* [gentoo-commits] repo/gentoo:master commit in: app-crypt/mit-krb5/files/
@ 2015-11-04 5:04 Eray Aslan
0 siblings, 0 replies; 5+ messages in thread
From: Eray Aslan @ 2015-11-04 5:04 UTC (permalink / raw
To: gentoo-commits
commit: a8b3cea5debedb7a82f72d68f31aee17a66214df
Author: Eray Aslan <eras <AT> gentoo <DOT> org>
AuthorDate: Wed Nov 4 05:00:44 2015 +0000
Commit: Eray Aslan <eras <AT> gentoo <DOT> org>
CommitDate: Wed Nov 4 05:00:44 2015 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a8b3cea5
app-crypt/mit-krb5: fix quotes in init script
Gentoo-Bug: 564574
Package-Manager: portage-2.2.23
app-crypt/mit-krb5/files/mit-krb5kadmind.initd-r2 | 2 +-
app-crypt/mit-krb5/files/mit-krb5kdc.initd-r2 | 2 +-
app-crypt/mit-krb5/files/mit-krb5kpropd.initd-r2 | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/app-crypt/mit-krb5/files/mit-krb5kadmind.initd-r2 b/app-crypt/mit-krb5/files/mit-krb5kadmind.initd-r2
index 54dcb87..5278c7a 100644
--- a/app-crypt/mit-krb5/files/mit-krb5kadmind.initd-r2
+++ b/app-crypt/mit-krb5/files/mit-krb5kadmind.initd-r2
@@ -14,7 +14,7 @@ depend() {
start() {
ebegin "Starting $daemon"
- start-stop-daemon --start --quiet --exec ${exec} -- "${KADMIND_OPTS}" 1>&2
+ start-stop-daemon --start --quiet --exec ${exec} -- ${KADMIND_OPTS} 1>&2
eend $? "Error starting $daemon"
}
diff --git a/app-crypt/mit-krb5/files/mit-krb5kdc.initd-r2 b/app-crypt/mit-krb5/files/mit-krb5kdc.initd-r2
index 12bb47a..eab0cd1 100644
--- a/app-crypt/mit-krb5/files/mit-krb5kdc.initd-r2
+++ b/app-crypt/mit-krb5/files/mit-krb5kdc.initd-r2
@@ -13,7 +13,7 @@ depend() {
start() {
ebegin "Starting $daemon"
- start-stop-daemon --start --quiet --exec ${exec} -- "${KDC_OPTS}" 1>&2
+ start-stop-daemon --start --quiet --exec ${exec} -- ${KDC_OPTS} 1>&2
eend $? "Error starting $daemon"
}
diff --git a/app-crypt/mit-krb5/files/mit-krb5kpropd.initd-r2 b/app-crypt/mit-krb5/files/mit-krb5kpropd.initd-r2
index 222c5f7..5459466 100644
--- a/app-crypt/mit-krb5/files/mit-krb5kpropd.initd-r2
+++ b/app-crypt/mit-krb5/files/mit-krb5kpropd.initd-r2
@@ -13,7 +13,7 @@ depend() {
start() {
ebegin "Starting $daemon"
- start-stop-daemon --start --quiet --exec ${exec} -- "${KPROPD_OPTS}" 1>&2
+ start-stop-daemon --start --quiet --exec ${exec} -- ${KPROPD_OPTS} 1>&2
eend $? "Error starting $daemon"
}
^ permalink raw reply related [flat|nested] 5+ messages in thread
* [gentoo-commits] repo/gentoo:master commit in: app-crypt/mit-krb5/files/
@ 2020-11-10 7:45 Eray Aslan
0 siblings, 0 replies; 5+ messages in thread
From: Eray Aslan @ 2020-11-10 7:45 UTC (permalink / raw
To: gentoo-commits
commit: 295e514a3ac604a4acbdae3dd3d18d7372fdfe2e
Author: Eray Aslan <eras <AT> gentoo <DOT> org>
AuthorDate: Tue Nov 10 07:45:08 2020 +0000
Commit: Eray Aslan <eras <AT> gentoo <DOT> org>
CommitDate: Tue Nov 10 07:45:23 2020 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=295e514a
app-crypt/mit-krb5: add missing patch
Package-Manager: Portage-3.0.9, Repoman-3.0.2
Signed-off-by: Eray Aslan <eras <AT> gentoo.org>
app-crypt/mit-krb5/files/CVE-2020-28196.patch | 71 +++++++++++++++++++++++++++
1 file changed, 71 insertions(+)
diff --git a/app-crypt/mit-krb5/files/CVE-2020-28196.patch b/app-crypt/mit-krb5/files/CVE-2020-28196.patch
new file mode 100644
index 00000000000..486078437e8
--- /dev/null
+++ b/app-crypt/mit-krb5/files/CVE-2020-28196.patch
@@ -0,0 +1,71 @@
+diff --git a/src/lib/krb5/asn.1/asn1_encode.c b/src/lib/krb5/asn.1/asn1_encode.c
+index a160cf4fe8..cd6b879f77 100644
+--- a/lib/krb5/asn.1/asn1_encode.c
++++ b/lib/krb5/asn.1/asn1_encode.c
+@@ -356,7 +356,7 @@ make_tag(asn1buf *buf, const taginfo *t, size_t len)
+ static krb5_error_code
+ get_tag(const uint8_t *asn1, size_t len, taginfo *tag_out,
