commit libheimdal for openSUSE:Factory
Hello community, here is the log from the commit of package libheimdal for openSUSE:Factory checked in at 2019-06-24 21:52:23 Comparing /work/SRC/openSUSE:Factory/libheimdal (Old) and /work/SRC/openSUSE:Factory/.libheimdal.new.4615 (New) Package is "libheimdal" Mon Jun 24 21:52:23 2019 rev:9 rq:711481 version:7.7.0 Changes: --- /work/SRC/openSUSE:Factory/libheimdal/libheimdal.changes2018-08-08 14:54:47.221677546 +0200 +++ /work/SRC/openSUSE:Factory/.libheimdal.new.4615/libheimdal.changes 2019-06-24 21:53:34.556115875 +0200 @@ -1,0 +2,133 @@ +Sun Jun 23 00:50:31 UTC 2019 - enzok...@kabelmail.de + +- Update to version 7.7.0 + + Bug fixes: +- PKCS#11 hcrypto back-end: + + initialize the p11_module_load function list + + verify that not only is a mechanism present but that its +mechanism info states that it offers the required +encryption, decryption or digest services +- krb5: + + Starting with 7.6, Heimdal permitted requesting +authenticated anonymous tickets. However, it did not +verify that a KDC in fact returned an anonymous ticket +when one was requested. + + Cease setting the KDCOption reaquest_anonymous flag when +issuing S4UProxy (constrained delegation) TGS requests. + + when the Win2K PKINIT compatibility option is set, do not +require krbtgt otherName to match when validating KDC +certificate. + + set PKINIT_BTMM flag per Apple implementation + + use memset_s() instead of memset() +- kdc: + + When generating KRB5SignedPath in the AS, use the reply +client name rather than the one from the request, so +validation will work correctly in the TGS. + + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT +used an enctype with a different checksum. Per [MS-SFU] +2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and +that's what Windows and MIT clients send. +In Heimdal both the client and kdc use instead the +checksum of the TGT, and therefore work with each other +but Windows and MIT clients fail against Heimdal KDC. +Both Windows and MIT KDC would allow any keyed checksum +to be used so Heimdal client work fine against it. +Change Heimdal KDC to allow HMAC_MD5 even for non RC4 +based TGT in order to support per-spec clients. + + use memset_s() instead of memset() + + Detect Heimdal 1.0 through 7.6 clients that issue +S4UProxy (constrained delegation) TGS Requests with the +request anonymous flag set. These requests will be +treated as S4UProxy requests and not anonymous requests. +- HDB: + + Set SQLite3 backend default page size to 8KB. + + Add hdb_set_sync() method +- kadmind: + + disable HDB sync during database load avoiding +unnecessary disk i/o. +- ipropd: + + disable HDB sync during receive_everything. Doing an +fsync per-record when receiving the complete HDB is a +performance disaster. Among other things, if the HDB is +very large, then one slave receving a full HDB can cause +other slaves to timeout and, if HDB write activity is +high enough to cause iprop log truncation, then also need +full syncs, which leads to a cycle of full syncs for all +slaves until HDB write activity drops. +Allowing the iprop log to be larger helps, but improving +receive_everything() performance helps even more. +- kinit: + + Anonymous PKINIT tickets discard the realm information +used to locate the issuing AS. Store the issuing realm in +the credentials cache in order to locate a KDC which can +renew them. + + Do not leak the result of krb5_cc_get_config() when +determining anonymous PKINIT start realm. +- klist: + + Show transited-policy-checked, ok-as-delegate and +anonymous flags when listing credentials. +- tests: + + Regenerate certs so that they expire before the 2038 +armageddon so the test suite will pass on 32-bit +operating systems until the underlying issues can be +resolved. +- Solaris: + + Define _STDC_C11_BCI for memset_s prototype +- build tooling: + + Convert from python 2 to python 3 +- documentation: + + rename verify-password to verify-password-quality + + hprop default mode is encrypt + + kadmind "all" permission does not include "get-keys" + + verify-password-quality might not be stateless + +- Version 7.6.0 + + Security (#555): +- CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed + checksum + When the Heimdal KDC checks the checksum that is placed on + the S4U2Self packet by the server to protect
