From 48b0c4c6016d044fcfeace003fc270fae80ad786 Mon Sep 17 00:00:00 2001 From: adam Date: Sun, 26 Feb 2012 13:14:19 +0000 Subject: Changes 1.8.6: This is primarily a bugfix release. * Fix an interaction in iprop that could cause spurious excess kadmind processes when a kprop child fails. Changes 1.8.5: This is primarily a bugfix release. * Fix MITKRB5-SA-2011-006 KDC denial of service vulnerabilities [CVE-2011-1528 CVE-2011-1529 CVE-2011-4151]. --- security/mit-krb5/Makefile | 9 ++++----- security/mit-krb5/PLIST | 10 +++++----- security/mit-krb5/distinfo | 8 ++++---- 3 files changed, 13 insertions(+), 14 deletions(-) (limited to 'security') diff --git a/security/mit-krb5/Makefile b/security/mit-krb5/Makefile index c0559092b96..7d2fc75669f 100644 --- a/security/mit-krb5/Makefile +++ b/security/mit-krb5/Makefile @@ -1,15 +1,14 @@ -# $NetBSD: Makefile,v 1.55 2011/10/23 19:58:16 tez Exp $ +# $NetBSD: Makefile,v 1.56 2012/02/26 13:14:19 adam Exp $ -DISTNAME= krb5-1.8.4 +DISTNAME= krb5-1.8.6 PKGNAME= mit-${DISTNAME} -PKGREVISION= 1 CATEGORIES= security MASTER_SITES= http://web.mit.edu/kerberos/dist/krb5/1.8/ EXTRACT_SUFX= .tar DISTFILES= ${DISTNAME}-signed${EXTRACT_SUFX} -PATCH_SITES= http://web.mit.edu/kerberos/advisories/ -PATCHFILES= 2011-006-patch-r18.txt +#PATCH_SITES= http://web.mit.edu/kerberos/advisories/ +#PATCHFILES= 2011-006-patch-r18.txt MAINTAINER= tez@NetBSD.org HOMEPAGE= http://web.mit.edu/kerberos/ diff --git a/security/mit-krb5/PLIST b/security/mit-krb5/PLIST index 52bec8c0996..a14b6484f03 100644 --- a/security/mit-krb5/PLIST +++ b/security/mit-krb5/PLIST @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.14 2011/03/22 23:31:04 tez Exp $ +@comment $NetBSD: PLIST,v 1.15 2012/02/26 13:14:19 adam Exp $ bin/compile_et bin/gss-client bin/k5srvutil @@ -20,12 +20,12 @@ include/gssapi/gssapi.h include/gssapi/gssapi_ext.h include/gssapi/gssapi_generic.h include/gssapi/gssapi_krb5.h +include/gssapi/mechglue.h include/gssrpc/auth.h include/gssrpc/auth_gss.h include/gssrpc/auth_gssapi.h include/gssrpc/auth_unix.h include/gssrpc/clnt.h -include/gssapi/mechglue.h include/gssrpc/netdb.h include/gssrpc/pmap_clnt.h include/gssrpc/pmap_prot.h @@ -48,6 +48,9 @@ include/profile.h info/krb5-admin.info info/krb5-install.info info/krb5-user.info +lib/krb5/plugins/kdb/libdb2.la +lib/krb5/plugins/preauth/libencrypted_challenge.la +lib/krb5/plugins/preauth/libpkinit.la lib/libcom_err.la lib/libgssapi_krb5.la lib/libgssrpc.la @@ -59,9 +62,6 @@ lib/libkadm5srv_mit.la lib/libkdb5.la lib/libkrb5.la lib/libkrb5support.la -lib/krb5/plugins/kdb/libdb2.la -lib/krb5/plugins/preauth/libencrypted_challenge.la -lib/krb5/plugins/preauth/libpkinit.la man/man1/compile_et.1 man/man1/k5srvutil.1 man/man1/kadmin.1 diff --git a/security/mit-krb5/distinfo b/security/mit-krb5/distinfo index 605b687c13a..fcee86724c3 100644 --- a/security/mit-krb5/distinfo +++ b/security/mit-krb5/distinfo @@ -1,11 +1,11 @@ -$NetBSD: distinfo,v 1.32 2011/10/23 19:58:16 tez Exp $ +$NetBSD: distinfo,v 1.33 2012/02/26 13:14:19 adam Exp $ SHA1 (2011-006-patch-r18.txt) = 30b66b6c5dce537d66874ac58e622b3f6e992ac6 RMD160 (2011-006-patch-r18.txt) = 829a6d2dc876190996e90e0a6a43e2d018cbaaa5 Size (2011-006-patch-r18.txt) = 2908 bytes -SHA1 (krb5-1.8.4-signed.tar) = fe1fc21e923ae8dcaa7a26f4f97e0ac49c8e3115 -RMD160 (krb5-1.8.4-signed.tar) = 34d6df8248007bac0321400b2650c2aca774af16 -Size (krb5-1.8.4-signed.tar) = 11642880 bytes +SHA1 (krb5-1.8.6-signed.tar) = 0a1356c6680578f683b6ffd33044f6f02d69b315 +RMD160 (krb5-1.8.6-signed.tar) = 3faad0306482f99c1467d045767090d298a20ce4 +Size (krb5-1.8.6-signed.tar) = 11950080 bytes SHA1 (patch-aa) = cd8cdc594bc872d641ceaba0aa0d91b5f1caf2ae SHA1 (patch-ad) = 49a9429d163adb872b1c97ade8ed0e13d8eec3cb SHA1 (patch-ae) = c7395b9de5baf6612b8787fad55dbc051a680bfd -- cgit v1.2.3