summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEray Aslan <eras@gentoo.org>2012-01-17 20:14:05 +0000
committerEray Aslan <eras@gentoo.org>2012-01-17 20:14:05 +0000
commitd3392397d986acec4aec167b20c5a112fada6126 (patch)
treeb738033199e2f5340aae492617f6d07e64a69865
parentremove vulnerable versions (diff)
downloadgentoo-2-d3392397d986acec4aec167b20c5a112fada6126.tar.gz
gentoo-2-d3392397d986acec4aec167b20c5a112fada6126.tar.bz2
gentoo-2-d3392397d986acec4aec167b20c5a112fada6126.zip
remove vulnerable versions
(Portage version: 2.1.10.44/cvs/Linux x86_64)
-rw-r--r--app-crypt/mit-krb5-appl/ChangeLog7
-rw-r--r--app-crypt/mit-krb5-appl/files/CVE-2011-1526.patch58
-rw-r--r--app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.1-r1.ebuild58
-rw-r--r--app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.1.ebuild57
-rw-r--r--app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.2.ebuild53
5 files changed, 6 insertions, 227 deletions
diff --git a/app-crypt/mit-krb5-appl/ChangeLog b/app-crypt/mit-krb5-appl/ChangeLog
index 7a0650df65c2..67cf11106979 100644
--- a/app-crypt/mit-krb5-appl/ChangeLog
+++ b/app-crypt/mit-krb5-appl/ChangeLog
@@ -1,6 +1,11 @@
# ChangeLog for app-crypt/mit-krb5-appl
# Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-crypt/mit-krb5-appl/ChangeLog,v 1.25 2012/01/08 15:58:41 armin76 Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-crypt/mit-krb5-appl/ChangeLog,v 1.26 2012/01/17 20:14:05 eras Exp $
+
+ 17 Jan 2012; Eray Aslan <eras@gentoo.org> -mit-krb5-appl-1.0.1.ebuild,
+ -mit-krb5-appl-1.0.1-r1.ebuild, -mit-krb5-appl-1.0.2.ebuild,
+ -files/CVE-2011-1526.patch:
+ remove vulnerable versions
08 Jan 2012; Raúl Porcel <armin76@gentoo.org> mit-krb5-appl-1.0.2-r1.ebuild:
alpha/arm/ia64/m68k/s390/sh/sparc stable wrt #396137
diff --git a/app-crypt/mit-krb5-appl/files/CVE-2011-1526.patch b/app-crypt/mit-krb5-appl/files/CVE-2011-1526.patch
deleted file mode 100644
index 9c4466214e53..000000000000
--- a/app-crypt/mit-krb5-appl/files/CVE-2011-1526.patch
+++ /dev/null
@@ -1,58 +0,0 @@
-diff --git a/configure.ac b/configure.ac
-index 86e23f1..2fe68ad 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -107,6 +107,7 @@ AC_CHECK_FUNCS(_getpty cgetent getcwd getenv gettosbyname getusershell getutmp)
- AC_CHECK_FUNCS(getutmpx grantpt inet_aton initgroups isatty killpg killpg)
- AC_CHECK_FUNCS(line_push ptsname revoke rmufile rresvport_af)
- AC_CHECK_FUNCS(seteuid setlogin setpgid setpriority setresuid setreuid)
-+AC_CHECK_FUNCS(setegid setregid setresgid)
- AC_CHECK_FUNCS(setutent setutsent setutxent strsave tcgetpgrp tcsetpgrp)
- AC_CHECK_FUNCS(ttyname unsetenv updwtmp updwtmpx utimes utmpname utmpxname)
- AC_CHECK_FUNCS(vhangup vsnprintf waitpid)
-diff --git a/gssftp/ftpd/ftpd.c b/gssftp/ftpd/ftpd.c
-index fe62a9c..a150819 100644
---- a/gssftp/ftpd/ftpd.c
-+++ b/gssftp/ftpd/ftpd.c
-@@ -994,9 +994,14 @@ login(passwd, logincode)
- #endif
- }
-
-- (void) krb5_setegid((gid_t)pw->pw_gid);
-- (void) initgroups(pw->pw_name, pw->pw_gid);
--
-+ if (krb5_setegid((gid_t)pw->pw_gid) < 0) {
-+ reply(550, "Can't set egid.");
-+ goto bad;
-+ }
-+ if (geteuid() == 0 && initgroups(pw->pw_name, pw->pw_gid) < 0) {
-+ reply(550, "Can't initgroups");
-+ goto bad;
-+ }
- /* open wtmp before chroot */
- (void) snprintf(ttyline, sizeof(ttyline), "ftp%ld", (long) getpid());
- pty_logwtmp(ttyline, pw->pw_name, rhost_sane);
-diff --git a/k5-util.h b/k5-util.h
-index 7bb8cfb..64cd53d 100644
---- a/k5-util.h
-+++ b/k5-util.h
-@@ -69,8 +69,7 @@
- #elif defined(HAVE_SETREUID)
- # define krb5_seteuid(EUID) setreuid(geteuid(), (uid_t)(EUID))
- #else
-- /* You need to add a case to deal with this operating system.*/
--# define krb5_seteuid(EUID) (errno = EPERM, -1)
-+# error "You need to add a case to deal with this operating system."
