pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/security



Module Name:    pkgsrc
Committed By:   wiz
Date:           Thu Feb 24 11:00:04 UTC 2022

Modified Files:
        pkgsrc/security/cy2-digestmd5: Makefile
        pkgsrc/security/cy2-gssapi: Makefile
        pkgsrc/security/cy2-ldapdb: Makefile
        pkgsrc/security/cy2-ntlm: Makefile
        pkgsrc/security/cy2-otp: Makefile
        pkgsrc/security/cy2-scram: Makefile
        pkgsrc/security/cy2-sql: Makefile
        pkgsrc/security/cyrus-sasl: Makefile Makefile.common distinfo
        pkgsrc/security/cyrus-saslauthd: Makefile PLIST
Removed Files:
        pkgsrc/security/cyrus-sasl/patches: patch-CVE-2019-19906
            patch-saslauthd_Makefile.in

Log Message:
cyrus-sasl: update to 2.1.28

New in 2.1.28

    build:
        configure - Restore LIBS after checking gss_inquire_sec_context_by_oid
        makemd5.c - Fix potential out of bound writes
        fix build with –disable-shared –enable-static
        Dozens of fixes for Windows specific builds
        Fix cross platform builds with SPNEGO
        Do not try to build broken java subtree
        Fix build error with –enable-auth-sasldb
    common:
        plugin_common.c:
            Ensure size is always checked if called repeatedly (#617)
    documentation:
        Fixed generation of saslauthd(8) man page
        Fixed installation of saslauthd(8) and testsaslauthd(8) man pages (#373)
        Updates for additional SCRAM mechanisms
        Fix sasl_decode64 and sasl_encode64 man pages
        Tons of fixes for Sphinx
    include:
        sasl.h:
            Allow up to 16 bits for security flags
    lib:
        checkpw.c:
            Skip one call to strcat
            Disable auxprop-hashed (#374)
        client.c:
            Use proper length for fully qualified domain names
        common.c:
            CVE-2019-19906 Fix off by one error (#587)
        external.c:
            fix EXTERNAL with non-terminated input (#689)
        saslutil.c:
            fix index_64 to be a signed char (#619)
    plugins:
        gssapi.c:
            Emit debug log only in case of errors
        ntlm.c:
            Fail compile if MD4 is not available (#632)
        sql.c:
            Finish reading residual return data (#639)
            CVE-2022-24407 Escape password for SQL insert/update commands.
    sasldb:
        db_gdbm.c:
            fix gdbm_errno overlay from gdbm_close
    DIGEST-MD5 plugin:
        Prevent double free of RC4 context
        Use OpenSSL RC4 implementation if available
    SCRAM plugin:
        Return BADAUTH on incorrect password (#545)
        Add -224, -384, -512 (#552)
        Remove SCRAM_HASH_SIZE
        Add function to return SCRAM auth method name
        Allocate enough memory in scam_setpass()
        Add function to sort SCRAM methods by hash strength
        Update windows build for newer SCRAM options
    saslauthd:
        auth_httpform.c:
            Avoid signed overflow with non-ascii characters (#576)
        auth_krb5.c:
            support setting an explicit auth_krb5 server name
            support setting an explicit servername with Heimdal
            unify the MIT and Heimdal auth_krb5 implementations
            Remove call to krbtf
        auth_rimap.c:
            provide native memmem implementation if missing
        lak.c:
            Allow LDAP_OPT_X_TLS_REQUIRE_CERT to be 0 (no certificate verification)
        lak.h:
            Increase supported DN length to 4096 (#626)


To generate a diff of this commit:
cvs rdiff -u -r1.23 -r1.24 pkgsrc/security/cy2-digestmd5/Makefile
cvs rdiff -u -r1.30 -r1.31 pkgsrc/security/cy2-gssapi/Makefile
cvs rdiff -u -r1.15 -r1.16 pkgsrc/security/cy2-ldapdb/Makefile
cvs rdiff -u -r1.31 -r1.32 pkgsrc/security/cy2-ntlm/Makefile
cvs rdiff -u -r1.24 -r1.25 pkgsrc/security/cy2-otp/Makefile
cvs rdiff -u -r1.11 -r1.12 pkgsrc/security/cy2-scram/Makefile
cvs rdiff -u -r1.48 -r1.49 pkgsrc/security/cy2-sql/Makefile
cvs rdiff -u -r1.79 -r1.80 pkgsrc/security/cyrus-sasl/Makefile
cvs rdiff -u -r1.33 -r1.34 pkgsrc/security/cyrus-sasl/Makefile.common
cvs rdiff -u -r1.40 -r1.41 pkgsrc/security/cyrus-sasl/distinfo
cvs rdiff -u -r1.1 -r0 \
    pkgsrc/security/cyrus-sasl/patches/patch-CVE-2019-19906
cvs rdiff -u -r1.2 -r0 \
    pkgsrc/security/cyrus-sasl/patches/patch-saslauthd_Makefile.in
cvs rdiff -u -r1.56 -r1.57 pkgsrc/security/cyrus-saslauthd/Makefile
cvs rdiff -u -r1.14 -r1.15 pkgsrc/security/cyrus-saslauthd/PLIST