+ const uint8_t **contents_out, size_t *clen_out,
+- const uint8_t **remainder_out, size_t *rlen_out)
++ const uint8_t **remainder_out, size_t *rlen_out, int recursion)
+ {
+ krb5_error_code ret;
+ uint8_t o;
+@@ -394,9 +394,11 @@ get_tag(const uint8_t *asn1, size_t len, taginfo *tag_out,
+ /* Indefinite form (should not be present in DER, but we accept it). */
+ if (tag_out->construction != CONSTRUCTED)
+ return ASN1_MISMATCH_INDEF;
++ if (recursion >= 32)
++ return ASN1_OVERFLOW;
+ p = asn1;
+ while (!(len >= 2 && p[0] == 0 && p[1] == 0)) {
+- ret = get_tag(p, len, &t, &c, &clen, &p, &len);
++ ret = get_tag(p, len, &t, &c, &clen, &p, &len, recursion + 1);
+ if (ret)
+ return ret;
+ }
+@@ -613,7 +615,7 @@ split_der(asn1buf *buf, uint8_t *const *der, size_t len, taginfo *tag_out)
+ const uint8_t *contents, *remainder;
+ size_t clen, rlen;
+
+- ret = get_tag(*der, len, tag_out, &contents, &clen, &remainder, &rlen);
++ ret = get_tag(*der, len, tag_out, &contents, &clen, &remainder, &rlen, 0);
+ if (ret)
+ return ret;
+ if (rlen != 0)
+@@ -1199,7 +1201,7 @@ decode_atype(const taginfo *t, const uint8_t *asn1, size_t len,
+ const uint8_t *rem;
+ size_t rlen;
+ if (!tag->implicit) {
+- ret = get_tag(asn1, len, &inner_tag, &asn1, &len, &rem, &rlen);
++ ret = get_tag(asn1, len, &inner_tag, &asn1, &len, &rem, &rlen, 0);
+ if (ret)
+ return ret;
+ /* Note: we don't check rlen (it should be 0). */
+@@ -1420,7 +1422,7 @@ decode_sequence(const uint8_t *asn1, size_t len, const struct seq_info *seq,
+ for (i = 0; i < seq->n_fields; i++) {
+ if (len == 0)
+ break;
+- ret = get_tag(asn1, len, &t, &contents, &clen, &asn1, &len);
++ ret = get_tag(asn1, len, &t, &contents, &clen, &asn1, &len, 0);
+ if (ret)
+ goto error;
+ /*
+@@ -1478,7 +1480,7 @@ decode_sequence_of(const uint8_t *asn1, size_t len,
+ *seq_out = NULL;
+ *count_out = 0;
+ while (len > 0) {
+- ret = get_tag(asn1, len, &t, &contents, &clen, &asn1, &len);
++ ret = get_tag(asn1, len, &t, &contents, &clen, &asn1, &len, 0);
+ if (ret)
+ goto error;
+ if (!check_atype_tag(elemtype, &t)) {
+@@ -1584,7 +1586,7 @@ k5_asn1_full_decode(const krb5_data *code, const struct atype_info *a,
+
+ *retrep = NULL;
+ ret = get_tag((uint8_t *)code->data, code->length, &t, &contents,
+- &clen, &remainder, &rlen);
++ &clen, &remainder, &rlen, 0);
+ if (ret)
+ return ret;
+ /* rlen should be 0, but we don't check it (and due to padding in
^ permalink raw reply related [flat|nested] 5+ messages in thread
* [gentoo-commits] repo/gentoo:master commit in: app-crypt/mit-krb5/files/
@ 2021-02-11 19:41 Eray Aslan
0 siblings, 0 replies; 5+ messages in thread
From: Eray Aslan @ 2021-02-11 19:41 UTC (permalink / raw
To: gentoo-commits
commit: 06e87c407ab5a5a1798d1fb5e8752d211d56c017
Author: Eray Aslan <eras <AT> gentoo <DOT> org>
AuthorDate: Thu Feb 11 19:40:53 2021 +0000
Commit: Eray Aslan <eras <AT> gentoo <DOT> org>
CommitDate: Thu Feb 11 19:40:53 2021 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=06e87c40
app-crypt/mit-krb5: add missing patch
Closes: https://bugs.gentoo.org/770100
Package-Manager: Portage-3.0.14, Repoman-3.0.2
Signed-off-by: Eray Aslan <eras <AT> gentoo.org>
app-crypt/mit-krb5/files/mit-krb5_dont_create_rundir.patch | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/app-crypt/mit-krb5/files/mit-krb5_dont_create_rundir.patch b/app-crypt/mit-krb5/files/mit-krb5_dont_create_rundir.patch
new file mode 100644
index 00000000000..4cc7d826ee5
--- /dev/null
+++ b/app-crypt/mit-krb5/files/mit-krb5_dont_create_rundir.patch
@@ -0,0 +1,10 @@
+--- src/Makefile.in 2019-12-12 10:15:51.674552983 +0300
++++ src/Makefile.in 2019-12-12 10:16:33.205543490 +0300
+@@ -71,7 +71,6 @@