- #endif
-
- #ifdef HAVE_SETEGID
-@@ -80,8 +79,7 @@
- #elif defined(HAVE_SETREGID)
- # define krb5_setegid(EGID) (setregid(getegid(), (gid_t)(EGID)))
- #else
-- /* You need to add a case to deal with this operating system.*/
--# define krb5_setegid(EGID) (errno = EPERM, -1)
-+# error "You need to add a case to deal with this operating system."
- #endif
-
- #endif
diff --git a/app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.1-r1.ebuild b/app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.1-r1.ebuild
deleted file mode 100644
index 732fbea1e503..000000000000
--- a/app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.1-r1.ebuild
+++ /dev/null
@@ -1,58 +0,0 @@
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.1-r1.ebuild,v 1.6 2011/07/11 02:00:58 jer Exp $
-
-EAPI=4
-
-inherit flag-o-matic versionator autotools eutils
-
-MY_P=${P/mit-}
-MAJOR_MINOR="$( get_version_component_range 1-2 )"
-DESCRIPTION="Kerberized applications split from the main MIT Kerberos V distribution"
-HOMEPAGE="http://web.mit.edu/kerberos/www/"
-SRC_URI="http://web.mit.edu/kerberos/dist/krb5-appl/${MAJOR_MINOR}/${MY_P}-signed.tar"
-
-LICENSE="as-is"
-SLOT="0"
-KEYWORDS="alpha amd64 arm hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86"
-IUSE=""
-
-RDEPEND=">=app-crypt/mit-krb5-1.8.0"
-DEPEND="${RDEPEND}"
-
-S=${WORKDIR}/${MY_P}
-
-src_unpack() {
- unpack ${A}
- unpack ./"${MY_P}".tar.gz
-}
-
-src_prepare() {
- epatch "${FILESDIR}/CVE-2011-1526.patch"
- eautoreconf
-}
-
-src_configure() {
- append-flags "-I/usr/include/et"
- append-flags -fno-strict-aliasing
- append-flags -fno-strict-overflow
- econf
-}
-
-src_install() {
- emake DESTDIR="${D}" install
- for i in {telnetd,ftpd} ; do
- mv "${D}"/usr/share/man/man8/${i}.8 "${D}"/usr/share/man/man8/k${i}.8 \
- || die "mv failed (man)"
- mv "${D}"/usr/sbin/${i} "${D}"/usr/sbin/k${i} || die "mv failed"
- done
-
- for i in {rcp,rlogin,rsh,telnet,ftp} ; do
- mv "${D}"/usr/share/man/man1/${i}.1 "${D}"/usr/share/man/man1/k${i}.1 \
- || die "mv failed (man)"
- mv "${D}"/usr/bin/${i} "${D}"/usr/bin/k${i} || die "mv failed"
- done
-
- rm "${D}"/usr/share/man/man1/tmac.doc
- dodoc README
-}
diff --git a/app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.1.ebuild b/app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.1.ebuild
deleted file mode 100644
index 8704241aca3c..000000000000
--- a/app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.1.ebuild
+++ /dev/null
@@ -1,57 +0,0 @@
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.1.ebuild,v 1.7 2011/04/23 18:24:42 armin76 Exp $
-
-EAPI="2"
-
-inherit flag-o-matic versionator
-
-MY_P=${P/mit-}
-MAJOR_MINOR="$( get_version_component_range 1-2 )"
-DESCRIPTION="Kerberized applications split from the main MIT Kerberos V distribution"
