summaryrefslogtreecommitdiffstats
path: root/source/a/pam (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Tue Dec 1 20:18:01 UTC 202020201201201801 Patrick J Volkerding2020-12-023-3/+79
| | | | | | | | | | | | | | | | | | a/hwdata-0.342-noarch-1.txz: Upgraded. a/pam-1.5.1-x86_64-1.txz: Upgraded. ap/sqlite-3.34.0-x86_64-1.txz: Upgraded. l/libarchive-3.5.0-x86_64-1.txz: Upgraded. x/fontconfig-2.13.92-x86_64-1.txz: Upgraded. I'm pretty sure there was a good reason to switch to 2.13.92 on the devel release path, but I'm not sure the same can be said about 2.13.93. We'll stick with this one for now until there's a stable release or another good reason to bump it. x/xorg-server-1.20.10-x86_64-1.txz: Upgraded. x/xorg-server-xephyr-1.20.10-x86_64-1.txz: Upgraded. x/xorg-server-xnest-1.20.10-x86_64-1.txz: Upgraded. x/xorg-server-xvfb-1.20.10-x86_64-1.txz: Upgraded. x/xorg-server-xwayland-1.20.10-x86_64-1.txz: Upgraded. xap/gnuplot-5.4.1-x86_64-1.txz: Upgraded.
* Tue Oct 20 21:58:52 UTC 202020201020215852 Patrick J Volkerding2020-10-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | a/aaa_elflibs-15.0-x86_64-24.txz: Rebuilt. Don't skip this one as it contains the libnsl-2.30.so built by glibc that it's likely many third-party packages will be linking to for some time. Upgraded: libcap.so.2.44, libelf-0.181.so, libpopt.so.0.0.1, libcurl.so.4.7.0, libexpat.so.1.6.12, libglib-2.0.so.0.6600.2, libgmodule-2.0.so.0.6600.2, libgobject-2.0.so.0.6600.2, libgthread-2.0.so.0.6600.2, libidn.so.12.6.1, liblber-2.4.so.2.11.2, libldap-2.4.so.2.11.2, libmpc.so.3.2.0, libmpfr.so.6.1.0, libpsl.so.5.3.3. Added: libnsl-2.30.so, libnsl.so.2.0.1. Removed: libdvdread.so.4.2.0, libicudata.so.65.1, libicui18n.so.65.1, libicuio.so.65.1, libicutest.so.65.1, libicutu.so.65.1, libicuuc.so.65.1. a/glibc-solibs-2.30-x86_64-2.txz: Rebuilt. a/pam-1.4.0-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. a/quota-4.05-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. a/xfsprogs-5.9.0-x86_64-1.txz: Upgraded. ap/linuxdoc-tools-0.9.73-x86_64-6.txz: Rebuilt. Recompiled against libnsl-1.3.0. ap/vorbis-tools-1.4.0-x86_64-5.txz: Rebuilt. Recompiled against libnsl-1.3.0. d/cvs-1.11.23-x86_64-5.txz: Rebuilt. Recompiled against libnsl-1.3.0. d/git-2.29.0-x86_64-1.txz: Upgraded. d/perl-5.32.0-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. d/python2-2.7.18-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. d/python3-3.8.6-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. d/rcs-5.10.0-x86_64-1.txz: Upgraded. d/subversion-1.14.0-x86_64-3.txz: Rebuilt. Recompiled against libnsl-1.3.0. kde/kdelibs-4.14.38-x86_64-7.txz: Rebuilt. Recompiled against libnsl-1.3.0. kde/kopete-4.14.3-x86_64-9.txz: Rebuilt. Recompiled against libnsl-1.3.0. kde/perlkde-4.14.3-x86_64-10.txz: Rebuilt. Recompiled against libnsl-1.3.0. kde/perlqt-4.14.3-x86_64-11.txz: Rebuilt. Recompiled against libnsl-1.3.0. l/freetype-2.10.4-x86_64-1.txz: Upgraded. Fix heap buffer overflow in embedded PNG bitmap handling. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999 (* Security fix *) l/glibc-2.30-x86_64-2.txz: Rebuilt. Rebuilt without the --enable-obsolete-nsl and --enable-obsolete-rpc options. This change has been somewhat overdue, but since glibc was providing these options we just continued to use them here - however, newer versions of glibc have dropped this code entirely and it is expected to be provided in standalone packages. So we'll do that to make things easier moving forward. Please note that libnss_nisplus has been unmaintained upstream for quite some time, is considered obsolete, and no longer compiles. As a result it will no longer be provided... but there are better options these days. l/glibc-i18n-2.30-x86_64-2.txz: Rebuilt. l/glibc-profile-2.30-x86_64-2.txz: Rebuilt. l/gmime-3.2.7-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. l/libasyncns-0.8-x86_64-3.txz: Rebuilt. Recompiled against libnsl-1.3.0. l/libnsl-1.3.0-x86_64-1.txz: Added. This provides the standalone libnsl. Shared library .so-version bump. l/libnss_nis-3.1-x86_64-1.txz: Added. l/loudmouth-1.5.3-x86_64-5.txz: Rebuilt. Recompiled against libnsl-1.3.0. l/rpcsvc-proto-1.4.2-x86_64-1.txz: Added. n/autofs-5.1.6-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/epic5-2.1.2-x86_64-3.