| Commit History - (may be incomplete: see SVNWeb link above for full details) |
| Date | By | Description |
07 Apr 2004 00:28:04
1.3.3  |
cy  |
Update 1.3.2 --> 1.3.3 |
28 Feb 2004 21:25:21
1.3.2  |
cy  |
- Update MIT KRB5 1.3.1 --> 1.3.2. (As crypto-publish.org does not have
1.3.2 yet, when USE_KRB5_TARBALL=CRYPTO-PUBLISH is specified, 1.3.1
will be installed.)
- Add SIZE to distinfo |
21 Feb 2004 04:39:05
1.3.1_3  |
cy  |
Use ports infrastructure provided PERL5 variable to locate Perl
interpreter. |
07 Feb 2004 04:14:39
1.3.1_3  |
cy  |
Define unique LATEST_LINK.
Reported by: kris |
04 Feb 2004 05:10:27
1.3.1_3  |
marcus  |
Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.
(Part 1) |
25 Jan 2004 22:08:19
1.3.1_2  |
cy  |
Change to src/include/netdb.h 1.31 caused a compile error. This
commit fixes that error.
Reported by: bento |
23 Nov 2003 21:48:54
1.3.1_1  |
cy  |
Fix crypto-publish extract. |
10 Nov 2003 23:30:32
1.3.1_1  |
cy  |
Add missing slash (/) to the end of MIT MASTER_SITE. |
10 Nov 2003 23:22:16
1.3.1_1  |
cy  |
MIT has removed the web form, downloads of MIT KRB5 can be automated.
Unfortunately MIT and crypto-publish.org distribute two distinctly
different tarballs and the user must select the source/format they
wish to fetch. MIT now becomes the default. |
08 Nov 2003 23:08:25
1.3.1_1  |
cy  |
1. Fix pkg-plist.
2. Fix build on -STABLE.
PR: 57128 |
03 Nov 2003 03:56:42
1.3.1  |
kris  |
Mark BROKEN (see bento logs). These ports are scheduled for removal
after Feb 2 2004 if they are still broken at that time and no fixes
have been submitted by PR. |
28 Oct 2003 02:42:41
1.3.1  |
kris  |
BROKEN: Broken pkg-plist |
13 Sep 2003 02:32:33
1.3.1  |
cy  |
The `man2html' script that krb5 uses is written in Perl.
Noticed by: wollman
Approved by: marcus (wearing his portsmgr hat) |
10 Sep 2003 00:03:09
1.3.1  |
cy  |
Crypto-publish.org is now distributing krb5-1.3.1. |
10 Sep 2003 00:00:42
1.3.1  |
cy  |
Patch to fix compiles under -STABLE (RELENG_4).
PR: 56169
Submitted by: Sergey Matveychuk <sem@ciam.ru> |
08 Aug 2003 23:35:18
1.3.1  |
cy  |
Update 1.3 --> 1.3.1 |
08 Aug 2003 01:20:19
1.3  |
cy  |
Update 1.2.8 --> 1.3 |
07 May 2003 21:43:40
1.2.8_1  |
cy  |
Put SONAME entries into shared libraries.
Submitted by: wollman |
07 May 2003 04:13:08
1.2.8  |
cy  |
Change default for V4 compatibility to reflect best practices
for new installations.
Submitted by: wollman |
07 May 2003 04:09:40
1.2.8  |
cy  |
Default is to fetch from crypto-publish.org. USA_RESIDENT replaced
by USE_MIT_TARBALL. Users can still fetch manually from MIT by
setting USE_MIT_TARBALL=YES.
Suggested by: wollman |
07 May 2003 03:47:49
1.2.8  |
cy  |
Update 1.2.7 --> 1.2.8. |
21 Mar 2003 00:54:06
1.2.7_1  |
cy  |
Patches from:
- MITKRB5-SA-2003-005:
Buffer overrun and underrun in principal name handling
- MITKRB5-SA-2003-004:
Cryptographic weaknesses in Kerberos v4 protocol; KDC and realm
compromise possible.
- MITKRB5-SA-2003-003:
Faulty length checks in xdrmem_getbytes may allow kadmind DoS.
