CVS commit: pkgsrc/security/mit-krb5

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Jul  8 09:59:28 UTC 2011

Modified Files:
        pkgsrc/security/mit-krb5: Makefile buildlink3.mk distinfo

Log Message:
Changes 1.8.4:
This is primarily a bugfix release.
Fix vulnerabilities:
* KDC uninitialized pointer crash [MITKRB5-SA-2010-006 CVE-2010-1322]
* kpropd denial of service [MITKRB5-SA-2011-001 CVE-2010-4022]
* KDC denial of service attacks [MITKRB5-SA-2011-002 CVE-2011-0281 
CVE-2011-0282 CVE-2011-0283]
* KDC double-free when PKINIT enabled [MITKRB5-SA-2011-003 CVE-2011-0284]
* kadmind frees invalid pointer [MITKRB5-SA-2011-004 CVE-2011-0285]
Interoperability:
* Correctly encrypt GSSAPI forwarded credentials using the session key, not
  a subkey.
* Set NT-SRV-INST on TGS principal names as expected by some Windows Server
  Domain Controllers.
* Don't reject AP-REQ messages if their PAC doesn't validate; suppress the PAC
  instead.
* Correctly validate HMAC-MD5 checksums that use DES keys


To generate a diff of this commit:
cvs rdiff -u -r1.53 -r1.54 pkgsrc/security/mit-krb5/Makefile
cvs rdiff -u -r1.11 -r1.12 pkgsrc/security/mit-krb5/buildlink3.mk
cvs rdiff -u -r1.30 -r1.31 pkgsrc/security/mit-krb5/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.