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/irssi-1.2.2-x86_64-4.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/net-snmp-5.9-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/netatalk-3.1.12-x86_64-4.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/ntp-4.2.8p15-x86_64-3.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/openldap-2.4.54-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/openssh-8.4p1-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/openvpn-2.4.9-x86_64-3.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/postfix-3.5.7-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/ppp-2.4.8-x86_64-3.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/procmail-3.22-x86_64-4.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/proftpd-1.3.7a-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/rpcbind-1.2.5-x86_64-3.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/samba-4.13.0-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/socat-1.7.3.4-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/stunnel-5.57-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/tcp_wrappers-7.6-x86_64-3.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/tftp-hpa-5.2-x86_64-6.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/uucp-1.07-x86_64-3.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/vsftpd-3.0.3-x86_64-7.txz: Rebuilt. Recompiled against libnsl-1.3.0. n/yptools-4.2.3-x86_64-1.txz: Upgraded. Compiled against libnsl-1.3.0. xap/gftp-2.0.19-x86_64-9.txz: Rebuilt. Recompiled against libnsl-1.3.0. xap/pidgin-2.14.1-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. xap/rxvt-unicode-9.22-x86_64-9.txz: Rebuilt. Recompiled against libnsl-1.3.0. xap/xine-lib-1.2.10-x86_64-3.txz: Rebuilt. Recompiled against libnsl-1.3.0. xap/xine-ui-0.99.12-x86_64-2.txz: Rebuilt. Recompiled against libnsl-1.3.0. extra/pure-alsa-system/xine-lib-1.2.10-x86_64-3_alsa.txz: Rebuilt. Recompiled against libnsl-1.3.0. extra/sendmail/sendmail-8.16.1-x86_64-3.txz: Rebuilt. Recompiled against libnsl-1.3.0. extra/sendmail/sendmail-cf-8.16.1-noarch-3.txz: Rebuilt.
* Sat Jun 13 20:40:31 UTC 202020200613204031 Patrick J Volkerding2020-06-144-73/+55
| | | | | | | | | | | | | | | | | | | | | a/pam-1.4.0-x86_64-1.txz: Upgraded. IMPORTANT NOTE: This update removes the pam_cracklib and pam_tally2 modules. None of our current configuration files in /etc/pam.d/ use either of those, but if the configuration files on your machine do you'll need to comment out or remove those lines, otherwise you may experience login failures. a/shadow-4.8.1-x86_64-9.txz: Rebuilt. /etc/pam.d/system-auth: prefix lines that call pam_gnome_keyring.so with '-' to avoid spamming the logs about failures. a/sysvinit-scripts-2.1-noarch-32.txz: Rebuilt. rc.S: create /var/run/faillock directory for pam_faillock(8). a/util-linux-2.35.2-x86_64-2.txz: Rebuilt. /etc/pam.d/login: change the example for locking an account for too many failed login attempts to use pam_faillock instead of pam_tally2. l/imagemagick-7.0.10_19-x86_64-1.txz: Upgraded. l/libzip-1.7.1-x86_64-1.txz: Upgraded. n/openssh-8.3p1-x86_64-2.txz: Rebuilt. /etc/pam.d/sshd: change the example for locking an account for too many failed login attempts to use pam_faillock instead of pam_tally2.
