security/krb5-12?: Fix reachable assert when importing krb5 names
If a name token contains trailing garbage, error out from
krb5_gss_import_name() instead of crashing the process with an
assertion failure.
Commit message details obtained from upstream commit.
Obtained from: upstream commit 07818f1fd
Reported by: Aisle Research (Ze Sheng, Dmitrijs Trizna,
Luigino Camastra, Guido Vranken) to krb5-bugs
(cherry picked from commit 8854e0201abe6c8292d0360c23a8be7201240016)
security/krb5-122: Fix null dereference in SPNEGO token processing
krb5 1.22.1 erroneously removed a check from get_negTokenResp() for
successful decoding of the mechListMIC field. Restore the check to
prevent a null pointer dereference.
Commit message details obtained from upstream commit.
Obtained from: Upstream commit 4ae75cded
src commit efb5c07f91c5
(cherry picked from commit cfb473892e7ff64daa2ea4f3fdc63768eaed66d3)
security/krb5-devel: update to the latest MIT/KRB5 github commit
Support for OpenSSL 1.1.1 has been removed by upstream in this update.
(cherry picked from commit 1f29b1929b8217b102eeb2d2ce3ca836801622d4)
security/krb5-12?: Fix reachable assert when importing krb5 names
If a name token contains trailing garbage, error out from
krb5_gss_import_name() instead of crashing the process with an
assertion failure.
Commit message details obtained from upstream commit.
Obtained from: upstream commit 07818f1fd
Reported by: Aisle Research (Ze Sheng, Dmitrijs Trizna,
Luigino Camastra, Guido Vranken) to krb5-bugs
MFH: 2026Q2
security/krb5-122: Fix null dereference in SPNEGO token processing
krb5 1.22.1 erroneously removed a check from get_negTokenResp() for
successful decoding of the mechListMIC field. Restore the check to
prevent a null pointer dereference.
Commit message details obtained from upstream commit.
Obtained from: Upstream commit 4ae75cded
src commit efb5c07f91c5
MFH: 2026Q2
sysutils/iocage: Fix build and runtime issues
This switches the build to pyproject.yml and hatchling to avoid
various setuptools issues.
It adds a workaround for problems with py-click, which
prevented some command line options from working properly
(especially formatting output for scripting using '-h').
While there, import small github hosted patch into the tree.
PR: 295084, 295723
Reported by: andreas at turriff.net, echoxxzz at gmail.com
archivers/py-pycdlib: New port
PyCdlib is a pure python library to parse, write (master), and create
ISO9660 files, suitable for writing to a CD or USB.
sysutils/mate-polkit: switch to GitHub release asset
Minor versions of 1.28.x are no longer published to the MATE mirror
and are only available on GitHub. Use USE_GITHUB=nodefault with a
release tarball instead of the auto-generated one, as recommended
by the porter's handbook.