commit libheimdal for openSUSE:Factory
Hello community,
here is the log from the commit of package libheimdal for openSUSE:Factory
checked in at 2018-08-08 14:53:55
Comparing /work/SRC/openSUSE:Factory/libheimdal (Old)
and /work/SRC/openSUSE:Factory/.libheimdal.new (New)
Package is "libheimdal"
Wed Aug 8 14:53:55 2018 rev:8 rq:627946 version:7.5.0
Changes:
--- /work/SRC/openSUSE:Factory/libheimdal/libheimdal.changes2018-01-19
11:51:38.680074026 +0100
+++ /work/SRC/openSUSE:Factory/.libheimdal.new/libheimdal.changes
2018-08-08 14:54:47.221677546 +0200
@@ -1,0 +2,6 @@
+Tue Aug 7 06:22:33 UTC 2018 - bwiedem...@suse.com
+
+- Add reproducible.patch to override build date (boo#1047218)
+- Use constant hostname (boo#1084909)
+
+---
New:
reproducible.patch
Other differences:
--
++ libheimdal.spec ++
--- /var/tmp/diff_new_pack.OXO68o/_old 2018-08-08 14:54:47.889678650 +0200
+++ /var/tmp/diff_new_pack.OXO68o/_new 2018-08-08 14:54:47.893678657 +0200
@@ -28,6 +28,8 @@
Source0:heimdal-%{version}-patched.tar.bz2
Source2:heimdal-patch-source.sh
Patch0: heimdal-patched.diff
+# PATCH-FIX-UPSTREAM bmwiedemann -- make build reproducible (boo#1047218)
+Patch1: reproducible.patch
%if 0%{?sles_version} == 11
BuildRequires: libcom_err-devel
BuildRequires: sqlite3-devel
@@ -98,8 +100,10 @@
%prep
%setup -q -n heimdal-%{version}
%patch0 -p1
+%patch1 -p1
%build
+export SOURCE_HOST=OBS # for reproducible builds (boo#1084909)
autoreconf -fi
%configure \
--with-sqlite3=%{_prefix}
++ reproducible.patch ++
>From 6d27e0048963955b547584f004109bbbad6e9baf Mon Sep 17 00:00:00 2001
From: Nicolas Williams
Date: Wed, 27 Sep 2017 15:30:00 -0500
Subject: [PATCH] Make builds reproduceable (#336)
---
Makefile.am | 1 -
cf/krb-version.m4 | 24
configure.ac | 51 ++-
3 files changed, 46 insertions(+), 30 deletions(-)
delete mode 100644 cf/krb-version.m4
diff --git a/Makefile.am b/Makefile.am
index f2bb5ac116..7fb69fdf4e 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -50,7 +50,6 @@ EXTRA_DIST = \
cf/krb-prog-yacc.m4 \
cf/krb-sys-aix.m4 \
cf/krb-sys-nextstep.m4 \
- cf/krb-version.m4 \
cf/roken.m4 \
cf/valgrind-suppressions \
cf/maybe-valgrind.sh \
diff --git a/cf/krb-version.m4 b/cf/krb-version.m4
deleted file mode 100644
index e196d993de..00
--- a/cf/krb-version.m4
+++ /dev/null
@@ -1,24 +0,0 @@
-dnl $Id$
-dnl
-dnl
-dnl output a C header-file with some version strings
-dnl
-
-AC_DEFUN([AC_KRB_VERSION],[
-cat > include/newversion.h.in include/version.h
-fi
-])
diff --git a/configure.ac b/configure.ac
index 806b639730..212a7d2744 100644
--- a/configure.ac
+++ b/configure.ac
@@ -663,22 +663,63 @@ dnl
dnl This is the release version name-number[beta]
dnl
-cat > include/newversion.h.in < include/newversion.h.in < include/newversion.h.in include/version.h
+ sed -e "s/@HOST@/$Host/" \
+-e "s;@USER@;$User;" \
+-e "s;@DATE@;$Date;" \
+-e "s;@BRANCH@;$GitBranch;" \
+-e "s;@TAG@;$GitDesc;" \
+-e "s;@COMMIT@;$GitCommit;" \
+include/version.h.in > include/version.h
fi
commit libheimdal for openSUSE:Factory
Hello community,
here is the log from the commit of package libheimdal for openSUSE:Factory
checked in at 2018-01-19 11:51:04
Comparing /work/SRC/openSUSE:Factory/libheimdal (Old)
and /work/SRC/openSUSE:Factory/.libheimdal.new (New)
Package is "libheimdal"
Fri Jan 19 11:51:04 2018 rev:7 rq:560559 version:7.5.0
Changes:
--- /work/SRC/openSUSE:Factory/libheimdal/libheimdal.changes2017-12-08
13:02:09.299355476 +0100
+++ /work/SRC/openSUSE:Factory/.libheimdal.new/libheimdal.changes
2018-01-19 11:51:38.680074026 +0100
@@ -1,0 +2,22 @@
+Fri Dec 29 13:16:21 UTC 2017 - joerg.loren...@ki.tng.de
+
+- Update to version 7.5.0
+ - Security
+- Fix CVE-2017-17439, which is a remote denial of service
+ vulnerability:
+ In Heimdal 7.1 through 7.4, remote unauthenticated attackers
+ are able to crash the KDC by sending a crafted UDP packet
+ containing empty data fields for client name or realm.