* Mon May 18 19:17:21 UTC 202020200518191721 Patrick J Volkerding2020-05-1825-0/+3299
Greetings! After three months in /testing, the PAM merge into the main tree is now complete. When updating, be sure to install the new pam, cracklib, and libpwquality packages or you may find yourself locked out of your machine. Otherwise, these changes should be completely transparent and you shouldn't notice any obvious operational differences. Be careful if you make any changes in /etc/pam.d/ - leaving an extra console logged in while testing PAM config changes is a recommended standard procedure. Thanks again to Robby Workman, Vincent Batts, Phantom X, and ivandi for help implementing this. It's not done yet and there will be more fine-tuning of the config files, but now we can move on to build some other updates. Enjoy! a/cracklib-2.9.7-x86_64-1.txz: Added. a/kernel-firmware-20200517_f8d32e4-noarch-1.txz: Upgraded. a/libcgroup-0.41-x86_64-7.txz: Rebuilt. Rebuilt to add PAM support. a/libpwquality-1.4.2-x86_64-1.txz: Added. a/lilo-24.2-x86_64-9.txz: Rebuilt. Enable the "compact" option by default. liloconfig: correctly set the root partition. a/pam-1.3.1-x86_64-1.txz: Added. a/shadow-4.8.1-x86_64-7.txz: Rebuilt. Rebuilt to add PAM support. a/utempter-1.2.0-x86_64-1.txz: Upgraded. a/util-linux-2.35.1-x86_64-6.txz: Rebuilt. Rebuilt to add PAM support. a/xfsprogs-5.6.0-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. ap/at-3.2.1-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. ap/cups-2.3.3-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. ap/hplip-3.20.5-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. ap/mariadb-10.4.13-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. ap/screen-4.8.0-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. ap/soma-3.3.0-noarch-1.txz: Upgraded. Thanks to David Woodfall. ap/sqlite-3.31.1-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. ap/sudo-1.9.0-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. ap/vim-8.2.0788-x86_64-1.txz: Upgraded. d/bison-3.6.2-x86_64-1.txz: Upgraded. d/meson-0.54.2-x86_64-1.txz: Upgraded. d/python-setuptools-46.4.0-x86_64-1.txz: Upgraded. d/vala-0.48.6-x86_64-1.txz: Upgraded. kde/calligra-2.9.11-x86_64-36.txz: Rebuilt. Recompiled against icu4c-67.1. kde/kde-workspace-4.11.22-x86_64-7.txz: Rebuilt. Rebuilt to add PAM support. l/ConsoleKit2-1.2.1-x86_64-4.txz: Rebuilt. Rebuilt to add PAM support. l/boost-1.73.0-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. l/gnome-keyring-3.36.0-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. l/harfbuzz-2.6.6-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. l/icu4c-67.1-x86_64-1.txz: Upgraded. Shared library .so-version bump. l/imagemagick-7.0.10_13-x86_64-1.txz: Upgraded. l/libcap-2.34-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. l/libical-3.0.8-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. l/libuv-1.38.0-x86_64-1.txz: Upgraded. l/libvisio-0.1.7-x86_64-3.txz: Rebuilt. Recompiled against icu4c-67.1. l/polkit-0.116-x86_64-3.txz: Rebuilt. Rebuilt to add PAM support. l/qt-4.8.7-x86_64-16.txz: Rebuilt. Recompiled against icu4c-67.1. l/qt5-5.13.2-x86_64-4.txz: Rebuilt. Recompiled against icu4c-67.1. l/qt5-webkit-5.212.0_alpha4-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. l/raptor2-2.0.15-x86_64-9.txz: Rebuilt. Recompiled against icu4c-67.1. l/system-config-printer-1.5.12-x86_64-4.txz: Rebuilt. Rebuilt to add PAM support. l/vte-0.60.2-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. n/cifs-utils-6.10-x86_64-4.txz: Rebuilt. Rebuilt to add PAM support. n/cyrus-sasl-2.1.27-x86_64-4.txz: Rebuilt. Rebuilt to add PAM support. n/dovecot-2.3.10.1-x86_64-1.txz: Upgraded. Rebuilt to add PAM support. Compiled against icu4c-67.1. This update fixes several denial-of-service vulnerabilities. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10957 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10958 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10967 (* Security fix *) n/mutt-1.14.1-x86_64-1.txz: Upgraded. n/netatalk-3.1.12-x86_64-3.txz: Rebuilt. Rebuilt to add PAM support. n/netkit-rsh-0.17-x86_64-3.txz: Rebuilt. Rebuilt to add PAM support. n/nss-pam-ldapd-0.9.11-x86_64-1.txz: Added. n/openssh-8.2p1-x86_64-3.txz: Rebuilt. Rebuilt to add PAM support. n/openvpn-2.4.9-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. n/pam-krb5-4.9-x86_64-1.txz: Added. n/php-7.4.6-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. n/popa3d-1.0.3-x86_64-4.txz: Rebuilt. Rebuilt to add PAM support. n/postfix-3.5.2-x86_64-1.txz: Upgraded. Compiled against icu4c-67.1. n/ppp-2.4.8-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. n/proftpd-1.3.6c-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. n/samba-4.12.2-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. Recompiled against icu4c-67.1. n/tin-2.4.4-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. n/vsftpd-3.0.3-x86_64-6.txz: Rebuilt. Rebuilt to add PAM support. t/texlive-2019.190626-x86_64-4.txz: Rebuilt. Recompiled against icu4c-67.1. x/vulkan-sdk-1.2.135.0-x86_64-1.txz: Upgraded. x/xdm-1.1.11-x86_64-10.txz: Rebuilt. Rebuilt to add PAM support. x/xisxwayland-1-x86_64-1.txz: Added. xap/sane-1.0.30-x86_64-1.txz: Upgraded. This update fixes several security issues. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12867 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12862 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12863 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12865 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12866 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12861 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12864 (* Security fix *) xap/vim-gvim-8.2.0788-x86_64-1.txz: Upgraded. xap/xlockmore-5.63-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. xap/xscreensaver-5.44-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. extra/brltty/brltty-6.1-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. extra/pure-alsa-system/qt5-5.13.2-x86_64-4_alsa.txz: Rebuilt. Recompiled against icu4c-67.1. isolinux/initrd.img: Rebuilt. Added PAM libraries, security modules, and config files. usb-and-pxe-installers/usbboot.img: Rebuilt. Added PAM libraries, security modules, and config files.