Hello community, here is the log from the commit of package krb5 for openSUSE:Factory checked in at 2013-06-11 06:34:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/krb5 (Old) and /work/SRC/openSUSE:Factory/.krb5.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "krb5" Changes: -------- --- /work/SRC/openSUSE:Factory/krb5/krb5-mini.changes 2013-06-05 11:53:16.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.krb5.new/krb5-mini.changes 2013-06-11 09:32:43.000000000 +0200 @@ -1,0 +2,10 @@ +Sun Jun 9 14:14:48 UTC 2013 - [email protected] + +- update to version 1.11.3 + - Fix a UDP ping-pong vulnerability in the kpasswd + (password changing) service. [CVE-2002-2443] + - Improve interoperability with some Windows native PKINIT clients. +- install translation files +- remove outdated configure options + +------------------------------------------------------------------- krb5.changes: same change Old: ---- krb5-1.11.2.tar.bz2 New: ---- krb5-1.11.3.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ krb5-mini.spec ++++++ --- /var/tmp/diff_new_pack.jr1G78/_old 2013-06-11 09:32:44.000000000 +0200 +++ /var/tmp/diff_new_pack.jr1G78/_new 2013-06-11 09:32:44.000000000 +0200 @@ -17,7 +17,7 @@ %define build_mini 1 -%define srcRoot krb5-1.11.2 +%define srcRoot krb5-1.11.3 %define vendorFiles %{_builddir}/%{srcRoot}/vendor-files/ %define krb5docdir %{_defaultdocdir}/krb5 @@ -31,7 +31,7 @@ BuildRequires: libcom_err-devel BuildRequires: libselinux-devel BuildRequires: ncurses-devel -Version: 1.11.2 +Version: 1.11.3 Release: 0 Summary: MIT Kerberos5 Implementation--Libraries License: MIT @@ -193,8 +193,12 @@ rm -f src/lib/krb5/krb/deltat.c cd src ./util/reconf -CFLAGS="$RPM_OPT_FLAGS -I/usr/include/et -fno-strict-aliasing -D_GNU_SOURCE -fPIC " \ +DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME ./configure \ + CC="%{__cc}" \ + CFLAGS="$RPM_OPT_FLAGS -I%{_includedir}/et -fno-strict-aliasing -D_GNU_SOURCE -fPIC -fstack-protector-all " \ + CPPFLAGS="-I%{_includedir}/et " \ + SS_LIB="-lss" \ --prefix=/usr/lib/mit \ --sysconfdir=%{_sysconfdir} \ --mandir=%{_mandir} \ @@ -203,9 +207,9 @@ --libdir=%{_libdir} \ --includedir=%{_includedir} \ --localstatedir=%{_localstatedir}/lib/kerberos \ + --localedir=%{_datadir}/locale \ --enable-shared \ --disable-static \ - --enable-kdc-replay-cache \ --enable-dns-for-realm \ --disable-rpath \ %if ! %{build_mini} @@ -220,7 +224,7 @@ --with-selinux \ --with-system-et \ --with-system-ss -make %{?jobs:-j%jobs} +%{__make} %{?_smp_mflags} %if ! 0%{?build_mini} cd doc make %{?jobs:-j%jobs} substhtml @@ -229,11 +233,19 @@ %endif %install + +# Where per-user keytabs live by default. +mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/lib/kerberos/krb5/user +mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/log/krb5 + cd src make DESTDIR=%{buildroot} install cd .. -# Munge the krb5-config script to remove rpaths and CFLAGS. -sed "s|^CC_LINK=.