Security bump - bug #490668

Package-Manager: portage-2.2.7/cvs/Linux x86_64
Manifest-Sign-Key: 0x77F1F175586A3B1F

3 files changed, 149 insertions, 15 deletions

diff --git a/app-crypt/mit-krb5/ChangeLog b/app-crypt/mit-krb5/ChangeLog
index 32051af735d1..9c0b01aee4fe 100644
--- a/app-crypt/mit-krb5/ChangeLog
+++ b/app-crypt/mit-krb5/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for app-crypt/mit-krb5
 # Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-crypt/mit-krb5/ChangeLog,v 1.383 2013/10/11 14:17:06 eras Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-crypt/mit-krb5/ChangeLog,v 1.384 2013/11/09 05:16:47 eras Exp $
+
+*mit-krb5-1.11.4 (09 Nov 2013)
+
+  09 Nov 2013; Eray Aslan <eras@gentoo.org> +mit-krb5-1.11.4.ebuild:
+  Security bump - bug #490668
 
   11 Oct 2013; Eray Aslan <eras@gentoo.org> mit-krb5-1.11.2-r1.ebuild,
   mit-krb5-1.11.3.ebuild:
diff --git a/app-crypt/mit-krb5/Manifest b/app-crypt/mit-krb5/Manifest
index 2a89981cdceb..934e3b75c2f5 100644
--- a/app-crypt/mit-krb5/Manifest
+++ b/app-crypt/mit-krb5/Manifest
@@ -10,24 +10,26 @@ AUX mit-krb5kdc.initd-r1 556 SHA256 709309dea043aa306c2fcf0960e0993a6db540c220de
 AUX mit-krb5kpropd.initd-r1 595 SHA256 c374ea05d7e9f15e10c8f9dbd0cad6548e0f92aef7de33e5dbc27222e9407e7b SHA512 a18c523aebbb6b8512cd261eac2149c7422214ef6a233e1ceb1b4da9187eeca317ddd75a153b13382571778931bbed00b1803ed015ff01875c8d565b3f3a593f WHIRLPOOL 869f8aec4764a12b5b5506a2fab8ea2641b58cb347a1db60110cccbb011dc51ab9115824828184abc55efccf540d6b014a57e0891b1d6d4ce28ff35405197aeb
 DIST krb5-1.11.2-signed.tar 11673600 SHA256 f0373295fb320b9702468eb0df33397e7278326ec1681a8c6037cc53cb0120a5 SHA512 2db58530a98c4bdf9c6f797f3fb2881a3bdeda680804309f1f40e877a5a1c6e589021e1e0521b5a258626e5d04105ad0c01575b2104313b4b9592ee1ae8b8006 WHIRLPOOL 10deade6b13e88187e827513a8e56a4287a654e5b6f9554ef85657fd6d7ded5ba0d2311c001e1b35f13e0d1c5ddeefeca68cdf43ee4192432b318d8cc55c2bdd
 DIST krb5-1.11.3-signed.tar 11673600 SHA256 9abd94bb94a70996da0f8d90408957154bb543271b097e86c63eb33e5f5751b5 SHA512 4d4c5d5c3a495da141bca40fe73378db190ace8ed397b7bb8e38c53757e6df3ec55fa0eb5628f7c6204d1265f8451535e65c4ebd844821c64cdfd0c6e32468a5 WHIRLPOOL 62befb0bd0dde3a459e877f9219c53486cd99b82de8ea6412caca59cc03f73c0f4ae327299d0c45a72ec70e96989f2dfb94ba7f21ccd691dc05c2f38c85d2111
+DIST krb5-1.11.4-signed.tar 11683840 SHA256 5c294612dcaf830958786056e898384931490eaf7b3290c3af5d2def2312fb97 SHA512 03d4d77681d7ba6f0324dc45f8457f6a5e3be23198c8ffa19fc9542b4455ec0738f78131a054e6d501396d3f66a29677d374726d068a83f6dddf7b7b7db18c6c WHIRLPOOL e710045332d21d5d52d22b746f46e9aa56dc5bf67a1d6e5e0b107f5b4aab6a4aba9ff31a374f865348123d0a61156546214a5929bd1c5a7b0a0e6f8ec599fa74
