svn commit: r379531 - head/security/vuxml

Sat Feb 21 16:12:38 UTC 2015

Author: cy
Date: Sat Feb 21 16:12:36 2015
New Revision: 379531
URL: https://svnweb.freebsd.org/changeset/ports/379531
QAT: https://qat.redports.org/buildarchive/r379531/

Log:
  Kerberos Version 5, Release 1.12.3 is released affecting
  security/krb5-112. This fixes multiple vulnerabilities, some previously
  committed by point patches and others newly fixed in this release.
  
  * Fix multiple vulnerabilities in the LDAP KDC back end.
    [CVE-2014-5354] [CVE-2014-5353]
  
  * Fix multiple kadmind vulnerabilities, some of which are based in the
    gssrpc library. [CVE-2014-5352 CVE-2014-5352 CVE-2014-9421
    CVE-2014-9422 CVE-2014-9423]
  
  Security:	CVE-2014-5354, CVE-2014-5353
  Security:	CVE-2014-5352, CVE-2014-5352, CVE-2014-9421
  Security:	CVE-2014-9422, CVE-2014-9423

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================

--- head/security/vuxml/vuln.xml	Sat Feb 21 16:10:43 2015	(r379530)
+++ head/security/vuxml/vuln.xml	Sat Feb 21 16:12:36 2015	(r379531)
@@ -57,6 +57,35 @@ Notes:
 
 -->
 <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+  <vuln vid="63527d0d-b9de-11e4-8a48-206a8a720317">
+    <topic>krb5 1.12 -- New release/fix multiple vulnerabilities</topic>
+    <affects>
+      <package>
+	<name>krb5-112</name>
+	<range><lt>1.12.3</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+	<p>The MIT Kerberos team announces the availability of MIT Kerberos 5 Release 1.12.3:</p>
+	<blockquote cite="http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2015-001.txt">
+	  <p>Fix multiple vulnerabilities in the LDAP KDC back end.
+	     [CVE-2014-5354] [CVE-2014-5353]</p>
+	  <p>Fix multiple kadmind vulnerabilities, some of which are based
+	     in the gssrpc library. [CVE-2014-5352 CVE-2014-5352
+	     CVE-2014-9421 CVE-2014-9422 CVE-2014-9423]</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <url>http://web.mit.edu/kerberos/krb5-1.12/README-1.12.3.txt</url>
+    </references>
+    <dates>
+      <discovery>2015-02-20</discovery>
+      <entry>2015-02-21</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="3680b234-b6f0-11e4-b7cc-d050992ecde8">
     <topic>unzip -- heap based buffer overflow in iconv patch</topic>
     <affects>