+ - Bug fixes
+- Handle long input lines when reloading database dumps.
+- In pre-forked mode (default on Unix), correctly clear the
+ process ids of exited children, allowing new child processes
+ to replace the old.
+- Fixed incorrect KDC response when no-cross realm TGT exists,
+ allowing client requests to fail quickly rather than time
+ out after trying to get a correct answer from each KDC.
+- Fixed heimdal-patched.diff.
+- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
+ fixed upstream.
+
+---
Old:
Avoid_NULL_structure_pointer_member_dereference.patch
heimdal-7.4.0-patched.tar.bz2
New:
heimdal-7.5.0-patched.tar.bz2
Other differences:
--
++ libheimdal.spec ++
--- /var/tmp/diff_new_pack.fE7uqJ/_old 2018-01-19 11:51:39.660027835 +0100
+++ /var/tmp/diff_new_pack.fE7uqJ/_new 2018-01-19 11:51:39.664027647 +0100
@@ -20,7 +20,7 @@
Summary:The Heimdal implementation of the Kerberos 5 protocol
License:BSD-3-Clause
Group: Productivity/Networking/Security
-Version:7.4.0
+Version:7.5.0
Release:0
Url:http://www.h5l.org
# patched source can be created with script heimdal-patch-source.sh:
@@ -28,7 +28,6 @@
Source0:heimdal-%{version}-patched.tar.bz2
Source2:heimdal-patch-source.sh
Patch0: heimdal-patched.diff
-Patch1: Avoid_NULL_structure_pointer_member_dereference.patch
%if 0%{?sles_version} == 11
BuildRequires: libcom_err-devel
BuildRequires: sqlite3-devel
@@ -99,7 +98,6 @@
%prep
%setup -q -n heimdal-%{version}
%patch0 -p1
-%patch1 -p0
%build
autoreconf -fi
++ heimdal-7.4.0-patched.tar.bz2 -> heimdal-7.5.0-patched.tar.bz2 ++
/work/SRC/openSUSE:Factory/libheimdal/heimdal-7.4.0-patched.tar.bz2
/work/SRC/openSUSE:Factory/.libheimdal.new/heimdal-7.5.0-patched.tar.bz2
differ: char 11, line 1
++ heimdal-patched.diff ++
--- /var/tmp/diff_new_pack.fE7uqJ/_old 2018-01-19 11:51:39.712025384 +0100
+++ /var/tmp/diff_new_pack.fE7uqJ/_new 2018-01-19 11:51:39.716025196 +0100
@@ -4,7 +4,7 @@
@@ -3,7 +3,6 @@
AC_PREREQ(2.62)
test -z "$CFLAGS" && CFLAGS="-g"
- AC_INIT([Heimdal],[7.4.0],[https://github.com/heimdal/heimdal/issues])
+ AC_INIT([Heimdal],[7.5.0],[https://github.com/heimdal/heimdal/issues])
-AC_CONFIG_SRCDIR([kuser/kinit.c])
AC_CONFIG_HEADERS(include/config.h)
AC_CONFIG_MACRO_DIR([cf])
commit libheimdal for openSUSE:Factory
Hello community,
here is the log from the commit of package libheimdal for openSUSE:Factory
checked in at 2017-12-08 13:01:49
Comparing /work/SRC/openSUSE:Factory/libheimdal (Old)
and /work/SRC/openSUSE:Factory/.libheimdal.new (New)
Package is "libheimdal"
Fri Dec 8 13:01:49 2017 rev:6 rq:555083 version:7.4.0
Changes:
--- /work/SRC/openSUSE:Factory/libheimdal/libheimdal.changes2017-08-10
14:13:01.180710783 +0200
+++ /work/SRC/openSUSE:Factory/.libheimdal.new/libheimdal.changes
2017-12-08 13:02:09.299355476 +0100
@@ -1,0 +2,6 @@
+Thu Dec 07 15:17:23 UTC 2017 - joerg.loren...@ki.tng.de
+
+- Added Avoid_NULL_structure_pointer_member_dereference.patch,
+ fixes (bsc#1071675).
