slackware-current/source/a/libpwquality/libpwquality.SlackBuild

138 lines
4.3 KiB
Text
Raw Normal View History

Wed Feb 12 05:05:50 UTC 2020 Hey folks! PAM has finally landed in /testing. Some here wanted it to go right into the main tree immediately, and in a more normal development cycle I'd have been inclined to agree (it is -current, after all). But it's probably better for it to appear in /testing first, to make sure we didn't miss any bugs and also to serve as a warning shot that we'll be shaking up the tree pretty good over the next few weeks. I'd like to see this merged into the main tree in a day or two, so any testing is greatly appreciated. Switching to the PAM packages (or reverting from them) is as easy as installing all of them with upgradepkg --install-new, and if reverting then remove the three leftover _pam packages. After reverting, a bit of residue will remain in /etc/pam.d/ and /etc/security/ which can either be manually deleted or simply ignored. While there are many more features available in PAM compared with plain shadow, out of the box about the only noticable change is the use of cracklib and libpwquality to check the quality of a user-supplied password. Hopefully having PAM and krb5 will get us on track to having proper Active Directory integration as well as using code paths that are likely better audited these days. The attack surface *might* be bigger, but it's also a lot better scrutinized. Thanks to Robby Workman and Vincent Batts who did most of the initial heavy lifting on the core PAM packages as a side project for many years. Thanks also to Phantom X whose PAM related SlackBuilds were a valuable reference. And thanks as well to ivandi - I learned a lot from the SlackMATE build scripts and was even occasionally thankful for the amusing ways you would kick my ass on LQ. ;-) You're more than welcome to let us know where we've messed up this time. The binutils and glibc packages in /testing were removed and are off the table for now. I'm not seeing much upside to heading down that rabbit hole at the moment. Next we need to be looking at Xfce 4.14 and Plasma 5.18 LTS and some other things that have been held back since KDE4 couldn't use them. Cheers! :-) a/kernel-generic-5.4.19-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.19-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.19-x86_64-1.txz: Upgraded. a/lvm2-2.03.08-x86_64-1.txz: Upgraded. a/shadow-4.8.1-x86_64-2.txz: Rebuilt. Automatically backup /etc/login.defs and install the new version if incompatible PAM options are detected. d/kernel-headers-5.4.19-x86-1.txz: Upgraded. k/kernel-source-5.4.19-noarch-1.txz: Upgraded. VALIDATE_FS_PARSER y -> n xap/mozilla-thunderbird-68.5.0-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/68.5.0/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6793 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6794 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6797 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6798 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6792 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6800 (* Security fix *) isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/at-3.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cifs-utils-6.10-x86_64-2_pam.txz: Added. testing/packages/PAM/cracklib-2.9.7-x86_64-1_pam.txz: Added. testing/packages/PAM/cups-2.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cyrus-sasl-2.1.27-x86_64-2_pam.txz: Added. testing/packages/PAM/dovecot-2.3.9.2-x86_64-1_pam.txz: Added. testing/packages/PAM/gnome-keyring-3.34.0-x86_64-1_pam.txz: Added. testing/packages/PAM/hplip-3.19.12-x86_64-2_pam.txz: Added. testing/packages/PAM/kde-workspace-4.11.22-x86_64-6_pam.txz: Added. testing/packages/PAM/libcap-2.31-x86_64-1_pam.txz: Added. testing/packages/PAM/libcgroup-0.41-x86_64-5_pam.txz: Added. testing/packages/PAM/libpwquality-1.4.2-x86_64-1_pam.txz: Added. testing/packages/PAM/mariadb-10.4.12-x86_64-1_pam.txz: Added. testing/packages/PAM/netatalk-3.1.12-x86_64-2_pam.txz: Added. testing/packages/PAM/netkit-rsh-0.17-x86_64-2_pam.txz: Added. testing/packages/PAM/openssh-8.1p1-x86_64-1_pam.txz: Added. testing/packages/PAM/openvpn-2.4.8-x86_64-1_pam.txz: Added. testing/packages/PAM/pam-1.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/polkit-0.116-x86_64-1_pam.txz: Added. testing/packages/PAM/popa3d-1.0.3-x86_64-3_pam.txz: Added. testing/packages/PAM/ppp-2.4.7-x86_64-3_pam.txz: Added. testing/packages/PAM/proftpd-1.3.6b-x86_64-1_pam.txz: Added. testing/packages/PAM/samba-4.11.6-x86_64-1_pam.txz: Added. testing/packages/PAM/screen-4.8.0-x86_64-1_pam.txz: Added. testing/packages/PAM/shadow-4.8.1-x86_64-2_pam.txz: Added. testing/packages/PAM/sudo-1.8.31-x86_64-1_pam.txz: Added. testing/packages/PAM/system-config-printer-1.5.12-x86_64-2_pam.txz: Added. testing/packages/PAM/util-linux-2.35.1-x86_64-1_pam.txz: Added. testing/packages/PAM/vsftpd-3.0.3-x86_64-5_pam.txz: Added. testing/packages/PAM/xdm-1.1.11-x86_64-9_pam.txz: Added. testing/packages/PAM/xlockmore-5.62-x86_64-1_pam.txz: Added. testing/packages/PAM/xscreensaver-5.43-x86_64-1_pam.txz: Added. testing/packages/binutils-2.34-x86_64-1.txz: Removed. testing/packages/glibc-2.31-x86_64-1.txz: Removed. testing/packages/glibc-i18n-2.31-x86_64-1.txz: Removed. testing/packages/glibc-profile-2.31-x86_64-1.txz: Removed. testing/packages/glibc-solibs-2.31-x86_64-1.txz: Removed. usb-and-pxe-installers/usbboot.img: Rebuilt.