 EBUILD mit-krb5-1.11.2-r1.ebuild 3310 SHA256 5afabf1dbb5f1b67f6ad8de7c7b5fe71ee9cdcde58233e2859391f9a29cf0380 SHA512 b3da741813285d152b0d379d7a7c0943bf7b4e85bd8160f8e71357db9d5fc922d6baaa7c26fdab297920e44f79c3e738d9ae519c4fbee96eca8cb3a566926f27 WHIRLPOOL 384586ae5ac80e566cf5bed447322f0e7d2a3aba74e2050c74f02ea54057309503ef552d366c46d4d46d7e3b4adb25a60bc0c1218e2065f9635e891ef579aa3f
 EBUILD mit-krb5-1.11.3.ebuild 3297 SHA256 ec8a1ab46723c1069c48aa86e4d9382950edb0d5537195bbab342a9d346dadb3 SHA512 d8fed3a4f39e9b640ea8f87c7e8ec21e1348d2161398d981e06be983bf9640fd7c87904dc017564d3618963763aa78f3351efac015143456e4b13fac7f2b3a68 WHIRLPOOL 46b44d4b54d8ac990f82330160ad5134f724ff2c16ad04c7063cfe2ca3c439096997c831802c226293cc5ff7c1a9d87860fc8c77390bef34dc56e39f0e8f9f79
-MISC ChangeLog 59850 SHA256 f6b2194999a543dd3b0a97fccdd9177c9f54390dcfd31d5086103f9c9028a103 SHA512 996e119e1c9220bbbf9a463ea0ea17a54d423ceaf8eab03874fd33cbd171450a2373e0c42f709830de8e6e73afd5c8d2a60c9e0711b8ef6fb578c3123536be0f WHIRLPOOL 85cb0c1a318b42fdd6898b2b5de25c79a0f925e163c2b05ef0d2d8969c5e1378c0c2f6830e012622af2d70b2e88355e0a44e7f64b9de03e6b79d3ad28686ba94
+EBUILD mit-krb5-1.11.4.ebuild 3297 SHA256 ca6d15846e7f6e3c983f073456c25220ae6593b620b2d2b12bc9f2b7b3ca7092 SHA512 c4ef8ac9fb218f43e9833f4d6cdb8875238dfcd333fb050835635ea4015b92c97ed1f0eede423505b0ca3607444dccb029610999c1b6414a907536686a183966 WHIRLPOOL 5570cfe5e1240605286fed9879183987e137be96d737918d40434c8d01e4077002627ad4e14c2e3eedece462656ceea72f2a360df0a90283abf237847048e1ca
+MISC ChangeLog 59982 SHA256 9d4cb05756143c149f20ce3607956954a26bd436907660f1679ffbc8d3199364 SHA512 ba5512a75338cc5228c4c321b3c2beb02674d15a6a3cd9d283c852d238740615445cd4e2acb54312f3c9904b8cd0bbbbad3effeba0648e586ab8766b65d017bb WHIRLPOOL 701370918f06f8daa1b696b07b3678648f9fd3f3eb215541b4417e40dc56eb5572c88a7c116b4f0940eea7a9e20bc7aab30bb3639afbe8541aaa122b63f39cb5
 MISC metadata.xml 668 SHA256 da5862dde92f34b882870961cb9f1e4aa8209fc549e32a43d99770a9de8b232d SHA512 0038aeb7cda74161d2e2fe97c5124ee6cc86a24b9503714c128cd8b9af8b8050a89cf5dd3aadd66b1714c1d1aeb8564d50479547a586200793ea485e9f9c6c8b WHIRLPOOL 52394a4f4d5acb11f3bf2e76e036707c7f7741990d70bafb5c87a6da5d191b6aee3cb8383f6e66694cbda7458eb1a869c7ec8758750741835e2f1af4e028378c
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.22 (GNU/Linux)
 