+
+---
New:
Avoid_NULL_structure_pointer_member_dereference.patch
Other differences:
--
++ libheimdal.spec ++
--- /var/tmp/diff_new_pack.yQK9KZ/_old 2017-12-08 13:02:10.483312717 +0100
+++ /var/tmp/diff_new_pack.yQK9KZ/_new 2017-12-08 13:02:10.483312717 +0100
@@ -28,6 +28,7 @@
Source0:heimdal-%{version}-patched.tar.bz2
Source2:heimdal-patch-source.sh
Patch0: heimdal-patched.diff
+Patch1: Avoid_NULL_structure_pointer_member_dereference.patch
%if 0%{?sles_version} == 11
BuildRequires: libcom_err-devel
BuildRequires: sqlite3-devel
@@ -49,6 +50,7 @@
BuildRequires: pkg-config
BuildRequires: readline-devel
BuildRequires: texinfo
+BuildRequires: perl(JSON)
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
@@ -97,6 +99,7 @@
%prep
%setup -q -n heimdal-%{version}
%patch0 -p1
+%patch1 -p0
%build
autoreconf -fi
++ Avoid_NULL_structure_pointer_member_dereference.patch ++
--- kdc/kerberos5.c.orig
+++ kdc/kerberos5.c
@@ -2226,15 +2226,17 @@
/*
* In case of a non proxy error, build an error message.
*/
-if(ret != 0 && ret != HDB_ERR_NOT_FOUND_HERE && reply->length == 0) {
+if (ret != 0 && ret != HDB_ERR_NOT_FOUND_HERE && reply->length == 0) {
ret = _kdc_fast_mk_error(context, r,
&error_method,
r->armor_crypto,
&req->req_body,
ret, r->e_text,
r->server_princ,
-&r->client_princ->name,
-&r->client_princ->realm,
+r->client_princ ?
+ &r->client_princ->name : NULL,
+r->client_princ ?
+ &r->client_princ->realm : NULL,
NULL, NULL,
reply);
if (ret)
commit libheimdal for openSUSE:Factory
Hello community, here is the log from the commit of package libheimdal for openSUSE:Factory checked in at 2017-08-10 14:05:08 Comparing /work/SRC/openSUSE:Factory/libheimdal (Old) and /work/SRC/openSUSE:Factory/.libheimdal.new (New) Package is "libheimdal" Thu Aug 10 14:05:08 2017 rev:5 rq:514480 version:7.4.0 Changes: --- /work/SRC/openSUSE:Factory/libheimdal/libheimdal.changes2017-06-16 10:55:49.238737696 +0200 +++ /work/SRC/openSUSE:Factory/.libheimdal.new/libheimdal.changes 2017-08-10 14:13:01.180710783 +0200 @@ -1,0 +2,18 @@ +Thu Aug 03 20:25:45 UTC 2017 - joerg.loren...@ki.tng.de + +- Update to version 7.4.0 + - Security +- Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name + validation. + This is a critical vulnerability. + In _krb5_extract_ticket() the KDC-REP service name must be + obtained from encrypted version stored in 'enc_part' instead + of the unencrypted version stored in 'ticket'. + Use of the unecrypted version provides an opportunity for + successful server impersonation and other attacks. + Identified by Jeffrey Altman, Viktor Duchovni and + Nico Williams. + See https://www.orpheus-lyre.info/ for more details. +- Fixed heimdal-patched.diff. + +--- Old: heimdal-7.3.0-patched.tar.bz2 New: heimdal-7.4.0-patched.tar.bz2 Other differences: -- ++ libheimdal.spec ++ --- /var/tmp/diff_new_pack.x8okNP/_old 2017-08-10 14:13:01.88860 +0200 +++ /var/tmp/diff_new_pack.x8okNP/_new 2017-08-10 14:13:01.892610547 +0200 @@ -20,7 +20,7 @@ Summary:The Heimdal implementation of the Kerberos 5 protocol License:BSD-3-Clause Group: Productivity/Networking/Security -Version:7.3.0 +Version:7.4.0 Release:0 Url:http://www.h5l.org # patched source can be created with script heimdal-patch-source.sh: ++ heimdal-7.3.0-patched.tar.bz2 -> heimdal-7.4.0-patched.tar.bz2 ++ /work/SRC/openSUSE:Factory/libheimdal/heimdal-7.3.0-patched.tar.bz2 /work/SRC/openSUSE:Factory/.libheimdal.new/heimdal-7.4.0-patched.tar.bz2 differ: char 11, line 1 ++ heimdal-patched.diff ++ --- /var/tmp/diff_new_pack.x8okNP/_old 2017-08-10 14:13:01.980598158 +0200 +++ /var/tmp/diff_new_pack.x8okNP/_new 2017-08-10 14:13:01.980598158 +0200 @@ -4,7 +4,7 @@ @@ -3,7 +3,6 @@ AC_PREREQ(2.62) test -z "$CFLAGS" && CFLAGS="-g" - AC_INIT([Heimdal],[7.3.0],[https://github.com/heimdal/heimdal/issues]) + AC_INIT([Heimdal],[7.4.0],[https://github.com/heimdal/heimdal/issues]) -AC_CONFIG_SRCDIR([kuser/kinit.c]) AC_CONFIG_HEADERS(include/config.h) AC_CONFIG_MACRO_DIR([cf])
commit libheimdal for openSUSE:Factory
Hello community, here is the log from the commit of package libheimdal for openSUSE:Factory checked in at 2017-06-16 10:54:53 Comparing /work/SRC/openSUSE:Factory/libheimdal (Old) and /work/SRC/openSUSE:Factory/.libheimdal.new (New) Package is "libheimdal" Fri Jun 16 10:54:53 2017 rev:4 rq:503989 version:7.3.0 Changes: --- /work/SRC/openSUSE:Factory/libheimdal/libheimdal.changes2017-02-05 18:36:52.658489187 +0100 +++ /work/SRC/openSUSE:Factory/.libheimdal.new/libheimdal.changes 2017-06-16 10:55:49.238737696 +0200 @@ -1,0 +2,42 @@ +Thu Jun 15 20:52:17 UTC 2017 - joerg.loren...@ki.tng.de + +- Update to version 7.3.0 + - Security ++ Fix transit path validation. Commit f469fc6 (2010-10-02) + inadvertently caused the previous hop realm to not be added + to the transit path of issued tickets. This may, in some + cases, enable bypass of capath policy in Heimdal versions 1.5 + through 7.2. + Note, this may break sites that rely on the bug. With the bug + some incomplete [capaths] worked, that should not have. + These may now break authentication in some cross-realm + configurations. (CVE-2017-6594) +- Version 7.2.0 + - Bug fixes ++ Portability improvements. ++ More strict parsing of encoded URI components in HTTP KDC. ++ Fixed memory leak in malloc error recovery in NTLM GSSAPI + mechanism. ++ Avoid overly specific CPU info in krb5-config in aid of + reproducible builds. ++ Don't do AFS string-to-key tests when feature is disabled. ++ Skip mdb_stat test when the command is not available. ++ Windows: update SHA2 timestamp server. ++ hdb: add missing export + hdb_generate_key_set_password_with_ks_tuple. ++ Fix signature of hdb_generate_key_set_password(). ++ Windows: enable KX509 support in the KDC. ++ kdc: fix kx509 service principal match. ++ iprop: handle case where master sends nothing new. ++ ipropd-slave: fix incorrect error codes. ++ Allow choice of sqlite for HDB pref. ++ check-iprop: don't fail to kill daemons. ++ roken: pidfile -> rk_pidfile. ++ kdc: _kdc_do_kx509 fix use after free error. ++ Do not detect x32 as 64-bit platform. ++ No sys/ttydefaults.h on CYGWIN. ++ Fix check-iprop races. ++ roken_detach_prep() close pipe. +- Fixed heimdal-patched.diff. + +--- Old: heimdal-7.1.0-patched.tar.bz2 New: heimdal-7.3.0-patched.tar.bz2 Other differences: -- ++ libheimdal.spec ++ --- /var/tmp/diff_new_pack.qtOEN4/_old 2017-06-16 10:55:49.930640293 +0200 +++ /var/tmp/diff_new_pack.qtOEN4/_new 2017-06-16 10:55:49.934639730 +0200 @@ -20,7 +20,7 @@ Summary:The Heimdal implementation of the Kerberos 5 protocol License:BSD-3-Clause Group: Productivity/Networking/Security -Version:7.1.0 +Version:7.3.0 Release:0 Url:http://www.h5l.org # patched source can be created with script heimdal-patch-source.sh: ++ heimdal-7.1.0-patched.tar.bz2 -> heimdal-7.3.0-patched.tar.bz2 ++ /work/SRC/openSUSE:Factory/libheimdal/heimdal-7.1.0-patched.tar.bz2 /work/SRC/openSUSE:Factory/.libheimdal.new/heimdal-7.3.0-patched.tar.bz2 differ: char 11, line 1 ++ heimdal-patched.diff ++ --- /var/tmp/diff_new_pack.qtOEN4/_old 2017-06-16 10:55:49.986632411 +0200 +++ /var/tmp/diff_new_pack.qtOEN4/_new 2017-06-16 10:55:49.990631847 +0200 @@ -1,15 +1,15 @@ -diff -uNr heimdal-7.1.0/configure.ac heimdal-7.1.0-patched/configure.ac heimdal-7.1.0/configure.ac 2016-12-20 04:27:06.0 +0100 -+++ heimdal-7.1.0-patched/configure.ac 2017-01-07 22:38:34.618849987 +0100 +diff -uNr heimdal-7.3.0/configure.ac heimdal-7.3.0-patched/configure.ac +--- heimdal-7.3.0/configure.ac 2017-04-11 23:51:24.0 +0200 heimdal-7.3.0-patched/configure.ac 2017-06-15 18:34:59.934156728 +0200 @@ -3,7 +3,6 @@ AC_PREREQ(2.62) test -z "$CFLAGS" && CFLAGS="-g" - AC_INIT([Heimdal],[7.1.0],[https://github.com/heimdal/heimdal/issues]) + AC_INIT([Heimdal],[7.3.0],[https://github.com/heimdal/heimdal/issues]) -AC_CONFIG_SRCDIR([kuser/kinit.c]) AC_CONFIG_HEADERS(include/config.h) AC_CONFIG_MACRO_DIR([cf]) -@@ -589,7 +588,6 @@ +@@ -591,7 +590,6 @@ AM_CONDITIONAL(HEIMDAL_DOCUMENTATION, test "$enable_heimdal_documentation" != no) AC_CONFIG_FILES(Makefile \ @@ -17,7 +17,7 @@ include/Makefile\ include/gssapi/Makefile \ include/hcrypto/Makefile\ -@@ -614,35 +612,8 @@ +@@ -616,35 +614,8 @@ lib/sqlite/Makefile \ lib/vers/Makefile \ lib/wind/Makefile
commit libheimdal for openSUSE:Factory
Hello community,
here is the log from the commit of package libheimdal for openSUSE:Factory
checked in at 2017-02-05 15:49:56
Comparing /work/SRC/openSUSE:Factory/libheimdal (Old)
and /work/SRC/openSUSE:Factory/.libheimdal.new (New)
Package is "libheimdal"
Changes:
--- /work/SRC/openSUSE:Factory/libheimdal/libheimdal.changes2017-02-03
17:47:36.664556600 +0100
+++ /work/SRC/openSUSE:Factory/.libheimdal.new/libheimdal.changes
2017-02-05 18:36:52.658489187 +0100
@@ -1,0 +2,6 @@
+Thu Feb 2 01:44:35 UTC 2017 - jeng...@inai.de
+
+- Summary and RPM group update. Do a direct call to ldconfig
+ where possible.