2020-02-12 06:05:50 +01:00
#!/bin/bash
# Copyright 2020 Patrick J. Volkerding, Sebeka, Minnesota, USA
# All rights reserved.
#
# Redistribution and use of this script, with or without modification, is
# permitted provided that the following conditions are met:
#
# 1. Redistributions of this script must retain the above copyright
# notice, this list of conditions and the following disclaimer.
#
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
cd $(dirname $0) ; CWD=$(pwd)
PKGNAM=libpwquality
VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)}
Fri Nov 22 22:08:18 UTC 2024 a/kernel-firmware-20241122_3ed524d-noarch-1.txz: Upgraded. a/kernel-generic-6.12.1-x86_64-1.txz: Upgraded. a/libblockdev-3.2.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/libbytesize-2.11-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/libpwquality-1.4.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. a/mkinitrd-1.4.11-x86_64-48.txz: Rebuilt. remove-orphaned-initrds: fixed output path when removing dangling symlinks. Thanks to Mechanikx. a/nut-2.8.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/util-linux-2.40.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/volume_key-0.3.12-x86_64-9.txz: Rebuilt. Recompiled against python3-3.12.7. ap/hplip-3.24.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. ap/linuxdoc-tools-0.9.83-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. ap/rpm-4.20.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. ap/undervolt-0.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/Cython-3.0.11-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/cmake-3.31.1-x86_64-1.txz: Upgraded. d/distcc-3.4-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. d/gdb-15.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/gyp-20210831_d6c5dd51-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. d/kernel-headers-6.12.1-x86-1.txz: Upgraded. d/libtool-2.5.4-x86_64-1.txz: Upgraded. d/llvm-19.1.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/mercurial-6.9-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/meson-1.6.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/python-pip-24.3.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/python-setuptools-75.6.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/python3-3.12.7-x86_64-1.txz: Upgraded. Python 3.12 has been aging for more than a year, so it's time to take it. Shared library .so-version bump. d/scons-4.8.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/slacktrack-2.24-x86_64-1.txz: Upgraded. When touching the filesystem, use xargs -P $(nproc) for a nice speedup. k/kernel-source-6.12.1-noarch-1.txz: Upgraded. kde/cantor-23.08.5-x86_64-13.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kapidox-5.116.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kdev-python-23.08.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kig-23.08.5-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kmymoney-5.1.3-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kopeninghours-23.08.5-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. kde/krita-5.2.6-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/Mako-1.3.5-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/PyQt-builder-1.16.4-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/PyQt5-5.15.11-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/PyQt5_sip-12.15.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/QScintilla-2.14.1-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/avahi-20240306_709e60f-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/boost-1.86.0-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. l/brotli-1.1.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/dbus-python-1.3.2-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/gexiv2-0.14.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/gi-docgen-2024.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/glade-3.40.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/gobject-introspection-1.82.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/gtk4-4.16.6-x86_64-1.txz: Upgraded. l/lensfun-0.3.4-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/libcaca-0.99.beta20-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/libcap-ng-0.8.5-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libmtp-1.1.22-x86_64-1.txz: Upgraded. l/libnvme-1.11.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libplist-2.6.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libwebp-1.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libxml2-2.13.5-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libxslt-1.1.42-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/mozilla-nss-3.107-x86_64-1.txz: Upgraded. l/newt-0.52.24-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/protobuf-28.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pycairo-1.27.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pycups-2.0.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pycurl-7.45.3-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/pygobject3-3.50.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pyparsing-3.1.2-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-Jinja2-3.1.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-MarkupSafe-3.0.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-PyYAML-6.0.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-alabaster-1.0.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-appdirs-1.4.4-x86_64-8.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-babel-2.16.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-build-1.2.2.post1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-calver-2022.6.26-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-certifi-2024.8.30-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-cffi-1.17.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-chardet-5.2.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-charset-normalizer-3.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-distro-1.9.