Sun Feb 26 13:14:19 2012 UTC ()
Changes 1.8.6:
This is primarily a bugfix release.
* Fix an interaction in iprop that could cause spurious excess kadmind processes
  when a kprop child fails.

Changes 1.8.5:
This is primarily a bugfix release.
* Fix MITKRB5-SA-2011-006 KDC denial of service vulnerabilities
  [CVE-2011-1528 CVE-2011-1529 CVE-2011-4151].


(adam)
diff -r1.55 -r1.56 pkgsrc/security/mit-krb5/Makefile
diff -r1.14 -r1.15 pkgsrc/security/mit-krb5/PLIST
diff -r1.32 -r1.33 pkgsrc/security/mit-krb5/distinfo
cvs diff -r1.55 -r1.56 pkgsrc/security/mit-krb5/Makefile (expand / switch to context diff)
--- pkgsrc/security/mit-krb5/Makefile 2011/10/23 19:58:16 1.55
+++ pkgsrc/security/mit-krb5/Makefile 2012/02/26 13:14:19 1.56
@@ -1,15 +1,14 @@
-# $NetBSD: Makefile,v 1.55 2011/10/23 19:58:16 tez Exp $
+# $NetBSD: Makefile,v 1.56 2012/02/26 13:14:19 adam Exp $
 
-DISTNAME=	krb5-1.8.4
+DISTNAME=	krb5-1.8.6
 PKGNAME=	mit-${DISTNAME}
-PKGREVISION=	1
 CATEGORIES=	security
 MASTER_SITES=	http://web.mit.edu/kerberos/dist/krb5/1.8/
 EXTRACT_SUFX=	.tar
 DISTFILES=	${DISTNAME}-signed${EXTRACT_SUFX}
 
-PATCH_SITES=	http://web.mit.edu/kerberos/advisories/
-PATCHFILES=	2011-006-patch-r18.txt
+#PATCH_SITES=	http://web.mit.edu/kerberos/advisories/
+#PATCHFILES=	2011-006-patch-r18.txt
 
 MAINTAINER=	tez@NetBSD.org
 HOMEPAGE=	http://web.mit.edu/kerberos/
cvs diff -r1.14 -r1.15 pkgsrc/security/mit-krb5/PLIST (expand / switch to context diff)
--- pkgsrc/security/mit-krb5/PLIST 2011/03/22 23:31:04 1.14
+++ pkgsrc/security/mit-krb5/PLIST 2012/02/26 13:14:19 1.15
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.14 2011/03/22 23:31:04 tez Exp $
+@comment $NetBSD: PLIST,v 1.15 2012/02/26 13:14:19 adam Exp $
 bin/compile_et
 bin/gss-client
 bin/k5srvutil
@@ -20,12 +20,12 @@
 include/gssapi/gssapi_ext.h
 include/gssapi/gssapi_generic.h
 include/gssapi/gssapi_krb5.h
+include/gssapi/mechglue.h
 include/gssrpc/auth.h
 include/gssrpc/auth_gss.h
 include/gssrpc/auth_gssapi.h
 include/gssrpc/auth_unix.h
 include/gssrpc/clnt.h
-include/gssapi/mechglue.h
 include/gssrpc/netdb.h
 include/gssrpc/pmap_clnt.h
 include/gssrpc/pmap_prot.h
@@ -48,6 +48,9 @@
 info/krb5-admin.info
 info/krb5-install.info
 info/krb5-user.info
+lib/krb5/plugins/kdb/libdb2.la
+lib/krb5/plugins/preauth/libencrypted_challenge.la
+lib/krb5/plugins/preauth/libpkinit.la
 lib/libcom_err.la
 lib/libgssapi_krb5.la
 lib/libgssrpc.la
@@ -59,9 +62,6 @@
 lib/libkdb5.la
 lib/libkrb5.la
 lib/libkrb5support.la
-lib/krb5/plugins/kdb/libdb2.la
-lib/krb5/plugins/preauth/libencrypted_challenge.la
-lib/krb5/plugins/preauth/libpkinit.la
 man/man1/compile_et.1
 man/man1/k5srvutil.1
 man/man1/kadmin.1
cvs diff -r1.32 -r1.33 pkgsrc/security/mit-krb5/distinfo (expand / switch to context diff)
--- pkgsrc/security/mit-krb5/distinfo 2011/10/23 19:58:16 1.32
+++ pkgsrc/security/mit-krb5/distinfo 2012/02/26 13:14:19 1.33
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.32 2011/10/23 19:58:16 tez Exp $
+$NetBSD: distinfo,v 1.33 2012/02/26 13:14:19 adam Exp $
 
 SHA1 (2011-006-patch-r18.txt) = 30b66b6c5dce537d66874ac58e622b3f6e992ac6
 RMD160 (2011-006-patch-r18.txt) = 829a6d2dc876190996e90e0a6a43e2d018cbaaa5
 Size (2011-006-patch-r18.txt) = 2908 bytes
-SHA1 (krb5-1.8.4-signed.tar) = fe1fc21e923ae8dcaa7a26f4f97e0ac49c8e3115
-RMD160 (krb5-1.8.4-signed.tar) = 34d6df8248007bac0321400b2650c2aca774af16
-Size (krb5-1.8.4-signed.tar) = 11642880 bytes
+SHA1 (krb5-1.8.6-signed.tar) = 0a1356c6680578f683b6ffd33044f6f02d69b315
+RMD160 (krb5-1.8.6-signed.tar) = 3faad0306482f99c1467d045767090d298a20ce4
+Size (krb5-1.8.6-signed.tar) = 11950080 bytes
 SHA1 (patch-aa) = cd8cdc594bc872d641ceaba0aa0d91b5f1caf2ae
 SHA1 (patch-ad) = 49a9429d163adb872b1c97ade8ed0e13d8eec3cb
 SHA1 (patch-ae) = c7395b9de5baf6612b8787fad55dbc051a680bfd