+
+---
Other differences:
--
++ libheimdal.spec ++
--- /var/tmp/diff_new_pack.Hi44lx/_old 2017-02-05 18:36:53.686344886 +0100
+++ /var/tmp/diff_new_pack.Hi44lx/_new 2017-02-05 18:36:53.690344325 +0100
@@ -17,9 +17,9 @@
Name: libheimdal
-Summary:Libraries of Kerberos 5 implementation
+Summary:The Heimdal implementation of the Kerberos 5 protocol
License:BSD-3-Clause
-Group: System/Libraries
+Group: Productivity/Networking/Security
Version:7.1.0
Release:0
Url:http://www.h5l.org
@@ -40,14 +40,14 @@
%else
BuildRequires: ncurses-devel >= 5.3
%endif
-BuildRequires: db-devel >= 4.8
-BuildRequires: readline-devel
BuildRequires: automake >= 1.11
BuildRequires: bison
+BuildRequires: db-devel >= 4.8
BuildRequires: flex
BuildRequires: libtool
BuildRequires: pam-devel
BuildRequires: pkg-config
+BuildRequires: readline-devel
BuildRequires: texinfo
BuildRoot: %{_tmppath}/%{name}-%{version}-build
@@ -60,10 +60,10 @@
Also Microsoft Windows and Sun's Java come with implementations of Kerberos.
This package only provides libraries and devel files (binaries have been
removed),
-libraries are required by 64bit package of ICAClient version 13.2.
+libraries are required by 64-bit package of ICAClient version 13.2.
%package devel
-Summary:Libraries of Kerberos 5 implementation
+Summary:The Heimdal implementation of the Kerberos 5 protocol
Group: Development/Libraries/C and C++
Requires: libheimdal = %{version}
%if 0%{?sles_version} == 11
@@ -92,7 +92,7 @@
Also Microsoft Windows and Sun's Java come with implementations of Kerberos.
This package only provides libraries and devel files (binaries have been
removed),
-libraries are required by 64bit package of ICAClient version 13.2.
+libraries are required by 64-bit package of ICAClient version 13.2.
%prep
%setup -q -n heimdal-%{version}
@@ -115,8 +115,7 @@
%install_info --info-dir=%{_infodir} %{_infodir}/heimdal.info.gz
%install_info --info-dir=%{_infodir} %{_infodir}/hx509.info.gz
-%postun
-/sbin/ldconfig
+%postun -p /sbin/ldconfig
%preun
/sbin/ldconfig
commit libheimdal for openSUSE:Factory
Hello community,
here is the log from the commit of package libheimdal for openSUSE:Factory
checked in at 2017-01-27 11:07:17
Comparing /work/SRC/openSUSE:Factory/libheimdal (Old)
and /work/SRC/openSUSE:Factory/.libheimdal.new (New)
Package is "libheimdal"
Changes:
--- /work/SRC/openSUSE:Factory/libheimdal/libheimdal.changes2015-09-08
17:48:51.0 +0200
+++ /work/SRC/openSUSE:Factory/.libheimdal.new/libheimdal.changes
2017-02-03 17:47:36.664556600 +0100
@@ -1,0 +2,10 @@
+Sat Jan 07 22:57:23 UTC 2017 - joerg.loren...@ki.tng.de
+
+- Update to version 7.1.0
+- Removed heimdal-version-script-client.map.patch, fixed upstream.
+- Fixed heimdal-patched.diff.
+- Unfortunately there is no updated changelog file in tarball,
+ changes can be seen in source code version control systems
+ history log.
