diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2023-10-17 19:34:56 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2023-10-17 22:37:03 +0200 |
| commit | b36863e0974e59996232294d71dcb0cc357930b5 (patch) | |
| tree | 0e949404a097b2f84c41a2a1fa5442e22afd3676 /source/a/util-linux | |
| parent | e3fcfb90760bd2af1d574816766377a9c511df87 (diff) | |
| download | current-b36863e0974e59996232294d71dcb0cc357930b5.tar.gz current-b36863e0974e59996232294d71dcb0cc357930b5.tar.xz | |
Tue Oct 17 19:34:56 UTC 202320231017193456
a/util-linux-2.39.2-x86_64-2.txz: Rebuilt.
Copy /etc/pam.d/login to /etc/pam.d/remote. This is needed for /bin/login's
'-h' option, used (for example) by telnetd. If -h is used without
/etc/pam.d/remote, pam will not be configured properly, and /etc/securetty
will be ignored, possibly allowing root to login from a tty that is not
considered secure. Of course, the usual disclaimers about the security of
telnet/telnetd apply.
Thanks to HytronBG and Petri Kaukasoina.
(* Security fix *)
ap/qpdf-11.6.3-x86_64-1.txz: Upgraded.
d/llvm-17.0.3-x86_64-1.txz: Upgraded.
l/libjpeg-turbo-3.0.1-x86_64-1.txz: Upgraded.
l/tevent-0.16.0-x86_64-1.txz: Upgraded.
n/samba-4.19.2-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-5568
(* Security fix *)
x/OpenCC-1.1.7-x86_64-1.txz: Upgraded.
xfce/xfconf-4.18.2-x86_64-1.txz: Upgraded.
Diffstat (limited to 'source/a/util-linux')
| -rw-r--r-- | source/a/util-linux/doinst.sh | 2 | ||||
| -rwxr-xr-x | source/a/util-linux/util-linux.SlackBuild | 8 |
2 files changed, 8 insertions, 2 deletions
diff --git a/source/a/util-linux/doinst.sh b/source/a/util-linux/doinst.sh index 0d9730801..03c23f87c 100644 --- a/source/a/util-linux/doinst.sh +++ b/source/a/util-linux/doinst.sh @@ -22,7 +22,7 @@ config etc/rc.d/rc.serial.new config etc/rc.d/rc.setterm.new config etc/serial.conf.new -for configfile in chfn.new chsh.new login.new runuser.new runuser-l.new su.new su-l.new ; do +for configfile in chfn.new chsh.new login.new remote.new runuser.new runuser-l.new su.new su-l.new ; do if [ -r etc/pam.d/$configfile ]; then config etc/pam.d/$configfile fi diff --git a/source/a/util-linux/util-linux.SlackBuild b/source/a/util-linux/util-linux.SlackBuild index b8cb57fbc..d83c3acdf 100755 --- a/source/a/util-linux/util-linux.SlackBuild +++ b/source/a/util-linux/util-linux.SlackBuild @@ -26,7 +26,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=util-linux VERSION=${VERSION:-$(echo util-linux*.tar.xz | cut -d - -f 3 | rev | cut -f 3- -d . | rev)} -BUILD=${BUILD:-1} +BUILD=${BUILD:-2} ADJTIMEXVERS=1.29 SETSERIALVERS=2.17 @@ -93,6 +93,12 @@ if [ -L /lib${LIBDIRSUFFIX}/libpam.so.? ]; then for file in $CWD/pam.d/* ; do cp -a ${file} $PKG/etc/pam.d/ done + # In case someone is using the '-h' option to /bin/login, we will require + # another copy of /etc/pam.d/login called /etc/pam.d/remote. Make this copy + # if it doesn't exist already: + if [ ! -r $PKG/etc/pam.d/remote ]; then + cp -a $PKG/etc/pam.d/login $PKG/etc/pam.d/remote + fi if [ "$SHIP_SU" = "YES" ]; then # Add su default file to ensure using ENV_SUPATH with 'su': mkdir -p $PKG/etc/default |