kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/mit-krb5-appl/distinfo

12 lines
655 B
Text
Raw Normal View History

Fix for CVE-2011-4862 from FreeBSD When an encryption key is supplied via the TELNET protocol, its length is not validated before the key is copied into a fixed-size buffer. This is a remote root exploit that is being actively exploited in the wild.
2011-12-23 17:44:24 +01:00
$NetBSD: distinfo,v 1.4 2011/12/23 16:44:24 tez Exp $
Kerberos V5 is an authentication system developed at MIT. It is a network authentication protocol designed to provide strong authentication for client/server applications by using secret-key cryptography. (Kerberos 5 is discussed in RFC 1510.) This package provides MIT Kerberos applications and servers for telnet, the r-services and ftp. These were recently split from the mit-krb5 package due to upstream making the same split.
2011-03-23 01:01:38 +01:00
Add fix for MITKRB5-SA-2011-005 (ftpd fails to setegid from daemon)
2011-07-05 21:48:59 +02:00
SHA1 (2011-005-patch.txt) = 5e52a66b299407f54038fc287732160aabce51ff
RMD160 (2011-005-patch.txt) = 780d9769e3b2661b927b26295f14a31dee314213
Size (2011-005-patch.txt) = 2076 bytes
Kerberos V5 is an authentication system developed at MIT. It is a network authentication protocol designed to provide strong authentication for client/server applications by using secret-key cryptography. (Kerberos 5 is discussed in RFC 1510.) This package provides MIT Kerberos applications and servers for telnet, the r-services and ftp. These were recently split from the mit-krb5 package due to upstream making the same split.
2011-03-23 01:01:38 +01:00
SHA1 (krb5-appl-1.0.1-signed.tar) = 128662c9860f61a51c9bcaf1b6217467faa12324
RMD160 (krb5-appl-1.0.1-signed.tar) = ca0668b623dcf4dc5a0699fa47d86660aac5544a
Size (krb5-appl-1.0.1-signed.tar) = 645120 bytes
SHA1 (patch-ab) = 4522fcdb396d2079ac6405926a64f907d94a2593
Don't use "bool" as a variable name. This package now builds. (at long last)
2011-12-18 19:05:13 +01:00
SHA1 (patch-gssftp_ftp_cmds_c) = 24942a2bcfc0cb0ce3045da5468d315c5b1bfadb
Fix for CVE-2011-4862 from FreeBSD When an encryption key is supplied via the TELNET protocol, its length is not validated before the key is copied into a fixed-size buffer. This is a remote root exploit that is being actively exploited in the wild.
2011-12-23 17:44:24 +01:00
SHA1 (patch-telnet_libtelnet_encrypt.c) = 26e21d72c6f5bad4af2c733c2fe63fdc65a78bf2
Reference in a new issue Copy permalink