summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEray Aslan <eras@gentoo.org>2013-03-25 08:51:51 +0000
committerEray Aslan <eras@gentoo.org>2013-03-25 08:51:51 +0000
commit2ae2c99247fa1a697d2ddf816093358d5af1aefc (patch)
tree859130c0de2b06e7ae7ad5d6fd5897cb6792996c /app-crypt/mit-krb5/files
parentStabilise 0.7.1 on amd64 x86 and ppc. Not removing older due to binpkg. (diff)
downloadhistorical-2ae2c99247fa1a697d2ddf816093358d5af1aefc.tar.gz
historical-2ae2c99247fa1a697d2ddf816093358d5af1aefc.tar.bz2
historical-2ae2c99247fa1a697d2ddf816093358d5af1aefc.zip
Remove vulnerable version
Package-Manager: portage-2.2.0_alpha169/cvs/Linux x86_64 Manifest-Sign-Key: 0x77F1F175586A3B1F
Diffstat (limited to 'app-crypt/mit-krb5/files')
-rw-r--r--app-crypt/mit-krb5/files/CVE-2012-1015.patch40
-rw-r--r--app-crypt/mit-krb5/files/mit-krb5kadmind.initd24
-rw-r--r--app-crypt/mit-krb5/files/mit-krb5kdc.initd24
-rw-r--r--app-crypt/mit-krb5/files/mit-krb5kpropd.initd25
4 files changed, 0 insertions, 113 deletions
diff --git a/app-crypt/mit-krb5/files/CVE-2012-1015.patch b/app-crypt/mit-krb5/files/CVE-2012-1015.patch
deleted file mode 100644
index 60f2b38a2ffa..000000000000
--- a/app-crypt/mit-krb5/files/CVE-2012-1015.patch
+++ /dev/null
@@ -1,40 +0,0 @@
-diff --git a/src/kdc/kdc_preauth.c b/src/kdc/kdc_preauth.c
-index 9d8cb34..d4ece3f 100644
---- a/src/kdc/kdc_preauth.c
-+++ b/src/kdc/kdc_preauth.c
-@@ -1438,7 +1438,8 @@ etype_info_helper(krb5_context context, krb5_kdc_req *request,
- continue;
-
- }
-- if (request_contains_enctype(context, request, db_etype)) {
-+ if (krb5_is_permitted_enctype(context, db_etype) &&
-+ request_contains_enctype(context, request, db_etype)) {
- retval = _make_etype_info_entry(context, client->princ,
- client_key, db_etype,
- &entry[i], etype_info2);
-diff --git a/src/kdc/kdc_util.c b/src/kdc/kdc_util.c
-index a43b291..94dad3a 100644
---- a/src/kdc/kdc_util.c
-+++ b/src/kdc/kdc_util.c
-@@ -2461,6 +2461,7 @@ kdc_handle_protected_negotiation(krb5_data *req_pkt, krb5_kdc_req *request,
- return 0;
- pa.magic = KV5M_PA_DATA;
- pa.pa_type = KRB5_ENCPADATA_REQ_ENC_PA_REP;
-+ memset(&checksum, 0, sizeof(checksum));
- retval = krb5_c_make_checksum(kdc_context,0, reply_key,
- KRB5_KEYUSAGE_AS_REQ, req_pkt, &checksum);
- if (retval != 0)
-diff --git a/src/lib/kdb/kdb_default.c b/src/lib/kdb/kdb_default.c
-index c4bf92e..367c894 100644
---- a/src/lib/kdb/kdb_default.c
-+++ b/src/lib/kdb/kdb_default.c
-@@ -61,6 +61,9 @@ krb5_dbe_def_search_enctype(kcontext, dbentp, start, ktype, stype, kvno, kdatap)
- krb5_boolean saw_non_permitted = FALSE;
-
- ret = 0;
-+ if (ktype != -1 && !krb5_is_permitted_enctype(kcontext, ktype))
-+ return KRB5_KDB_NO_PERMITTED_KEY;
-+
- if (kvno == -1 && stype == -1 && ktype == -1)
- kvno = 0;
-
diff --git a/app-crypt/mit-krb5/files/mit-krb5kadmind.initd b/app-crypt/mit-krb5/files/mit-krb5kadmind.initd
deleted file mode 100644
index 75d411c2cada..000000000000
--- a/app-crypt/mit-krb5/files/mit-krb5kadmind.initd
+++ /dev/null
@@ -1,24 +0,0 @@
-#!/sbin/runscript
-
-#---------------------------------------------------------------------------
-# This script starts/stops the MIT Kerberos 5 Admin daemon
-#---------------------------------------------------------------------------
-
-daemon="MIT Kerberos 5 Admin daemon"
-exec="/usr/sbin/kadmind"
-
-depend() {
- need net mit-krb5kdc
-}
-
-start() {
- ebegin "Starting $daemon"
- start-stop-daemon --start --quiet --exec ${exec} 1>&2
- eend $? "Error starting $daemon"
-}
-
-stop() {
- ebegin "Stopping $daemon"
- start-stop-daemon --stop --quiet --exec ${exec} 1>&2
- eend $? "Error stopping $daemon"
-}
diff --git a/app-crypt/mit-krb5/files/mit-krb5kdc.initd b/app-crypt/mit-krb5/files/mit-krb5kdc.initd
deleted file mode 100644
index d0ab859dac4b..000000000000
--- a/app-crypt/mit-krb5/files/mit-krb5kdc.initd
+++ /dev/null
@@ -1,24 +0,0 @@
-#!/sbin/runscript
-
-#---------------------------------------------------------------------------
-# This script starts/stops the MIT Kerberos 5 KDC
-#---------------------------------------------------------------------------
-
-daemon="MIT Kerberos 5 KDC"
-exec="/usr/sbin/krb5kdc"
-
-depend() {
- need net
-}
-
-start() {
- ebegin "Starting $daemon"
- start-stop-daemon --start --quiet --exec ${exec} 1>&2
- eend $? "Error starting $daemon"
-}
-
-stop() {
- ebegin "Stopping $daemon"
- start-stop-daemon --stop --quiet --exec ${exec} 1>&2
- eend $? "Error stopping $daemon"
-}
diff --git a/app-crypt/mit-krb5/files/mit-krb5kpropd.initd b/app-crypt/mit-krb5/files/mit-krb5kpropd.initd
deleted file mode 100644
index 76841da840b2..000000000000
--- a/app-crypt/mit-krb5/files/mit-krb5kpropd.initd
+++ /dev/null
@@ -1,25 +0,0 @@
-#!/sbin/runscript
-
-#---------------------------------------------------------------------------
-# This script starts/stops the MIT Kerberos 5 kpropd
-#---------------------------------------------------------------------------
-
-daemon="MIT Kerberos 5 kpropd"
-exec="/usr/sbin/kpropd"
-
-depend() {
- need net
- use mit-krb5kdc mit-krb5kadmind
-}
-
-start() {
- ebegin "Starting $daemon"
- start-stop-daemon --start --quiet --exec ${exec} -- -S 1>&2
- eend $? "Error starting $daemon"
-}
-
-stop() {
- ebegin "Stopping $daemon"
- start-stop-daemon --stop --quiet --exec ${exec} 1>&2
- eend $? "Error stopping $daemon"
-}