mk.
2006-04-10Teach Kerberos 5 to detect the MIT Kerberos 5 bundled with Mac OS X.tron1-0/+70
This stops the "gnome-vfs2" package from pulling in the "heimdal" package. This fixes PR pkg/29946 by Juha-Matti Liukkonen.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-3/+3
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-03-20* Nuke all references to and definitions of INFO_DIR in package Makefilesjlam2-12/+12
and replace with appropriate references to PKGINFODIR instead. * Properly account for split info files during installation. * Move info file listings directly into the package PLISTs. This fixes info-file-related PLIST problems.
2006-03-17Fix path in patch.joerg2-5/+5
2006-03-14Drop maintainership for packages that I no longer have time to maintain.jlam1-2/+2
2006-03-08update patchsum for patch-al.joerg1-1/+2
2006-02-24Add DragonFly support. Fallback to LINE_MAX if BUFSIZ is not defined.joerg3-3/+32
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-17Change my MAINTAINER email address to the one I've been using forjlam1-2/+2
pkgsrc work.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig1-4/+4
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig1-4/+4
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-10-05Remove some more *LEGACY* settings that are over a month old andwiz1-3/+1
thus were before 2005Q3.
2005-09-22Update security/mit-krb5 to version 1.4.2 Changes from version 1.4jlam5-116/+19
include: * Fix [MITKRB5-SA-2005-002] KDC double-free and heap overflow. * Fix [MITKRB5-SA-2005-003] krb5_recvauth() double-free.
2005-07-15Drop distinction between PKGSRC_USE_TOOLS and USE_TOOLS by makingjlam1-3/+2
PKGSRC_USE_TOOLS go away. There is now only a single USE_TOOLS variable that specifies all of the tools we need to build/run the package.
2005-06-20Disable thread support per request of jlam.kristerw1-5/+3
Bump PKGREVISION.
2005-06-16This package need pthreads in order to build.kristerw1-1/+4
2005-06-01Remove mk/autoconf.mk and mk/automake.mk and replace their usage withjlam1-4/+3
USE_TOOLS and any of "autoconf", "autoconf213", "automake" or "automake14". Also, we don't need to call the auto* tools via ${ACLOCAL}, ${AUTOCONF}, etc., since the tools framework takes care to symlink the correct tool to the correct name, so we can just use aclocal, autoconf, etc.
2005-05-31Rename option prefix-cmds to kerberos-prefix-cmds. Backwardsdillo1-4/+5
compatibility provided via PKG_OPTIONS_LEGACY_OPTS.
2005-05-31Packages have no business modifying PKG_DEFAULT_OPTIONS -- it's adillo1-5/+3
user settable variable. Set PKG_SUGGESTED_OPTIONS instead. Also, make use of PKG_OPTIONS_LEGACY_VARS. Reviewed by wiz.
2005-05-22Remove the old tools framework and references to _USE_NEW_TOOLS.jlam1-8/+1
2005-05-16This package needs gzcat to extract the .tar.gz file inside the originaljlam1-1/+5
.tar file. Also, fix the yacc silliness while we're here.
2005-05-13Fix PLIST by adding missing compile_et.1.jlam1-1/+2
2005-05-03Sort.wiz1-2/+2
2005-05-02RCD_SCRIPTS_EXAMPLEDIR is no longer customizable.reed1-1/+3
And always is defined as share/examples/rc.d which was the default before. This rc.d scripts are not automatically added to PLISTs now also. So add to each corresponding PLIST as required. This was discussed on tech-pkg in late January and late April. Todo: remove the RCD_SCRIPTS_EXAMPLEDIR uses in MESSAGES and elsewhere and remove the RCD_SCRIPTS_EXAMPLEDIR itself.
2005-04-16Bump BUILDLINK_RECOMMENDED for latest security fix. (hi jlam!)salo1-2/+2
2005-04-14Remove unused section... MIT krb5 apparently now detects NetBSD's utmpxjlam1-9/+1
implementation correctly on NetBSD>=2.0.
2005-04-11The FTP daemon is always named "kftpd" regardless of whether prefix-cmdsjlam1-2/+2
is a PKG_OPTION.
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-04-10Patch from http://web.mit.edu/kerberos/advisories/2005-001-patch_1.4.txtjlam3-2/+100
which fixes MITKRB5-SA-2005-001 (CAN-2005-0468 & CAN-2005-0469) relating to buffer overflows in the telnet client. Bump PKGREVISION to 1.
2005-04-10Remove the examples directory on deinstallation.jlam1-1/+2
2005-04-10Updated security/mit-krb5 to krb5-1.4. Changes from version 1.3.6 include:jlam15-162/+184
* Merged Athena telnetd changes for creating a new option for requiring encryption. * Add implementation of the RPCSEC_GSS authentication flavor to the RPC library. * The kadmind4 backwards-compatibility admin server and the v5passwdd backwards-compatibility password-changing server have been removed. * Thread safety for krb5 libraries. * Yarrow code now uses AES. * Merged Athena changes to allow ftpd to require encrypted passwords. * Incorporate gss_krb5_set_allowable_enctypes() and gss_krb5_export_lucid_sec_context(), which are needed for NFSv4. * Fix heap buffer overflow in password history mechanism. [MITKRB5-SA-2004-004]
2005-02-24Add RMD160 digests.agc1-1/+2
2004-12-28The default location of the pkgsrc-installed rc.d scripts is nowreed1-1/+2
under share/examples/rc.d. The variable name already was named RCD_SCRIPTS_EXAMPLEDIR. This is from ideas from Greg Woods and others. Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism (as requested by wiz).
2004-12-23Update security/mit-krb5 to 1.3.6.jlam2-34/+16
NOTE: THIS IS A SECURITY UPDATE. Changes from version 1.3.4 include: * [2841] Fix heap buffer overflow in password history mechanism. [MITKRB5-SA-2004-004] * [2682] Fix ftpd hang caused by empty PASS command. * [2686] Fix double-free errors. [MITKRB5-SA-2004-002] * [2687] Fix denial-of-service vulnerability in ASN.1 decoder. [MITKRB5-SA-2004-003]
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv2-4/+4
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-01 18:06:46 +0000