rpms/krb5/devel .cvsignore, 1.27, 1.28 krb5.spec, 1.236, 1.237 sources, 1.29, 1.30 2009-003-patch.txt, 1.1, NONE 2009-004-patch_1.7.txt, 1.1, NONE krb5-1.7-errs.patch, 1.2, NONE krb5-1.7-spnego-deleg.patch, 1.3, NONE

Wed Feb 3 17:11:35 UTC 2010

Author: nalin

Update of /cvs/extras/rpms/krb5/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv18260

Modified Files:
	.cvsignore krb5.spec sources 
Removed Files:
	2009-003-patch.txt 2009-004-patch_1.7.txt krb5-1.7-errs.patch 
	krb5-1.7-spnego-deleg.patch 
Log Message:
- update to 1.7.1
  - don't trip AD lockout on wrong password (#542687, #554351)
  - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
  - fixes gss_krb5_copy_ccache() when SPNEGO is used
- move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
  the devel subpackage, better lining up with the expected krb5/krb5-appl
  split in 1.8
- drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
  depends on -workstation which also includes them



Index: .cvsignore
===================================================================
RCS file: /cvs/extras/rpms/krb5/devel/.cvsignore,v
retrieving revision 1.27
retrieving revision 1.28
diff -u -p -r1.27 -r1.28

--- .cvsignore	4 Jun 2009 22:38:14 -0000	1.27
+++ .cvsignore	3 Feb 2010 17:11:34 -0000	1.28
@@ -28,3 +28,6 @@ krb5-1.6.3-pdf.tar.gz
 krb5-1.7.tar.gz
 krb5-1.7.tar.gz.asc
 krb5-1.7-pdf.tar.gz
+krb5-1.7.1.tar.gz
+krb5-1.7.1.tar.gz.asc
+krb5-1.7.1-pdf.tar.gz


Index: krb5.spec
===================================================================
RCS file: /cvs/extras/rpms/krb5/devel/krb5.spec,v
retrieving revision 1.236
retrieving revision 1.237
diff -u -p -r1.236 -r1.237
--- krb5.spec	25 Jan 2010 16:58:14 -0000	1.236
+++ krb5.spec	3 Feb 2010 17:11:35 -0000	1.237
@@ -9,10 +9,10 @@
 
 Summary: The Kerberos network authentication system
 Name: krb5
-Version: 1.7
-Release: 23%{?dist}
+Version: 1.7.1
+Release: 1%{?dist}
 # Maybe we should explode from the now-available-to-everybody tarball instead?
-# http://web.mit.edu/kerberos/dist/krb5/1.7/krb5-1.7-signed.tar
+# http://web.mit.edu/kerberos/dist/krb5/1.7/krb5-1.7.1-signed.tar
 Source0: krb5-%{version}.tar.gz
 Source1: krb5-%{version}.tar.gz.asc
 Source2: kpropd.init
@@ -78,14 +78,10 @@ Patch72: krb5-1.6.3-ftp_fdleak.patch
 Patch73: krb5-1.6.3-ftp_glob_runique.patch
 Patch79: krb5-trunk-ftp_mget_case.patch
 Patch86: krb5-1.7-time_t_size.patch
-Patch87: krb5-1.7-errs.patch
 Patch88: krb5-1.7-sizeof.patch
 Patch89: krb5-1.7-largefile.patch
 Patch90: krb5-1.7-openssl-1.0.patch
-Patch91: krb5-1.7-spnego-deleg.patch
-Patch92: http://web.mit.edu/kerberos/advisories/2009-003-patch.txt
 Patch93: krb5-1.7-create_on_load.patch
-Patch94: http://web.mit.edu/kerberos/advisories/2009-004-patch_1.7.txt
 Patch95: krb5-1.7-opte.patch
 Patch96: krb5-1.7-exp_warn.patch
 
@@ -226,6 +222,17 @@ to obtain initial credentials from a KDC
 certificate.
 