- Additional patches from RedHat.
Approved by: kris (wearing his portmgr hat)
Obtained from: MIT Website and Nalin Dahyabhai <nalin@redhat.com> |
07 Mar 2003 06:10:51
1.2.7  |
ade  |
Clear moonlight beckons.
Requiem mors pacem pkg-comment,
And be calm ports tree.
E Nomini Patri, E Fili, E Spiritu Sancti. |
22 Feb 2003 16:12:23
1.2.7  |
nork  |
Remove RESTRICTED tag for crypto stuff.
Approved by: kris (implicitly) |
16 Nov 2002 00:02:13
1.2.7  |
cy  |
Update 1.2.6 --> 1.2.7
Note: Since crypto-publish.org does not yet have krb5-1.2.7 up on their
website, fetch from their site has been temporarily disabled. |
07 Nov 2002 05:46:03
1.2.6_1  |
cy  |
Use PORTCOMMENT. |
28 Oct 2002 18:28:38
1.2.6_1  |
cy  |
Fix pkg-plist when KRB5_KRB4_COMPAT=NO is specified.
Submitted by: Craig Boston <craig@olyun.gank.org> |
25 Oct 2002 15:03:56
1.2.6_1  |
cy  |
Circumvent the use of bison, use FreeBSD yacc instead.
PR: 44446 |
23 Oct 2002 22:30:39
1.2.6_1  |
cy  |
Fix buffer overflow in kadmind4 (remote user can gain root access to
KDC host).
Obtained from: Tom Yu <tlyu@mit.edu> on kerberos-announce mailing list,
MIT krb5 Security Advisory 2002-002 |
25 Sep 2002 17:50:00
1.2.6  |
cy  |
Crypto-publish.org has finally put krb5-1.2.6 up on their site. The
patch reimplements code to fetch MIT Kerberos from their site when
USA_RESIDENT=NO.
Approved by: kris |
13 Sep 2002 13:46:48
1.2.6  |
cy  |
Update 1.2.5 --> 1.2.6
Note: Since crypto-publish.org does not yet have krb5-1.2.6 up on their
website, fetch from their site has been temporarily disabled. |
17 Aug 2002 00:29:41
1.2.5_2  |
cy  |
Fix extract for non-root users.
Noticed by: nectar
Pointy hat to: cy |
02 Aug 2002 18:22:45
1.2.5_2  |
nectar  |
Correct Sun RPC buffer overflow.
<URL:http://online.securityfocus.com/archive/1/285308>
<URL:http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823> |
01 Jul 2002 06:20:38
1.2.5_1  |
cy  |
README.FreeBSD fix.
PR: 39936
Submitted by: Matthew West <mwest@uct.ac.za> |
26 Jun 2002 04:49:07
1.2.5_1  |
cy  |
Fix problem with V4 keys. We should get KRB5_KDB_NO_MATCHING_KEY, not
ENOENT. Obtained from /cvs/krbdev/krb5/src/kdc/kdc_preauth.c,v rev 5.31
in MIT KRB5 tree (fix etype info; wrong termination condition used in
get_etype_info).
Obtained from: Sam Hartman <hartmans@mit.edu> |
16 Jun 2002 12:44:07
1.2.5  |
cy  |
I add missing krb5-config. |
03 May 2002 02:20:17
1.2.5  |
cy  |
Now that www.crypto-publish.org has put the latest version of MIT KRB5
up on their website again, reimplementation of the Makefile patch that
fetched the the tarball from their site for users outside of the US
(originally in Makefile rev 1.29). USA_RESIDENT=YES still supports
manual fetching from web.mit.edu. |
02 May 2002 14:30:24
1.2.5  |
cy  |
Upgrade 1.2.4 --> 1.2.5 |
29 Mar 2002 13:23:08
1.2.4  |
cy  |
www.crypto-publish.org does not have krb5-1.2.4.{tar,tar.Z,tar.gz,tar.bz2}.
