head 1.4; access; symbols pkgsrc-2015Q4:1.3.0.28 pkgsrc-2015Q4-base:1.3 pkgsrc-2015Q3:1.3.0.26 pkgsrc-2015Q3-base:1.3 pkgsrc-2015Q2:1.3.0.24 pkgsrc-2015Q2-base:1.3 pkgsrc-2015Q1:1.3.0.22 pkgsrc-2015Q1-base:1.3 pkgsrc-2014Q4:1.3.0.20 pkgsrc-2014Q4-base:1.3 pkgsrc-2014Q3:1.3.0.18 pkgsrc-2014Q3-base:1.3 pkgsrc-2014Q2:1.3.0.16 pkgsrc-2014Q2-base:1.3 pkgsrc-2014Q1:1.3.0.14 pkgsrc-2014Q1-base:1.3 pkgsrc-2013Q4:1.3.0.12 pkgsrc-2013Q4-base:1.3 pkgsrc-2013Q3:1.3.0.10 pkgsrc-2013Q3-base:1.3 pkgsrc-2013Q2:1.3.0.8 pkgsrc-2013Q2-base:1.3 pkgsrc-2013Q1:1.3.0.6 pkgsrc-2013Q1-base:1.3 pkgsrc-2012Q4:1.3.0.4 pkgsrc-2012Q4-base:1.3 pkgsrc-2012Q3:1.3.0.2 pkgsrc-2012Q3-base:1.3 pkgsrc-2012Q2:1.2.0.12 pkgsrc-2012Q2-base:1.2 pkgsrc-2012Q1:1.2.0.10 pkgsrc-2012Q1-base:1.2 pkgsrc-2011Q4:1.2.0.8 pkgsrc-2011Q4-base:1.2 pkgsrc-2011Q3:1.2.0.6 pkgsrc-2011Q3-base:1.2 pkgsrc-2011Q2:1.2.0.4 pkgsrc-2011Q2-base:1.2 pkgsrc-2011Q1:1.2.0.2 pkgsrc-2011Q1-base:1.2 pkgsrc-2010Q4:1.1.0.52 pkgsrc-2010Q4-base:1.1 pkgsrc-2010Q3:1.1.0.50 pkgsrc-2010Q3-base:1.1 pkgsrc-2010Q2:1.1.0.48 pkgsrc-2010Q2-base:1.1 pkgsrc-2010Q1:1.1.0.46 pkgsrc-2010Q1-base:1.1 pkgsrc-2009Q4:1.1.0.44 pkgsrc-2009Q4-base:1.1 pkgsrc-2009Q3:1.1.0.42 pkgsrc-2009Q3-base:1.1 pkgsrc-2009Q2:1.1.0.40 pkgsrc-2009Q2-base:1.1 pkgsrc-2009Q1:1.1.0.38 pkgsrc-2009Q1-base:1.1 pkgsrc-2008Q4:1.1.0.36 pkgsrc-2008Q4-base:1.1 pkgsrc-2008Q3:1.1.0.34 pkgsrc-2008Q3-base:1.1 cube-native-xorg:1.1.0.32 cube-native-xorg-base:1.1 pkgsrc-2008Q2:1.1.0.30 pkgsrc-2008Q2-base:1.1 cwrapper:1.1.0.28 pkgsrc-2008Q1:1.1.0.26 pkgsrc-2008Q1-base:1.1 pkgsrc-2007Q4:1.1.0.24 pkgsrc-2007Q4-base:1.1 pkgsrc-2007Q3:1.1.0.22 pkgsrc-2007Q3-base:1.1 pkgsrc-2007Q2:1.1.0.20 pkgsrc-2007Q2-base:1.1 pkgsrc-2007Q1:1.1.0.18 pkgsrc-2007Q1-base:1.1 pkgsrc-2006Q4:1.1.0.16 pkgsrc-2006Q4-base:1.1 pkgsrc-2006Q3:1.1.0.14 pkgsrc-2006Q3-base:1.1 pkgsrc-2006Q2:1.1.0.12 pkgsrc-2006Q2-base:1.1 pkgsrc-2006Q1:1.1.0.10 pkgsrc-2006Q1-base:1.1 pkgsrc-2005Q4:1.1.0.8 pkgsrc-2005Q4-base:1.1 pkgsrc-2005Q3:1.1.0.6 pkgsrc-2005Q3-base:1.1 pkgsrc-2005Q2:1.1.0.4 pkgsrc-2005Q2-base:1.1 pkgsrc-2005Q1:1.1.0.2; locks; strict; comment @# @; 1.4 date 2016.03.15.15.16.39; author tez; state dead; branches; next 1.3; commitid vfGyRvS5ID9EDKYy; 1.3 date 2012.07.16.19.12.33; author adam; state Exp; branches; next 1.2; 1.2 date 2011.03.22.23.31.04; author tez; state Exp; branches; next 1.1; 1.1 date 2005.04.10.07.15.25; author jlam; state Exp; branches 1.1.2.1; next ; 1.1.2.1 date 2005.04.10.07.15.25; author salo; state dead; branches; next 1.1.2.2; 1.1.2.2 date 2005.05.13.10.08.52; author salo; state Exp; branches; next ; desc @@ 1.4 log @Update to 1.14.1 resolving all reported vulnerabilities including: CVE-2015-2695 CVE-2015-2696 CVE-2015-2697 CVE-2015-2698 CVE-2015-8629 CVE-2015-8630 CVE-2015-8631 @ text @$NetBSD: patch-ak,v 1.3 2012/07/16 19:12:33 adam Exp $ Don't build kadm5_hook and avoid libtool problem. No idea why... copied from previous instance of this package. --- Makefile.in.orig 2012-05-31 23:49:44.000000000 +0000 +++ Makefile.in @@@@ -9,7 +9,6 @@@@ mydir=. # plugins/authdata/greet SUBDIRS=util include lib \ @@sam2_plugin@@ \ - plugins/kadm5_hook/test \ plugins/kdb/db2 \ @@ldap_plugin_dir@@ \ plugins/preauth/pkinit \ @@@@ -64,7 +63,7 @@@@ INSTALLMKDIRS = $(KRB5ROOT) $(KRB5MANROO install-strip: $(MAKE) install INSTALL_STRIP=-s -install-recurse: install-mkdirs +install-recurse: install-mkdirs: @@for i in $(INSTALLMKDIRS); do \ @@@@ -75,7 +74,7 @@@@ install-headers-mkdirs: $(srcdir)/config/mkinstalldirs $(DESTDIR)$(KRB5_INCDIR) $(srcdir)/config/mkinstalldirs $(DESTDIR)$(KRB5_INCDIR)/gssapi $(srcdir)/config/mkinstalldirs $(DESTDIR)$(KRB5_INCDIR)/gssrpc -install-headers-prerecurse: install-headers-mkdirs +install-headers-prerecurse: # install:: # $(MAKE) $(MFLAGS) install.man @ 1.3 log @Changes 1.10.2: This is a bugfix release. * Fix an interop issue with Windows Server 2008 R2 Read-Only Domain Controllers. * Update a workaround for a glibc bug that would cause DNS PTR queries to occur even when rdns = false. * Fix a kadmind denial of service issue (null pointer dereference), which could only be triggered by an administrator with the "create" privilege. [CVE-2012-1013] Changes 1.10.1: This is a bugfix release. * Fix access controls for KDB string attributes [CVE-2012-1012] * Make the ASN.1 encoding of key version numbers interoperate with Windows Read-Only Domain Controllers * Avoid generating spurious password expiry warnings in cases where the KDC sends an account expiry time without a password expiry time. @ text @d1 1 a1 1 $NetBSD$ @ 1.2 log @Update MIT Kerberos to v1.8.3 with the latest security patches up to and including MITKRB5-SA-2011-003. Please see http://web.mit.edu/kerberos/ for the change logs since v1.4.2 Note that the r-services, telnetd and ftpd services and the related client applications are now in a separate pacakge security/mit-krb5-appl. @ text @d3 1 d6 11 a16 3 --- Makefile.in.orig 2010-12-12 17:50:34.797814500 -0600 +++ Makefile.in 2010-12-12 17:51:28.015746400 -0600 @@@@ -88,7 +88,7 @@@@ d25 1 a25 1 @@@@ -99,7 +99,7 @@@@ @ 1.1 log @Updated security/mit-krb5 to krb5-1.4. Changes from version 1.3.6 include: * Merged Athena telnetd changes for creating a new option for requiring encryption. * Add implementation of the RPCSEC_GSS authentication flavor to the RPC library. * The kadmind4 backwards-compatibility admin server and the v5passwdd backwards-compatibility password-changing server have been removed. * Thread safety for krb5 libraries. * Yarrow code now uses AES. * Merged Athena changes to allow ftpd to require encrypted passwords. * Incorporate gss_krb5_set_allowable_enctypes() and gss_krb5_export_lucid_sec_context(), which are needed for NFSv4. * Fix heap buffer overflow in password history mechanism. [MITKRB5-SA-2004-004] @ text @d3 5 a7 3 --- Makefile.in.orig 2004-12-15 15:28:30.000000000 -0500 +++ Makefile.in @@@@ -64,7 +64,7 @@@@ INSTALLMKDIRS = $(KRB5ROOT) $(KRB5MANROO d16 2 a17 1 @@@@ -76,7 +76,7 @@@@ install-headers-mkdirs: a19 1 $(srcdir)/config/mkinstalldirs $(DESTDIR)$(KRB5_INCDIR)/kerberosIV @ 1.1.2.1 log @file patch-ak was added on branch pkgsrc-2005Q1 on 2005-04-10 07:15:25 +0000 @ text @d1 22 @ 1.1.2.2 log @Pullup ticket 444 - requested by Johnny C. Lam security update for mit-krb5 Revisions pulled up: - pkgsrc/security/mit-krb5/Makefile 1.17-1.18, 1.20 - pkgsrc/security/mit-krb5/PLIST 1.6-1.8 - pkgsrc/security/mit-krb5/buildlink3.mk 1.4 - pkgsrc/security/mit-krb5/distinfo 1.9-1.10 - pkgsrc/security/mit-krb5/files/kadmind.sh 1.2 - pkgsrc/security/mit-krb5/files/kdc.sh 1.2 - pkgsrc/security/mit-krb5/patches/patch-aa 1.2 - pkgsrc/security/mit-krb5/patches/patch-ab 1.2 - pkgsrc/security/mit-krb5/patches/patch-ac 1.2 - pkgsrc/security/mit-krb5/patches/patch-ad 1.2 - pkgsrc/security/mit-krb5/patches/patch-ae 1.2 - pkgsrc/security/mit-krb5/patches/patch-af 