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/cy2-digestmd5/Makefile
diff -u pkgsrc/security/cy2-digestmd5/Makefile:1.23 pkgsrc/security/cy2-digestmd5/Makefile:1.24
--- pkgsrc/security/cy2-digestmd5/Makefile:1.23 Sat Jan 18 21:50:34 2020
+++ pkgsrc/security/cy2-digestmd5/Makefile      Thu Feb 24 11:00:03 2022
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.23 2020/01/18 21:50:34 jperkin Exp $
+# $NetBSD: Makefile,v 1.24 2022/02/24 11:00:03 wiz Exp $
 
 PKGNAME=       ${DISTNAME:S/cyrus-sasl/cy2-digestmd5/}
-PKGREVISION=   1
 COMMENT=       Cyrus SASL DIGEST-MD5 authentication plugin
 SASL_PLUGIN=   yes
 

Index: pkgsrc/security/cy2-gssapi/Makefile
diff -u pkgsrc/security/cy2-gssapi/Makefile:1.30 pkgsrc/security/cy2-gssapi/Makefile:1.31
--- pkgsrc/security/cy2-gssapi/Makefile:1.30    Thu Oct 21 07:46:37 2021
+++ pkgsrc/security/cy2-gssapi/Makefile Thu Feb 24 11:00:03 2022
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.30 2021/10/21 07:46:37 wiz Exp $
+# $NetBSD: Makefile,v 1.31 2022/02/24 11:00:03 wiz Exp $
 
 PKGNAME=       ${DISTNAME:S/cyrus-sasl/cy2-gssapi/}
-PKGREVISION=   2
 COMMENT=       Cyrus SASL GSSAPI authentication plugin
 SASL_PLUGIN=   yes
 

Index: pkgsrc/security/cy2-ldapdb/Makefile
diff -u pkgsrc/security/cy2-ldapdb/Makefile:1.15 pkgsrc/security/cy2-ldapdb/Makefile:1.16
--- pkgsrc/security/cy2-ldapdb/Makefile:1.15    Sat Jan 18 21:50:34 2020
+++ pkgsrc/security/cy2-ldapdb/Makefile Thu Feb 24 11:00:03 2022
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.15 2020/01/18 21:50:34 jperkin Exp $
+# $NetBSD: Makefile,v 1.16 2022/02/24 11:00:03 wiz Exp $
 
 PKGNAME=       ${DISTNAME:S/cyrus-sasl/cy2-ldapdb/}
-PKGREVISION=   1
 COMMENT=       Cyrus SASL LDAPDB authentication plugin
 SASL_PLUGIN=   yes
 

Index: pkgsrc/security/cy2-ntlm/Makefile
diff -u pkgsrc/security/cy2-ntlm/Makefile:1.31 pkgsrc/security/cy2-ntlm/Makefile:1.32
--- pkgsrc/security/cy2-ntlm/Makefile:1.31      Sat Jan 18 21:50:34 2020
+++ pkgsrc/security/cy2-ntlm/Makefile   Thu Feb 24 11:00:03 2022
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.31 2020/01/18 21:50:34 jperkin Exp $
+# $NetBSD: Makefile,v 1.32 2022/02/24 11:00:03 wiz Exp $
 
 PKGNAME=       ${DISTNAME:S/cyrus-sasl/cy2-ntlm/}
-PKGREVISION=   1
 COMMENT=       Cyrus SASL NTLM authentication plugin
 SASL_PLUGIN=   yes
 

Index: pkgsrc/security/cy2-otp/Makefile
diff -u pkgsrc/security/cy2-otp/Makefile:1.24 pkgsrc/security/cy2-otp/Makefile:1.25
--- pkgsrc/security/cy2-otp/Makefile:1.24       Sat Jan 18 21:50:34 2020
+++ pkgsrc/security/cy2-otp/Makefile    Thu Feb 24 11:00:03 2022
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.24 2020/01/18 21:50:34 jperkin Exp $
+# $NetBSD: Makefile,v 1.25 2022/02/24 11:00:03 wiz Exp $
 
 PKGNAME=       ${DISTNAME:S/cyrus-sasl/cy2-otp/}
-PKGREVISION=   1
 COMMENT=       Cyrus SASL OTP authentication plugin
 SASL_PLUGIN=   yes
 

