Commit graph

4 commits

Author SHA1 Message Date
tez
91d0631a40 Update to 1.14.1 resolving all reported vulnerabilities including:
CVE-2015-2695
CVE-2015-2696
CVE-2015-2697
CVE-2015-2698
CVE-2015-8629
CVE-2015-8630
CVE-2015-8631
2016-03-15 15:16:39 +00:00
tez
dc3953a58d Update MIT Kerberos to v1.8.3 with the latest security patches up to and
including MITKRB5-SA-2011-003.

Please see http://web.mit.edu/kerberos/ for the change logs since v1.4.2

Note that the r-services, telnetd and ftpd services and the related client
applications are now in a separate pacakge security/mit-krb5-appl.
2011-03-22 23:31:04 +00:00
jlam
46c042ccc9 Updated security/mit-krb5 to krb5-1.4. Changes from version 1.3.6 include:
* Merged Athena telnetd changes for creating a new option for requiring
    encryption.
* Add implementation of the RPCSEC_GSS authentication flavor to the RPC
    library.
* The kadmind4 backwards-compatibility admin server and the v5passwdd
    backwards-compatibility password-changing server have been removed.
* Thread safety for krb5 libraries.
* Yarrow code now uses AES.
* Merged Athena changes to allow ftpd to require encrypted passwords.
* Incorporate gss_krb5_set_allowable_enctypes() and
    gss_krb5_export_lucid_sec_context(), which are needed for NFSv4.
* Fix heap buffer overflow in password history mechanism.
    [MITKRB5-SA-2004-004]
2005-04-10 07:15:24 +00:00
jlam
4464ecf94a Fix up the krb5-config script to not emit "$(LIBTOOL) --mode=link". Don't
bother with a PKGREVSION bump since this package is 15 minutes old.
2004-03-30 19:10:08 +00:00