-HOMEPAGE="http://web.mit.edu/kerberos/www/"
-SRC_URI="http://web.mit.edu/kerberos/dist/krb5-appl/${MAJOR_MINOR}/${MY_P}-signed.tar"
-
-LICENSE="as-is"
-SLOT="0"
-KEYWORDS="alpha amd64 arm hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86"
-IUSE=""
-
-RDEPEND=">=app-crypt/mit-krb5-1.8.0"
-DEPEND="${RDEPEND}"
-
-S=${WORKDIR}/${MY_P}
-
-src_unpack() {
- unpack ${A}
- unpack ./"${MY_P}".tar.gz
-}
-
-src_configure() {
- append-flags "-I/usr/include/et"
- econf
-}
-
-src_compile() {
- emake || die "emake failed"
-}
-
-src_install() {
-
- emake DESTDIR="${D}" install || die "make install failed"
- for i in {telnetd,ftpd} ; do
- mv "${D}"/usr/share/man/man8/${i}.8 "${D}"/usr/share/man/man8/k${i}.8 \
- || die "mv failed (man)"
- mv "${D}"/usr/sbin/${i} "${D}"/usr/sbin/k${i} || die "mv failed"
- done
-
- for i in {rcp,rlogin,rsh,telnet,ftp} ; do
- mv "${D}"/usr/share/man/man1/${i}.1 "${D}"/usr/share/man/man1/k${i}.1 \
- || die "mv failed (man)"
- mv "${D}"/usr/bin/${i} "${D}"/usr/bin/k${i} || die "mv failed"
- done
-
- rm "${D}"/usr/share/man/man1/tmac.doc
- dodoc README
-
-}
diff --git a/app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.2.ebuild b/app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.2.ebuild
deleted file mode 100644
index 548fb9432a34..000000000000
--- a/app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.2.ebuild
+++ /dev/null
@@ -1,53 +0,0 @@
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-crypt/mit-krb5-appl/mit-krb5-appl-1.0.2.ebuild,v 1.1 2011/07/13 10:45:22 eras Exp $
-
-EAPI=4
-
-inherit flag-o-matic versionator eutils
-
-MY_P=${P/mit-}
-MAJOR_MINOR="$( get_version_component_range 1-2 )"
-DESCRIPTION="Kerberized applications split from the main MIT Kerberos V distribution"
-HOMEPAGE="http://web.mit.edu/kerberos/www/"
-SRC_URI="http://web.mit.edu/kerberos/dist/krb5-appl/${MAJOR_MINOR}/${MY_P}-signed.tar"
-
-LICENSE="as-is"
-SLOT="0"
-KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
-IUSE=""
-
-RDEPEND=">=app-crypt/mit-krb5-1.8.0"
-DEPEND="${RDEPEND}"
-
-S=${WORKDIR}/${MY_P}
-
-src_unpack() {
- unpack ${A}
- unpack ./"${MY_P}".tar.gz
-}
-
-src_configure() {
- append-flags "-I/usr/include/et"
- append-flags -fno-strict-aliasing
- append-flags -fno-strict-overflow
- econf
-}
-
-src_install() {
- emake DESTDIR="${D}" install
- for i in {telnetd,ftpd} ; do
- mv "${D}"/usr/share/man/man8/${i}.8 "${D}"/usr/share/man/man8/k${i}.8 \
- || die "mv failed (man)"
- mv "${D}"/usr/sbin/${i} "${D}"/usr/sbin/k${i} || die "mv failed"
- done
-
- for i in {rcp,rlogin,rsh,telnet,ftp} ; do
- mv "${D}"/usr/share/man/man1/${i}.1 "${D}"/usr/share/man/man1/k${i}.1 \
- || die "mv failed (man)"
- mv "${D}"/usr/bin/${i} "${D}"/usr/bin/k${i} || die "mv failed"
- done
-
- rm "${D}"/usr/share/man/man1/tmac.doc
- dodoc README
-}