Index: pkgsrc/security/cy2-scram/Makefile
diff -u pkgsrc/security/cy2-scram/Makefile:1.11 pkgsrc/security/cy2-scram/Makefile:1.12
--- pkgsrc/security/cy2-scram/Makefile:1.11     Sat Jan 18 21:50:35 2020
+++ pkgsrc/security/cy2-scram/Makefile  Thu Feb 24 11:00:03 2022
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.11 2020/01/18 21:50:35 jperkin Exp $
+# $NetBSD: Makefile,v 1.12 2022/02/24 11:00:03 wiz Exp $
 
 PKGNAME=       ${DISTNAME:S/cyrus-sasl/cy2-scram/}
-PKGREVISION=   1
 COMMENT=       Cyrus SASL SCRAM authentication plugin
 SASL_PLUGIN=   yes
 

Index: pkgsrc/security/cy2-sql/Makefile
diff -u pkgsrc/security/cy2-sql/Makefile:1.48 pkgsrc/security/cy2-sql/Makefile:1.49
--- pkgsrc/security/cy2-sql/Makefile:1.48       Wed Dec  8 16:06:16 2021
+++ pkgsrc/security/cy2-sql/Makefile    Thu Feb 24 11:00:03 2022
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.48 2021/12/08 16:06:16 adam Exp $
+# $NetBSD: Makefile,v 1.49 2022/02/24 11:00:03 wiz Exp $
 
 PKGNAME=       ${DISTNAME:S/cyrus-sasl/cy2-sql/}
-PKGREVISION=   9
 COMMENT=       Cyrus SASL SQL authentication plugin
 SASL_PLUGIN=   yes
 

Index: pkgsrc/security/cyrus-sasl/Makefile
diff -u pkgsrc/security/cyrus-sasl/Makefile:1.79 pkgsrc/security/cyrus-sasl/Makefile:1.80
--- pkgsrc/security/cyrus-sasl/Makefile:1.79    Mon May 24 19:53:51 2021
+++ pkgsrc/security/cyrus-sasl/Makefile Thu Feb 24 11:00:03 2022
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.79 2021/05/24 19:53:51 wiz Exp $
+# $NetBSD: Makefile,v 1.80 2022/02/24 11:00:03 wiz Exp $
 
-PKGREVISION=   2
 COMMENT=       Simple Authentication and Security Layer
 
 .include "Makefile.common"

Index: pkgsrc/security/cyrus-sasl/Makefile.common
diff -u pkgsrc/security/cyrus-sasl/Makefile.common:1.33 pkgsrc/security/cyrus-sasl/Makefile.common:1.34
--- pkgsrc/security/cyrus-sasl/Makefile.common:1.33     Thu May 14 14:31:16 2020
+++ pkgsrc/security/cyrus-sasl/Makefile.common  Thu Feb 24 11:00:03 2022
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.33 2020/05/14 14:31:16 nia Exp $
+# $NetBSD: Makefile.common,v 1.34 2022/02/24 11:00:03 wiz Exp $
 #
 # used by security/cyrus-sasl/Makefile
 # used by security/cy2-anonymous/Makefile
@@ -17,16 +17,10 @@
 # This Makefile fragment should be included _below_ any SASL_PLUGIN
 # definition and _above_ any CONFIGURE_ARGS definitions.
 
-DISTNAME=              cyrus-sasl-2.1.27
-DISTFILES=             ${DISTNAME}-rc7${EXTRACT_SUFX}
+DISTNAME=              cyrus-sasl-2.1.28
 CATEGORIES=            security
-MASTER_SITES=          https://www.cyrusimap.org/releases/
-MASTER_SITES+=         https://www.cyrusimap.org/releases/old/
-#MASTER_SITES+=                ftp://ftp.cyrusimap.org/cyrus-sasl/OLD-VERSIONS/
-#PATCHFILES+=          cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2
-#SITES.cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2= \
-#                      -https://cgit.cyrus.foundation/cyrus-sasl/patch/?id=dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d
-#PATCH_DIST_STRIP=     -p1
+MASTER_SITES+=         ${MASTER_SITE_GITHUB:=cyrusimap/}
+GITHUB_RELEASE=                ${DISTNAME}
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=      https://www.cyrusimap.org/sasl/

Index: pkgsrc/security/cyrus-sasl/distinfo
diff -u pkgsrc/security/cyrus-sasl/distinfo:1.40 pkgsrc/security/cyrus-sasl/distinfo:1.41
--- pkgsrc/security/cyrus-sasl/distinfo:1.40    Mon Nov 15 18:12:45 2021
+++ pkgsrc/security/cyrus-sasl/distinfo Thu Feb 24 11:00:03 2022
@@ -1,10 +1,8 @@
-$NetBSD: distinfo,v 1.40 2021/11/15 18:12:45 wiz Exp $
+$NetBSD: distinfo,v 1.41 2022/02/24 11:00:03 wiz Exp $
 
