summaryrefslogtreecommitdiff
path: root/core/krb5/PKGBUILD
diff options
context:
space:
mode:
authorroot <root@rshg054.dnsready.net>2011-10-21 23:14:54 +0000
committerroot <root@rshg054.dnsready.net>2011-10-21 23:14:54 +0000
commitd3d0811e23787b5c66edf94b3351a1555eb5010f (patch)
tree5fb14b5a2d0bd5b526a58d27e6fb81f04977855a /core/krb5/PKGBUILD
parent1b21445a8e9097b0bb0542ed847fbb1eb832848f (diff)
Fri Oct 21 23:14:53 UTC 2011
Diffstat (limited to 'core/krb5/PKGBUILD')
-rw-r--r--core/krb5/PKGBUILD14
1 files changed, 10 insertions, 4 deletions
diff --git a/core/krb5/PKGBUILD b/core/krb5/PKGBUILD
index b86c0a91c..38cf23966 100644
--- a/core/krb5/PKGBUILD
+++ b/core/krb5/PKGBUILD
@@ -1,9 +1,9 @@
-# $Id: PKGBUILD 139635 2011-10-03 23:42:42Z stephane $
+# $Id: PKGBUILD 141000 2011-10-21 02:57:57Z stephane $
# Maintainer: Stéphane Gaudreault <stephane@archlinux.org>
pkgname=krb5
pkgver=1.9.1
-pkgrel=4
+pkgrel=5
pkgdesc="The Kerberos network authentication system"
arch=('i686' 'x86_64')
url="http://web.mit.edu/kerberos/"
@@ -18,12 +18,14 @@ source=(http://web.mit.edu/kerberos/dist/${pkgname}/1.9/${pkgname}-${pkgver}-sig
krb5-kadmind
krb5-kdc
krb5-1.9.1-config-script.patch
- krb5-1.9.1-canonicalize-fallback.patch)
+ krb5-1.9.1-canonicalize-fallback.patch
+ krb5-1.9.1-2011-006.patch)
sha1sums=('e23a1795a237521493da9cf3443ac8b98a90c066'
'2aa229369079ed1bbb201a1ef72c47bf143f4dbe'
'77d2312ecd8bf12a6e72cc8fd871a8ac93b23393'
'7342410760cf44bfa01bb99bb4c49e12496cb46f'
- '238c268fa6cb42fc7324ab54db9abda5cd77f833')
+ '238c268fa6cb42fc7324ab54db9abda5cd77f833'
+ '0b0016b0e341dcf720f67925b0d451b328e02583')
options=('!emptydirs')
build() {
@@ -47,6 +49,10 @@ build() {
# FS#25384
sed -i "/KRB5ROOT=/s/\/local//" util/ac_check_krb5.m4
+ # KDC denial of service vulnerabilities
+ # http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt
+ patch -Np2 -i ${srcdir}/krb5-1.9.1-2011-006.patch
+
export CFLAGS+=" -fPIC -fno-strict-aliasing -fstack-protector-all"
export CPPFLAGS+=" -I/usr/include/et"
./configure --prefix=/usr \