*|CC_LINK='\$(CC) \$(PROG_LIBPATH)'|g" src/krb5-config > $RPM_BUILD_ROOT/usr/lib/mit/bin/krb5-config +# Munge krb5-config yet again. This is totally wrong for 64-bit, but chunks +# of the buildconf patch already conspire to strip out /usr/<anything> from the +# list of link flags, and it helps prevent file conflicts on multilib systems. +sed -r -i -e 's|^libdir=/usr/lib(64)?$|libdir=/usr/lib|g' $RPM_BUILD_ROOT/usr/lib/mit/bin/krb5-config + # install autoconf macro mkdir -p %{buildroot}/%{_datadir}/aclocal install -m 644 src/util/ac_check_krb5.m4 %{buildroot}%{_datadir}/aclocal/ @@ -302,9 +314,9 @@ # cleanup rm -f %{buildroot}/usr/share/man/man1/tmac.doc* rm -f /usr/share/man/man1/tmac.doc* -#rm -rf /usr/lib/mit/share rm -rf %{buildroot}/usr/lib/mit/share/examples -rm -rf %{buildroot}/usr/lib/mit/share/locale + +%find_lang mit-krb5 ##################################################### # krb5(-mini) pre/post/postun @@ -391,7 +403,7 @@ %if %{build_mini} -%files +%files -f mit-krb5.lang %defattr(-,root,root) %dir %{krb5docdir} # add directories @@ -402,6 +414,8 @@ %dir %{_libdir}/krb5/plugins/libkrb5 %dir %{_localstatedir}/lib/kerberos/ %dir %{_localstatedir}/lib/kerberos/krb5kdc +%dir %{_localstatedir}/lib/kerberos/krb5 +%dir %{_localstatedir}/lib/kerberos/krb5/user %attr(0700,root,root) %dir /var/log/krb5 %dir /usr/lib/mit %dir /usr/lib/mit/sbin @@ -473,7 +487,7 @@ %{_mandir}/man8/* %else -%files +%files -f mit-krb5.lang %defattr(-,root,root) %dir %{krb5docdir} # add plugin directories @@ -499,6 +513,7 @@ %files server %defattr(-,root,root) +%attr(0700,root,root) %dir /var/log/krb5 %config(noreplace) %{_sysconfdir}/logrotate.d/krb5-server %{_sysconfdir}/init.d/kadmind %{_sysconfdir}/init.d/krb5kdc @@ -513,6 +528,8 @@ %dir /usr/lib/mit/sbin %dir %{_localstatedir}/lib/kerberos/ %dir %{_localstatedir}/lib/kerberos/krb5kdc +%dir %{_localstatedir}/lib/kerberos/krb5 +%dir %{_localstatedir}/lib/kerberos/krb5/user %dir %{_libdir}/krb5 %dir %{_libdir}/krb5/plugins %dir %{_libdir}/krb5/plugins/kdb ++++++ krb5.spec ++++++ --- /var/tmp/diff_new_pack.jr1G78/_old 2013-06-11 09:32:44.000000000 +0200 +++ /var/tmp/diff_new_pack.jr1G78/_new 2013-06-11 09:32:44.000000000 +0200 @@ -17,7 +17,7 @@ %define build_mini 0 -%define srcRoot krb5-1.11.2 +%define srcRoot krb5-1.11.3 %define vendorFiles %{_builddir}/%{srcRoot}/vendor-files/ %define krb5docdir %{_defaultdocdir}/krb5 @@ -31,7 +31,7 @@ BuildRequires: libcom_err-devel BuildRequires: libselinux-devel BuildRequires: ncurses-devel -Version: 1.11.2 +Version: 1.11.3 Release: 0 Summary: MIT Kerberos5 Implementation--Libraries License: MIT @@ -193,8 +193,12 @@ rm -f src/lib/krb5/krb/deltat.c cd src ./util/reconf -CFLAGS="$RPM_OPT_FLAGS -I/usr/include/et -fno-strict-aliasing -D_GNU_SOURCE -fPIC " \ +DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME ./configure \ + CC="%{__cc}" \ + CFLAGS="$RPM_OPT_FLAGS -I%{_includedir}/et -fno-strict-aliasing -D_GNU_SOURCE -fPIC -fstack-protector-all " \ + CPPFLAGS="-I%{_includedir}/et " \ + SS_LIB="-lss" \ --prefix=/usr/lib/mit \ --sysconfdir=%{_sysconfdir} \ --mandir=%{_mandir} \ @@ -203,9 +207,9 @@ --libdir=%{_libdir} \ --includedir=%{_includedir} \ --localstatedir=%{_localstatedir}/lib/kerberos \ + --localedir=%{_datadir}/locale \ --enable-shared \ --disable-static \ - --enable-kdc-replay-cache \ --enable-dns-for-realm \ --disable-rpath \ %if ! %{build_mini} @@ -220,7 +224,7 @@ --with-selinux \ --with-system-et \ --with-system-ss -make %{?jobs:-j%jobs} +%{__make} %{?