-iQIcBAEBCAAGBQJSWAhjAAoJEHfx8XVYajsfsGMP/15BruDyd4rZ1A4OHiGTJRgO
-s10WDMbIW7VHTvI9QKYNDTh/SMhj8P41tP9+PYyUaJdAn5Sfv0AuLHQj91FdaWGR
-SQMFXIGU4FaK1oXo0i0hMkeBsmW/YXX536O4yciAXqbDsxMm3DiPpYQzvccigSHL
-zEvkg2OhJi8PFhejyHPFmMMxGqR5FKRPgE0k4GJx0zwksWQJbtbDXQJ5ZzSbej9E
-4yCYYhBuiEB9oPNT6OYhO046h9IEQtoTPRa58dzQPImsHCwlCS8r+AgGv7r4Eh6d
-uGFOuNsy2jBWBBbFJC6IZBpml6VfbDB2F+GTLk0pip1hDYamJgRXHdauDReqATwI
-p8brMFpQFhTVe0MG2hyEIIwO7GNKID0sYNsEFuVkm9wx4yTg7BaWRdA1WCiggkLL
-V6zh0cSQZ8OjLurmhNgC2UKYv2dm2UNiesJRGbDX0nUCFouMFunvXd/YTqeN07CE
-GiHZHky23jttfRx9Vmm/1JFchqPTrszMMTZmp8hcgEUJLdfQlvfAYMSAh5NFazIO
-MlEcIGftB6xORkcfXXIHywWw6OJxwXcFJNKos9Ief9wLWMASXbXak+ulazEVnBsO
-EcfidmO5LXiunuIxnRC7pofeMHyGeBTdDQE3+NdzXlo+N2WhlMsS632sjVJZhjbm
-xIkR7eVnKlqL4fgWqvkc
-=K4Vh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+=fsyp
 -----END PGP SIGNATURE-----
diff --git a/app-crypt/mit-krb5/mit-krb5-1.11.4.ebuild b/app-crypt/mit-krb5/mit-krb5-1.11.4.ebuild
new file mode 100644
index 000000000000..671f478105ee
--- /dev/null
+++ b/app-crypt/mit-krb5/mit-krb5-1.11.4.ebuild
@@ -0,0 +1,127 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-crypt/mit-krb5/mit-krb5-1.11.4.ebuild,v 1.1 2013/11/09 05:16:47 eras Exp $
+
+EAPI=5
+
+PYTHON_COMPAT=( python{2_6,2_7} )
+inherit eutils flag-o-matic python-any-r1 versionator
+
+MY_P="${P/mit-}"
+P_DIR=$(get_version_component_range 1-2)
+DESCRIPTION="MIT Kerberos V"
+HOMEPAGE="http://web.mit.edu/kerberos/www/"
+SRC_URI="http://web.mit.edu/kerberos/dist/krb5/${P_DIR}/${MY_P}-signed.tar"
+
+LICENSE="openafs-krb5-a BSD MIT OPENLDAP BSD-2 HPND BSD-4 ISC RSA CC-BY-SA-3.0 || ( BSD-2 GPL-2+ )"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE="doc +keyutils openldap +pkinit +threads test xinetd"
+
+RDEPEND="!!app-crypt/heimdal
+	>=sys-libs/e2fsprogs-libs-1.41.0
+	|| ( dev-libs/libverto[libev] dev-libs/libverto[libevent] dev-libs/libverto[tevent] )
+	keyutils? ( sys-apps/keyutils )
+	openldap? ( net-nds/openldap )
+	pkinit? ( dev-libs/openssl )
+	xinetd? ( sys-apps/xinetd )"
+DEPEND="${RDEPEND}
+	${PYTHON_DEPS}
+	virtual/yacc
+	doc? ( virtual/latex-base )
+	test? ( ${PYTHON_DEPS}
+			dev-lang/tcl
+			dev-util/dejagnu )"
+
+S=${WORKDIR}/${MY_P}/src
+
+src_unpack() {
+	unpack ${A}
+	unpack ./"${MY_P}".tar.gz
+}
+
+src_prepare() {
+	epatch "${FILESDIR}/${PN}-1.11_uninitialized.patch"
+	epatch "${FILESDIR}/${PN}_krb5-config_LDFLAGS.patch"
+
+	# tcl-8.6 compatibility
+	sed -i -e 's/interp->result/Tcl_GetStringResult(interp)/' \
+		kadmin/testing/util/tcl_kadm5.c || die
+}
+
+src_configure() {
+	append-cppflags "-I${EPREFIX}/usr/include/et"
+	# QA
+	append-flags -fno-strict-aliasing
+	append-flags -fno-strict-overflow
+
+	use keyutils || export ac_cv_header_keyutils_h=no
+	econf \
+		$(use_with openldap ldap) \
+		"$(use_with test tcl "${EPREFIX}/usr")" \
+		$(use_enable pkinit) \
+		$(use_enable threads thread-support) \
+		--without-hesiod \
+		--enable-shared \
+		--with-system-et \
+		--with-system-ss \
+		--enable-dns-for-realm \
+		--enable-kdc-lookaside-cache \
+		--with-system-verto \
+		--disable-rpath
+}
+
+src_compile() {
+	emake -j1
+}
+
+src_test() {
+	emake -j1 check
+}
+
+src_install() {
+	emake \
+		DESTDIR="${D}" \
+		EXAMPLEDIR="${EPREFIX}/usr/share/doc/${PF}/examples" \
+		install
+
+	# default database dir
+	keepdir /var/lib/krb5kdc
+
+	cd ..
+	dodoc README
+
+	if use doc; then
+		dohtml -r doc/html/*
+		docinto pdf
+		dodoc doc/pdf/*.pdf
+	fi
+
+	newinitd "${FILESDIR}"/mit-krb5kadmind.initd-r1 mit-krb5kadmind
+	newinitd "${FILESDIR}"/mit-krb5kdc.initd-r1 mit-krb5kdc
+	newinitd "${FILESDIR}"/mit-krb5kpropd.initd-r1 mit-krb5kpropd
+
+	insinto /etc
+	newins "${ED}/usr/share/doc/${PF}/examples/krb5.conf" krb5.conf.example
+	insinto /var/lib/krb5kdc
+	newins "${ED}/usr/share/doc/${PF}/examples/kdc.conf" kdc.conf.example
+
+	if use openldap ; then
+		insinto /etc/openldap/schema
+		doins "${S}/plugins/kdb/ldap/libkdb_ldap/kerberos.schema"
+	fi
+
+	if use xinetd ; then
+		insinto /etc/xinetd.d
+		newins "${FILESDIR}/kpropd.xinetd" kpropd
+	fi
+}
+
+pkg_preinst() {
+	if has_version "<${CATEGORY}/${PN}-1.8.0" ; then
+		elog "MIT split the Kerberos applications from the base Kerberos"
+		elog "distribution.  Kerberized versions of telnet, rlogin, rsh, rcp,"
+		elog "ftp clients and telnet, ftp deamons now live in"
+		elog "\"app-crypt/mit-krb5-appl\" package."
+	fi
+}