 %changelog
+* Wed Feb  3 2010 Nalin Dahyabhai <nalin at redhat.com> - 1.7.1-1
+- update to 1.7.1
+  - don't trip AD lockout on wrong password (#542687, #554351)
+  - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
+  - fixes gss_krb5_copy_ccache() when SPNEGO is used
+- move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
+  the devel subpackage, better lining up with the expected krb5/krb5-appl
+  split in 1.8
+- drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
+  depends on -workstation which also includes them
+
 * Mon Jan 25 2010 Nalin Dahyabhai <nalin at redhat.com> - 1.7-23
 - tighten up default permissions on kdc.conf and kadm5.acl (#558343)
 
@@ -1569,14 +1576,10 @@ popd
 %patch73 -p1 -b .ftp_glob_runique
 %patch79 -p0 -b .ftp_mget_case
 %patch86 -p1 -b .time_t_size
-%patch87 -p1 -b .errs
 %patch88 -p1 -b .sizeof
 %patch89 -p1 -b .largefile
 %patch90 -p0 -b .openssl-1.0
-%patch91 -p0 -b .spnego-deleg
-%patch92 -p1 -b .2009-003
 %patch93 -p1 -b .create_on_load
-%patch94 -p0 -b .2009-004
 %patch95 -p1 -b .opte
 %patch96 -p1 -b .exp_warn
 gzip doc/*.ps
@@ -1919,11 +1922,6 @@ exit 0
 %{krb5prefix}/bin/telnet
 %{krb5prefix}/man/man1/telnet.1*
 
-# Protocol test clients.
-%{krb5prefix}/bin/sim_client
-%{krb5prefix}/bin/gss-client
-%{krb5prefix}/bin/uuclient
-
 %files workstation-servers
 %defattr(-,root,root)
 %docdir %{krb5prefix}/man
@@ -1952,16 +1950,6 @@ exit 0
 %{krb5prefix}/sbin/login.krb5
 %{krb5prefix}/man/man8/login.krb5.8*
 
-# Tools you're likely to need if you're running these app servers.
-%{krb5prefix}/bin/kvno
-%{krb5prefix}/man/man1/kvno.1*
-%{krb5prefix}/bin/kadmin
-%{krb5prefix}/man/man1/kadmin.1*
-%{krb5prefix}/bin/k5srvutil
-%{krb5prefix}/man/man1/k5srvutil.1*
-%{krb5prefix}/bin/ktutil
-%{krb5prefix}/man/man1/ktutil.1*
-
 # Application servers.
 %{krb5prefix}/sbin/ftpd
 %{krb5prefix}/man/man8/ftpd.8*
@@ -1972,11 +1960,6 @@ exit 0
 %{krb5prefix}/sbin/telnetd
 %{krb5prefix}/man/man8/telnetd.8*
 
-# Protocol test servers.
-%{krb5prefix}/sbin/sim_server
-%{krb5prefix}/sbin/gss-server
-%{krb5prefix}/sbin/uuserver
-
 %files server
 %defattr(-,root,root)
 %docdir %{krb5prefix}/man
@@ -2134,3 +2117,13 @@ exit 0
 %{krb5prefix}/man/man1/sclient.1*
 %{krb5prefix}/man/man8/sserver.8*
 %{krb5prefix}/sbin/sserver
+
+# Protocol test clients.
+%{krb5prefix}/bin/sim_client
+%{krb5prefix}/bin/gss-client
+%{krb5prefix}/bin/uuclient
+
+# Protocol test servers.
+%{krb5prefix}/sbin/sim_server
+%{krb5prefix}/sbin/gss-server
+%{krb5prefix}/sbin/uuserver


Index: sources
===================================================================
RCS file: /cvs/extras/rpms/krb5/devel/sources,v
retrieving revision 1.29
retrieving revision 1.30
diff -u -p -r1.29 -r1.30
--- sources	4 Jun 2009 22:15:04 -0000	1.29
+++ sources	3 Feb 2010 17:11:35 -0000	1.30
@@ -1,3 +1,3 @@
-7ef90ed2727a64f4526cfff253eb1f6d  krb5-1.7.tar.gz
-d4609117653b4e1656a9025f7720f44e  krb5-1.7.tar.gz.asc
-9b6544a358108c5b2392ce86df7864f0  krb5-1.7-pdf.tar.gz
+9d79efba57423008e65efc5ff75405d6  krb5-1.7.1.tar.gz
+2197cc65ed90f00f92e5a27bd514b53b  krb5-1.7.1.tar.gz.asc
+309139729539cf5ef403bb0dc7ae455b  krb5-1.7.1-pdf.tar.gz


--- 2009-003-patch.txt DELETED ---


--- 2009-004-patch_1.7.txt DELETED ---


--- krb5-1.7-errs.patch DELETED ---


--- krb5-1.7-spnego-deleg.patch DELETED ---