+
+---
Old:
heimdal-1.6rc2-patched.tar.bz2
heimdal-version-script-client.map.patch
New:
heimdal-7.1.0-patched.tar.bz2
Other differences:
--
++ libheimdal.spec ++
--- /var/tmp/diff_new_pack.GLkSNn/_old 2017-02-03 17:47:37.312465263 +0100
+++ /var/tmp/diff_new_pack.GLkSNn/_new 2017-02-03 17:47:37.316464699 +0100
@@ -1,7 +1,7 @@
#
# spec file for package libheimdal
#
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -20,15 +20,14 @@
Summary:Libraries of Kerberos 5 implementation
License:BSD-3-Clause
Group: System/Libraries
-Version:1.6rc2
+Version:7.1.0
Release:0
Url:http://www.h5l.org
# patched source can be created with script heimdal-patch-source.sh:
# ./heimdal-patch-source.sh heimdal-%{version}.tar.gz
Source0:heimdal-%{version}-patched.tar.bz2
Source2:heimdal-patch-source.sh
-Patch0: heimdal-version-script-client.map.patch
-Patch1: heimdal-patched.diff
+Patch0: heimdal-patched.diff
%if 0%{?sles_version} == 11
BuildRequires: libcom_err-devel
BuildRequires: sqlite3-devel
@@ -97,8 +96,7 @@
%prep
%setup -q -n heimdal-%{version}
-%patch0 -p0
-%patch1 -p1
+%patch0 -p1
%build
autoreconf -fi
++ heimdal-1.6rc2-patched.tar.bz2 -> heimdal-7.1.0-patched.tar.bz2 ++
/work/SRC/openSUSE:Factory/libheimdal/heimdal-1.6rc2-patched.tar.bz2
/work/SRC/openSUSE:Factory/.libheimdal.new/heimdal-7.1.0-patched.tar.bz2
differ: char 11, line 1
++ heimdal-patched.diff ++
--- /var/tmp/diff_new_pack.GLkSNn/_old 2017-02-03 17:47:37.360458498 +0100
+++ /var/tmp/diff_new_pack.GLkSNn/_new 2017-02-03 17:47:37.360458498 +0100
@@ -1,15 +1,15 @@
-diff -uNr heimdal-1.6rc2/configure.ac heimdal-1.6rc2-patched/configure.ac
heimdal-1.6rc2/configure.ac2014-02-18 17:33:47.0 +0100
-+++ heimdal-1.6rc2-patched/configure.ac2015-09-05 09:24:51.370168157
+0200
+diff -uNr heimdal-7.1.0/configure.ac heimdal-7.1.0-patched/configure.ac
+--- heimdal-7.1.0/configure.ac 2016-12-20 04:27:06.0 +0100
heimdal-7.1.0-patched/configure.ac 2017-01-07 22:38:34.618849987 +0100
@@ -3,7 +3,6 @@
AC_PREREQ(2.62)
test -z "$CFLAGS" && CFLAGS="-g"
- AC_INIT([Heimdal],[1.6rc2],[heimdal-b...@h5l.org])
+ AC_INIT([Heimdal],[7.1.0],[https://github.com/heimdal/heimdal/issues])
-AC_CONFIG_SRCDIR([kuser/kinit.c])
AC_CONFIG_HEADERS(include/config.h)
AC_CONFIG_MACRO_DIR([cf])
-@@ -604,7 +603,6 @@
+@@ -589,7 +588,6 @@
AM_CONDITIONAL(HEIMDAL_DOCUMENTATION, test "$enable_heimdal_documentation" !=
no)
AC_CONFIG_FILES(Makefile \
@@ -17,7 +17,7 @@
include/Makefile\
include/gssapi/Makefile \
include/hcrypto/Makefile\
-@@ -629,50 +627,8 @@
+@@ -614,35 +612,8 @@
lib/sqlite/Makefile \
lib/vers/Makefile \
lib/wind/Makefile \
@@ -31,24 +31,9 @@
- appl/Makefile \
- appl/afsutil/Makefile \
- appl/dbutils/Makefile \
-- appl/ftp/Makefile \
-- appl/ftp/common/Makefile\
-- appl/ftp/ftp/Makefile \
-- appl/ftp/ftpd/Makefile \
- appl/gssmask/Makefile \
-- appl/kx/Makefile\
-- appl/login/Makefile \
- appl/otp/Makefile \
-- appl/popper/Makefile\
-- appl/push/Makefile \
-- appl/rsh/Makefile \
-- appl/rcp/Makefile \
- appl/su/Makefile