-BLAKE2s (cyrus-sasl-2.1.27-rc7.tar.gz) = 66acec5390a4b208f8492fae9538b9df46169d00dc3228b41452cdc6eee28bdf
-SHA512 (cyrus-sasl-2.1.27-rc7.tar.gz) = 498b0f83e99f77dcf56bd2b735e71b554571703305ef9ef64038f04ef235b39d49e7b2363fc8b9952dbe2f4921542c31811e93618d7ceb468d73b4f6dafa89aa
-Size (cyrus-sasl-2.1.27-rc7.tar.gz) = 4146356 bytes
-SHA1 (patch-CVE-2019-19906) = 752de2053696f13de098267f8605b4b7afb24a6c
+BLAKE2s (cyrus-sasl-2.1.28.tar.gz) = 617623570c40af652ef1c19a746e2346f53591a4594cffdce835df29fc5aba61
+SHA512 (cyrus-sasl-2.1.28.tar.gz) = db15af9079758a9f385457a79390c8a7cd7ea666573dace8bf4fb01bb4b49037538d67285727d6a70ad799d2e2318f265c9372e2427de9371d626a1959dd6f78
+Size (cyrus-sasl-2.1.28.tar.gz) = 4034803 bytes
 SHA1 (patch-common_crypto-compat) = ad8575c62648aba83983172ec8fef08d2c9f537e
 SHA1 (patch-configure) = 1afa4777f2cc2a24bb526fab9fb6d9265677fb9f
 SHA1 (patch-plugins_otp.c) = 1dd8763d5b14c2f2462349ce5f73353ae70313fa
-SHA1 (patch-saslauthd_Makefile.in) = 397bc893975ff4d8b0067dae571381f06486493d

Index: pkgsrc/security/cyrus-saslauthd/Makefile
diff -u pkgsrc/security/cyrus-saslauthd/Makefile:1.56 pkgsrc/security/cyrus-saslauthd/Makefile:1.57
--- pkgsrc/security/cyrus-saslauthd/Makefile:1.56       Thu Oct 21 07:46:37 2021
+++ pkgsrc/security/cyrus-saslauthd/Makefile    Thu Feb 24 11:00:04 2022
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.56 2021/10/21 07:46:37 wiz Exp $
+# $NetBSD: Makefile,v 1.57 2022/02/24 11:00:04 wiz Exp $
 
 PKGNAME=       ${DISTNAME:S/sasl/saslauthd/}
-PKGREVISION=   2
 CONFLICTS+=    cyrus-sasl<2.1.15nb2
 
 .include "../../security/cyrus-sasl/Makefile.common"
@@ -38,10 +37,6 @@ SUBST_FILES.sysconf= saslauthd/LDAP_SASL
 SUBST_SED.sysconf=     -e "s,/usr/local/etc/,${PKG_SYSCONFDIR}/,g"
 
 post-install:
-       for f in saslcache ; do                         \
-               ${INSTALL_PROGRAM} ${WRKSRC}/saslauthd/$$f \
-                       ${DESTDIR}${PREFIX}/bin/$$f;    \
-       done
 .if !empty(PKG_OPTIONS:Mldap)
        ${INSTALL_DATA_DIR} ${DESTDIR}${PREFIX}/share/doc/cyrus-saslauthd
        ${INSTALL_DATA} ${WRKSRC}/saslauthd/LDAP_SASLAUTHD              \

Index: pkgsrc/security/cyrus-saslauthd/PLIST
diff -u pkgsrc/security/cyrus-saslauthd/PLIST:1.14 pkgsrc/security/cyrus-saslauthd/PLIST:1.15
--- pkgsrc/security/cyrus-saslauthd/PLIST:1.14  Tue Apr 17 01:57:18 2018
+++ pkgsrc/security/cyrus-saslauthd/PLIST       Thu Feb 24 11:00:04 2022
@@ -1,7 +1,6 @@
-@comment $NetBSD: PLIST,v 1.14 2018/04/17 01:57:18 christos Exp $
-bin/saslcache
+@comment $NetBSD: PLIST,v 1.15 2022/02/24 11:00:04 wiz Exp $
 man/man8/saslauthd.8
-sbin/saslcache
+man/man8/testsaslauthd.8
 sbin/saslauthd
 sbin/testsaslauthd
 ${PLIST.ldap}share/doc/cyrus-saslauthd/LDAP_SASLAUTHD



Home | Main Index | Thread Index | Old Index