Reported by: bento |
18 Mar 2002 22:52:43
1.2.4  |
cy  |
MIT currently distributes their KRB5 distribution in a tarball (.tar)
that contains the distribution itself, in a tar.gz file, and a signature
certificate, contained in a detached .tar.gz.asc file. Prior to this
patch, users installing MIT KRB5 had to extract the tarball into
/usr/ports/distfiles, then proceed with the installation. This caused
confusion among those installing the port. This patch addresses the
problem by extracting the .tar.gz file from the tarball, then unpacking
the .tar.gz file before continuing with the build. |
01 Mar 2002 13:23:47 
|
cy  |
Update 1.2.3 --> 1.2.4 |
16 Jan 2002 03:17:24 
|
cy  |
Update 1.2.2 -> 1.2.3 |
08 Jan 2002 15:05:08 
|
cy  |
In order to make the MIT KRB5 port compatible with FreeBSD, the port now makes
use of login.conf and login.access. This is performed by using FreeBSD
login(1) instead of MIT KRB5 login.krb5(8). |
07 Sep 2001 20:53:10 
|
nectar  |
= Modify `ksu' so that it uses the login cap database. Michael Allman
<msa@dinosauricon.com> provided the original patches. |
24 Jul 2001 20:19:13 
|
nectar  |
New maintainer: Cy Schubert <Cy.Schubert@uumail.gov.bc.ca> |
24 Jul 2001 17:47:04 
|
nectar  |
Update telnetd vulnerability fixes from FreeBSD. |
24 Jul 2001 16:29:39 
|
nectar  |
Bump PORTREVISION. Update telnetd vulnerability fixes from FreeBSD. |
24 Jul 2001 16:28:25 
|
nectar  |
Update telnetd vulnerability fixes from FreeBSD. |
20 Jul 2001 17:53:32 
|
nectar  |
Merge telnetd vulnerability fix from FreeBSD. |
27 Apr 2001 19:16:59 
|
nectar  |
Bump PORTREVISION for ftpd buffer overflow fix. |
27 Apr 2001 19:15:34 
|
nectar  |
Security fix: ``Buffer overflows exist in the FTP daemon included with MIT
krb5.'' See <URL:http://web.mit.edu/kerberos/www/advisories/ftpbuf.txt> and
<URL:http://web.mit.edu/kerberos/www/advisories/ftpbuf_122_patch.txt>. |
27 Apr 2001 19:15:01 
|
nectar  |
Security fix: ``Buffer overflows exist in the FTP daemon included with MIT
krb5.'' See <URL:http://web.mit.edu/kerberos/www/advisories/ftpbuf.txt> and
<URL:http://web.mit.edu/kerberos/www/advisories/ftpbuf_122_patch.txt>. |
02 Mar 2001 17:33:58 
|
nectar  |
Update 1.2.1 -> 1.2.2 |
10 Jan 2001 15:27:01 
|
nectar  |
Bump PORTREVISION for previous commit (fix for _PATH_NOLOGIN). |
09 Jan 2001 16:25:23 
|
nectar  |
kshd has /etc/nologin hardcoded instead of using _PATH_NOLOGIN from <paths.h>
(if available) like login.krb5 does. As a result, on FreeBSD 4.2 these two
programs end up using different paths for the nologin file (which is
/var/run/nologin on FreeBSD). |
08 Oct 2000 07:30:58 
|
asami  |
Convert category security to new layout. |
30 Jun 2000 18:41:25 
|
nectar  |
Update 1.2 -> 1.2.1. From the announcement: |
24 Jun 2000 03:49:08 
|
nectar  |
Oops, had a bogus PORTVERSION/DISTNAME from when I was testing 1.2-beta4. |
24 Jun 2000 02:48:11 
|
nectar  |
Update 1.1.1 -> 1.2 |
16 Jun 2000 22:52:41 
|
asami  |
Rename INSTALLS_SHLIBS to INSTALLS_SHLIB. (There was a typo in the previous
commit message to bsd.port.mk, which said INSTALL_SHLIBS. Boo.) |
16 Jun 2000 09:48:25 
|
sobomax  |
Fourth round of INSTALLS_SHLIBS conversion. |
15 Jun 2000 18:42:41 
|
nectar  |
Bug fixes: |