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-dnspython-2.7.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-docutils-0.21.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-doxypypy-0.8.8.7-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-doxyqml-0.5.3-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-editables-0.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-flit-core-3.10.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-future-1.0.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-glad2-2.0.8-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-hatch-vcs-0.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-hatchling-1.26.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-html5lib-1.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-idna-3.10-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-imagesize-1.4.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-importlib_metadata-8.5.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-installer-0.7.0-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-lxml-5.3.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-markdown-3.7-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-notify2-0.3.1-x86_64-12.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-packaging-24.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pathspec-0.12.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pbr-6.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pillow-11.0.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pluggy-1.5.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-ply-3.11-x86_64-10.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-psutil-6.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pycparser-2.22-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pygments-2.18.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pyproject-hooks-1.2.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pysol_cards-0.18.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-random2-1.0.2-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-requests-2.32.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-sane-2.9.1-x86_64-7.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-setuptools_scm-8.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-six-1.16.0-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-smartypants-2.0.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-snowballstemmer-2.2.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-sphinx-8.1.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-sphinx_rtd_theme-3.0.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-tomli-w-1.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-trove-classifiers-2024.10.21.16-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-typogrify-2.0.7-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-urllib3-2.2.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-webencodings-0.5.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-wheel-0.45.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-zipp-3.21.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/sip-6.8.6-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/speech-dispatcher-0.11.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/system-config-printer-1.5.18-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/talloc-2.4.2-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/tdb-1.4.12-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/tevent-0.16.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. n/epic5-3.0.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/fetchmail-6.5.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/getmail-6.19.05-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/gpgme-1.24.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/iptraf-ng-1.2.2-x86_64-1.txz: Upgraded. n/net-snmp-5.9.4-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. n/nftables-1.1.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/nmap-7.95-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. n/nss-pam-ldapd-0.9.12-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. n/obexftp-0.24.2-x86_64-14.txz: Rebuilt. Recompiled against python3-3.12.7. n/php-8.3.14-x86_64-1.txz: Upgraded. This update fixes security issues: LDAP: Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932) MySQLnd: Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929) PDO DBLIB: Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236) PDO Firebird: Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236) Streams: Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234) Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233) For more information, see: https://www.php.net/ChangeLog-8.php#8.3.14 https://www.cve.org/CVERecord?id=CVE-2024-8932 https://www.cve.org/CVERecord?id=CVE-2024-8929 https://www.cve.org/CVERecord?id=CVE-2024-11236 https://www.cve.org/CVERecord?id=CVE-2024-11234 https://www.cve.org/CVERecord?id=CVE-2024-11233 (* Security fix *) n/pssh-2.3.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. n/samba-4.21.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-1.5.31-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-anthy-1.5.16-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-hangul-1.5.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-libpinyin-1.15.8-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-table-1.17.8-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. x/marisa-0.2.6-x86_64-12.txz: Rebuilt. Recompiled against python3-3.12.7. x/pyxdg-0.28-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/xcb-proto-1.17.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. xap/blueman-2.4.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. xap/hexchat-2.16.2-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. extra/brltty/brltty-6.7-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
2024-11-22 23:08:18 +01:00
BUILD=${BUILD:-3}
