Date: Sun, 27 May 2007 14:55:31 GMT From: Christian Ullrich<chris@chrullrich.de> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/113059: Security update for www/mod_auth_kerb 5.1 -> 5.3 Message-ID: <200705271455.l4REtVAl087067@www.freebsd.org> Resent-Message-ID: <200705271500.l4RF09WM017578@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 113059
>Category: ports
>Synopsis: Security update for www/mod_auth_kerb 5.1 -> 5.3
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: update
>Submitter-Id: current-users
>Arrival-Date: Sun May 27 15:00:08 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator: Christian Ullrich
>Release:
>Organization:
>Environment:
>Description:
This patch updates www/mod_auth_kerb from version 5.1 to 5.3. Releases up to 5.2 have a remotely exploitable vulnerability (CVE-2006-5989).
>How-To-Repeat:
>Fix:
diff -urN mod_auth_kerb.orig/Makefile mod_auth_kerb/Makefile
--- mod_auth_kerb.orig/Makefile Thu May 24 13:41:38 2007
+++ mod_auth_kerb/Makefile Thu May 24 13:41:58 2007
@@ -8,7 +8,7 @@
# Shamelessly stolen from will's mod_auth_any port.
PORTNAME= mod_auth_kerb
-PORTVERSION= 5.1
+PORTVERSION= 5.3
CATEGORIES= www
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE}
MASTER_SITE_SUBDIR=modauthkerb
diff -urN mod_auth_kerb.orig/distinfo mod_auth_kerb/distinfo
--- mod_auth_kerb.orig/distinfo Thu May 24 13:41:38 2007
+++ mod_auth_kerb/distinfo Thu May 24 13:42:23 2007
@@ -1,3 +1,3 @@
-MD5 (mod_auth_kerb-5.1.tar.gz) = b6a0c44b572c6e67ea7191999844aff6
-SHA256 (mod_auth_kerb-5.1.tar.gz) = 0415ea2bf506dfe7ac35b77fe49f6c5ca76f432e55e32904432c4150cc63faf5
-SIZE (mod_auth_kerb-5.1.tar.gz) = 73731
+MD5 (mod_auth_kerb-5.3.tar.gz) = a363588578050b3d320a2ceccf3ed666
+SHA256 (mod_auth_kerb-5.3.tar.gz) = 89cd779a94405521770cbcb169af5af61e7f2aad91c4f4b82efaae35df7595ec
+SIZE (mod_auth_kerb-5.3.tar.gz) = 73530
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200705271455.l4REtVAl087067>