+ $(KRB5_AD_MODULE_DIR) \
+ $(KRB5_LIBKRB5_MODULE_DIR) $(KRB5_TLS_MODULE_DIR) \
+ $(localstatedir) $(localstatedir)/krb5kdc \
+- $(runstatedir) $(runstatedir)/krb5kdc \
+ $(KRB5_INCSUBDIRS) $(datadir) $(EXAMPLEDIR) \
+ $(PKGCONFIG_DIR)
+
^ permalink raw reply related [flat|nested] 5+ messages in thread
* [gentoo-commits] repo/gentoo:master commit in: app-crypt/mit-krb5/files/
@ 2022-09-02 5:53 Sam James
0 siblings, 0 replies; 5+ messages in thread
From: Sam James @ 2022-09-02 5:53 UTC (permalink / raw
To: gentoo-commits
commit: 09d8637beeecaf66e01bd132663e1efe3637c8da
Author: Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Fri Sep 2 05:53:42 2022 +0000
Commit: Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Fri Sep 2 05:53:42 2022 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=09d8637b
app-crypt/mit-krb5: commit patch
Fixes: 1df08748602b2f8fac92f1c1bfb236c13d456fc6
Signed-off-by: Sam James <sam <AT> gentoo.org>
.../files/mit-krb5-1.20-missing-time-include.patch | 20 ++++++++++++++++++++
1 file changed, 20 insertions(+)
diff --git a/app-crypt/mit-krb5/files/mit-krb5-1.20-missing-time-include.patch b/app-crypt/mit-krb5/files/mit-krb5-1.20-missing-time-include.patch
new file mode 100644
index 000000000000..a8a495699129
--- /dev/null
+++ b/app-crypt/mit-krb5/files/mit-krb5-1.20-missing-time-include.patch
@@ -0,0 +1,20 @@
+https://github.com/krb5/krb5/commit/c3958cec43b598b25484b9805224c56f25f7a755
+https://bugs.gentoo.org/854561
+
+From: Greg Hudson <ghudson@mit.edu>
+Date: Tue, 29 Mar 2022 16:27:55 -0400
+Subject: [PATCH] Include time.h in kdb.h
+
+kdb.h uses time_t, and therefore must include <time.h> to ensure its
+definition. Noticed when building t_sort_key_data.c on macOS.
+--- a/include/kdb.h
++++ b/include/kdb.h
+@@ -65,6 +65,7 @@
+ #ifndef KRB5_KDB5__
+ #define KRB5_KDB5__
+
++#include <time.h>
+ #include <krb5.h>
+
+ /* This version will be incremented when incompatible changes are made to the
+
^ permalink raw reply related [flat|nested] 5+ messages in thread
* [gentoo-commits] repo/gentoo:master commit in: app-crypt/mit-krb5/files/
@ 2024-06-27 7:29 Eray Aslan
0 siblings, 0 replies; 5+ messages in thread
From: Eray Aslan @ 2024-06-27 7:29 UTC (permalink / raw
To: gentoo-commits
commit: 593d9f99ba4f169ca41a7ac374dceda95cb1c77a
Author: Eray Aslan <eras <AT> gentoo <DOT> org>
AuthorDate: Thu Jun 27 07:23:45 2024 +0000
Commit: Eray Aslan <eras <AT> gentoo <DOT> org>
CommitDate: Thu Jun 27 07:29:22 2024 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=593d9f99
app-crypt/mit-krb5: bitrot: update systemd unit file
Do not specify StandardError in the unit file
Closes: https://bugs.gentoo.org/890957
Signed-off-by: Eray Aslan <eras <AT> gentoo.org>
app-crypt/mit-krb5/files/mit-krb5kpropd_at.service | 1 -
1 file changed, 1 deletion(-)
diff --git a/app-crypt/mit-krb5/files/mit-krb5kpropd_at.service b/app-crypt/mit-krb5/files/mit-krb5kpropd_at.service
index f826eb33cb33..62553f58f15f 100644
--- a/app-crypt/mit-krb5/files/mit-krb5kpropd_at.service
+++ b/app-crypt/mit-krb5/files/mit-krb5kpropd_at.service
@@ -5,4 +5,3 @@ Conflicts=mit-krb5kpropd.service
[Service]
ExecStart=/usr/sbin/kpropd
StandardInput=socket
-StandardError=syslog
^ permalink raw reply related [flat|nested] 5+ messages in thread
end of thread, other threads:[~2024-06-27 7:29 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2022-09-02 5:53 [gentoo-commits] repo/gentoo:master commit in: app-crypt/mit-krb5/files/ Sam James
-- strict thread matches above, loose matches on Subject: below --
2024-06-27 7:29 Eray Aslan
2021-02-11 19:41 Eray Aslan
2020-11-10 7:45 Eray Aslan
2015-11-04 5:04 Eray Aslan
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox