Re: [PR PATCH] [Closed]: mit-krb5: update to 1.21.3, adopt

[classabbyamp <classabbyamp@users.noreply.github.com>]

[-- Attachment #1: Type: text/plain, Size: 1261 bytes --]

There's a closed pull request on the void-packages repository

mit-krb5: update to 1.21.3, adopt
https://github.com/void-linux/void-packages/pull/51025

Description:
I use this package together with openldap which I adopted recently.

One thing I would like to do with this package when I have the time is to convert the build options to separate subpackages instead which would make them easier to use without rebuilding locally.
Another thing to look at is that currently the package uses the Berkely DB library from the distro, which in the build instructions at https://web.mit.edu/kerberos/krb5-latest/doc/build/options2configure.html is marked as unsupported. This could perhaps also be resolved by recommending to use the LMDB backend instead which I believe does not have this problem.

Relevant changes:
- Fix vulnerabilities in GSS message token handling [CVE-2024-37370, CVE-2024-37371].
- Fix a potential bad pointer free in krb5_cccol_have_contents()

#### Testing the changes
- I tested the changes in this PR: **briefly**

#### Local build testing
- I built this PR locally for my native architecture, (x86_64, x86_64-musl)
- I built this PR locally for these architectures:
  - aarch64-musl
  - armv7l
  - armv6l-musl
  - i686