_smp_mflags} %if ! 0%{?build_mini} cd doc make %{?jobs:-j%jobs} substhtml @@ -229,11 +233,19 @@ %endif %install + +# Where per-user keytabs live by default. +mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/lib/kerberos/krb5/user +mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/log/krb5 + cd src make DESTDIR=%{buildroot} install cd .. -# Munge the krb5-config script to remove rpaths and CFLAGS. -sed "s|^CC_LINK=.*|CC_LINK='\$(CC) \$(PROG_LIBPATH)'|g" src/krb5-config > $RPM_BUILD_ROOT/usr/lib/mit/bin/krb5-config +# Munge krb5-config yet again. This is totally wrong for 64-bit, but chunks +# of the buildconf patch already conspire to strip out /usr/<anything> from the +# list of link flags, and it helps prevent file conflicts on multilib systems. +sed -r -i -e 's|^libdir=/usr/lib(64)?$|libdir=/usr/lib|g' $RPM_BUILD_ROOT/usr/lib/mit/bin/krb5-config + # install autoconf macro mkdir -p %{buildroot}/%{_datadir}/aclocal install -m 644 src/util/ac_check_krb5.m4 %{buildroot}%{_datadir}/aclocal/ @@ -302,9 +314,9 @@ # cleanup rm -f %{buildroot}/usr/share/man/man1/tmac.doc* rm -f /usr/share/man/man1/tmac.doc* -#rm -rf /usr/lib/mit/share rm -rf %{buildroot}/usr/lib/mit/share/examples -rm -rf %{buildroot}/usr/lib/mit/share/locale + +%find_lang mit-krb5 ##################################################### # krb5(-mini) pre/post/postun @@ -391,7 +403,7 @@ %if %{build_mini} -%files +%files -f mit-krb5.lang %defattr(-,root,root) %dir %{krb5docdir} # add directories @@ -402,6 +414,8 @@ %dir %{_libdir}/krb5/plugins/libkrb5 %dir %{_localstatedir}/lib/kerberos/ %dir %{_localstatedir}/lib/kerberos/krb5kdc +%dir %{_localstatedir}/lib/kerberos/krb5 +%dir %{_localstatedir}/lib/kerberos/krb5/user %attr(0700,root,root) %dir /var/log/krb5 %dir /usr/lib/mit %dir /usr/lib/mit/sbin @@ -473,7 +487,7 @@ %{_mandir}/man8/* %else -%files +%files -f mit-krb5.lang %defattr(-,root,root) %dir %{krb5docdir} # add plugin directories @@ -499,6 +513,7 @@ %files server %defattr(-,root,root) +%attr(0700,root,root) %dir /var/log/krb5 %config(noreplace) %{_sysconfdir}/logrotate.d/krb5-server %{_sysconfdir}/init.d/kadmind %{_sysconfdir}/init.d/krb5kdc @@ -513,6 +528,8 @@ %dir /usr/lib/mit/sbin %dir %{_localstatedir}/lib/kerberos/ %dir %{_localstatedir}/lib/kerberos/krb5kdc +%dir %{_localstatedir}/lib/kerberos/krb5 +%dir %{_localstatedir}/lib/kerberos/krb5/user %dir %{_libdir}/krb5 %dir %{_libdir}/krb5/plugins %dir %{_libdir}/krb5/plugins/kdb ++++++ krb5-1.11.2.tar.bz2 -> krb5-1.11.3.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/krb5/krb5-1.11.2.tar.bz2 /work/SRC/openSUSE:Factory/.krb5.new/krb5-1.11.3.tar.bz2 differ: char 11, line 1 -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