1.3 - pkgsrc/security/mit-krb5/patches/patch-ag 1.3 - pkgsrc/security/mit-krb5/patches/patch-ai removed - pkgsrc/security/mit-krb5/patches/patch-aj 1.2 - pkgsrc/security/mit-krb5/patches/patch-ak 1.1 - pkgsrc/security/mit-krb5/patches/patch-al 1.1 Module Name: pkgsrc Committed By: jlam Date: Sun Apr 10 07:15:25 UTC 2005 Modified Files: pkgsrc/security/mit-krb5: Makefile PLIST distinfo pkgsrc/security/mit-krb5/files: kadmind.sh kdc.sh pkgsrc/security/mit-krb5/patches: patch-aa patch-ab patch-ac patch-ad patch-ae patch-af patch-ag patch-aj Added Files: pkgsrc/security/mit-krb5/patches: patch-ak Removed Files: pkgsrc/security/mit-krb5/patches: patch-ai Log Message: Updated security/mit-krb5 to krb5-1.4. Changes from version 1.3.6 include: * Merged Athena telnetd changes for creating a new option for requiring encryption. * Add implementation of the RPCSEC_GSS authentication flavor to the RPC library. * The kadmind4 backwards-compatibility admin server and the v5passwdd backwards-compatibility password-changing server have been removed. * Thread safety for krb5 libraries. * Yarrow code now uses AES. * Merged Athena changes to allow ftpd to require encrypted passwords. * Incorporate gss_krb5_set_allowable_enctypes() and gss_krb5_export_lucid_sec_context(), which are needed for NFSv4. * Fix heap buffer overflow in password history mechanism. [MITKRB5-SA-2004-004] --- Module Name: pkgsrc Committed By: jlam Date: Sun Apr 10 07:45:31 UTC 2005 Modified Files: pkgsrc/security/mit-krb5: PLIST Log Message: Remove the examples directory on deinstallation. --- Module Name: pkgsrc Committed By: jlam Date: Sun Apr 10 07:46:51 UTC 2005 Modified Files: pkgsrc/security/mit-krb5: Makefile distinfo Added Files: pkgsrc/security/mit-krb5/patches: patch-al Log Message: Patch from http://web.mit.edu/kerberos/advisories/2005-001-patch_1.4.txt which fixes MITKRB5-SA-2005-001 (CAN-2005-0468 & CAN-2005-0469) relating to buffer overflows in the telnet client. Bump PKGREVISION to 1. --- Module Name: pkgsrc Committed By: jlam Date: Mon Apr 11 22:44:54 UTC 2005 Modified Files: pkgsrc/security/mit-krb5: PLIST Log Message: The FTP daemon is always named "kftpd" regardless of whether prefix-cmds is a PKG_OPTION. --- Module Name: pkgsrc Committed By: jlam Date: Thu Apr 14 23:07:55 UTC 2005 Modified Files: pkgsrc/security/mit-krb5: Makefile Log Message: Remove unused section... MIT krb5 apparently now detects NetBSD's utmpx implementation correctly on NetBSD>=2.0. --- Module Name: pkgsrc Committed By: salo Date: Sat Apr 16 14:32:53 UTC 2005 Modified Files: pkgsrc/security/mit-krb5: buildlink3.mk Log Message: Bump BUILDLINK_RECOMMENDED for latest security fix. (hi jlam!) @ text @a0 22 $NetBSD: patch-ak,v 1.1.2.1 2005/05/13 10:08:52 salo Exp $ --- Makefile.in.orig 2004-12-15 15:28:30.000000000 -0500 +++ Makefile.in @@@@ -64,7 +64,7 @@@@ INSTALLMKDIRS = $(KRB5ROOT) $(KRB5MANROO install-strip: $(MAKE) install INSTALL_STRIP=-s -install-recurse: install-mkdirs +install-recurse: install-mkdirs: @@for i in $(INSTALLMKDIRS); do \ @@@@ -76,7 +76,7 @@@@ install-headers-mkdirs: $(srcdir)/config/mkinstalldirs $(DESTDIR)$(KRB5_INCDIR)/gssapi $(srcdir)/config/mkinstalldirs $(DESTDIR)$(KRB5_INCDIR)/gssrpc $(srcdir)/config/mkinstalldirs $(DESTDIR)$(KRB5_INCDIR)/kerberosIV -install-headers-prerecurse: install-headers-mkdirs +install-headers-prerecurse: # install:: # $(MAKE) $(MFLAGS) install.man @