Wed Feb 12 05:05:50 UTC 2020 Hey folks! PAM has finally landed in /testing. Some here wanted it to go right into the main tree immediately, and in a more normal development cycle I'd have been inclined to agree (it is -current, after all). But it's probably better for it to appear in /testing first, to make sure we didn't miss any bugs and also to serve as a warning shot that we'll be shaking up the tree pretty good over the next few weeks. I'd like to see this merged into the main tree in a day or two, so any testing is greatly appreciated. Switching to the PAM packages (or reverting from them) is as easy as installing all of them with upgradepkg --install-new, and if reverting then remove the three leftover _pam packages. After reverting, a bit of residue will remain in /etc/pam.d/ and /etc/security/ which can either be manually deleted or simply ignored. While there are many more features available in PAM compared with plain shadow, out of the box about the only noticable change is the use of cracklib and libpwquality to check the quality of a user-supplied password. Hopefully having PAM and krb5 will get us on track to having proper Active Directory integration as well as using code paths that are likely better audited these days. The attack surface *might* be bigger, but it's also a lot better scrutinized. Thanks to Robby Workman and Vincent Batts who did most of the initial heavy lifting on the core PAM packages as a side project for many years. Thanks also to Phantom X whose PAM related SlackBuilds were a valuable reference. And thanks as well to ivandi - I learned a lot from the SlackMATE build scripts and was even occasionally thankful for the amusing ways you would kick my ass on LQ. ;-) You're more than welcome to let us know where we've messed up this time. The binutils and glibc packages in /testing were removed and are off the table for now. I'm not seeing much upside to heading down that rabbit hole at the moment. Next we need to be looking at Xfce 4.14 and Plasma 5.18 LTS and some other things that have been held back since KDE4 couldn't use them. Cheers! :-) a/kernel-generic-5.4.19-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.19-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.19-x86_64-1.txz: Upgraded. a/lvm2-2.03.08-x86_64-1.txz: Upgraded. a/shadow-4.8.1-x86_64-2.txz: Rebuilt. Automatically backup /etc/login.defs and install the new version if incompatible PAM options are detected. d/kernel-headers-5.4.19-x86-1.txz: Upgraded. k/kernel-source-5.4.19-noarch-1.txz: Upgraded. VALIDATE_FS_PARSER y -> n xap/mozilla-thunderbird-68.5.0-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/68.5.0/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6793 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6794 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6797 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6798 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6792 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6800 (* Security fix *) isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/at-3.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cifs-utils-6.10-x86_64-2_pam.txz: Added. testing/packages/PAM/cracklib-2.9.7-x86_64-1_pam.txz: Added. testing/packages/PAM/cups-2.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cyrus-sasl-2.1.27-x86_64-2_pam.txz: Added. testing/packages/PAM/dovecot-2.3.9.2-x86_64-1_pam.txz: Added. testing/packages/PAM/gnome-keyring-3.34.0-x86_64-1_pam.txz: Added. testing/packages/PAM/hplip-3.19.12-x86_64-2_pam.txz: Added. testing/packages/PAM/kde-workspace-4.11.22-x86_64-6_pam.txz: Added. testing/packages/PAM/libcap-2.31-x86_64-1_pam.txz: Added. testing/packages/PAM/libcgroup-0.41-x86_64-5_pam.txz: Added. testing/packages/PAM/libpwquality-1.4.2-x86_64-1_pam.txz: Added. testing/packages/PAM/mariadb-10.4.12-x86_64-1_pam.txz: Added. testing/packages/PAM/netatalk-3.1.12-x86_64-2_pam.txz: Added. testing/packages/PAM/netkit-rsh-0.17-x86_64-2_pam.txz: Added. testing/packages/PAM/openssh-8.1p1-x86_64-1_pam.txz: Added. testing/packages/PAM/openvpn-2.4.8-x86_64-1_pam.txz: Added. testing/packages/PAM/pam-1.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/polkit-0.116-x86_64-1_pam.txz: Added. testing/packages/PAM/popa3d-1.0.3-x86_64-3_pam.txz: Added. testing/packages/PAM/ppp-2.4.7-x86_64-3_pam.txz: Added. testing/packages/PAM/proftpd-1.3.6b-x86_64-1_pam.txz: Added. testing/packages/PAM/samba-4.11.6-x86_64-1_pam.txz: Added. testing/packages/PAM/screen-4.8.0-x86_64-1_pam.txz: Added. testing/packages/PAM/shadow-4.8.1-x86_64-2_pam.txz: Added. testing/packages/PAM/sudo-1.8.31-x86_64-1_pam.txz: Added. testing/packages/PAM/system-config-printer-1.5.12-x86_64-2_pam.txz: Added. testing/packages/PAM/util-linux-2.35.1-x86_64-1_pam.txz: Added. testing/packages/PAM/vsftpd-3.0.3-x86_64-5_pam.txz: Added. testing/packages/PAM/xdm-1.1.11-x86_64-9_pam.txz: Added. testing/packages/PAM/xlockmore-5.62-x86_64-1_pam.txz: Added. testing/packages/PAM/xscreensaver-5.43-x86_64-1_pam.txz: Added. testing/packages/binutils-2.34-x86_64-1.txz: Removed. testing/packages/glibc-2.31-x86_64-1.txz: Removed. testing/packages/glibc-i18n-2.31-x86_64-1.txz: Removed. testing/packages/glibc-profile-2.31-x86_64-1.txz: Removed. testing/packages/glibc-solibs-2.31-x86_64-1.txz: Removed. usb-and-pxe-installers/usbboot.img: Rebuilt.
2020-02-12 06:05:50 +01:00
# Automatically determine the architecture we're building on:
if [ -z "$ARCH" ]; then
case "$(uname -m)" in
Fri Nov 22 22:08:18 UTC 2024 a/kernel-firmware-20241122_3ed524d-noarch-1.txz: Upgraded. a/kernel-generic-6.12.1-x86_64-1.txz: Upgraded. a/libblockdev-3.2.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/libbytesize-2.11-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/libpwquality-1.4.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. a/mkinitrd-1.4.11-x86_64-48.txz: Rebuilt. remove-orphaned-initrds: fixed output path when removing dangling symlinks. Thanks to Mechanikx. a/nut-2.8.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/util-linux-2.40.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/volume_key-0.3.12-x86_64-9.txz: Rebuilt. Recompiled against python3-3.12.7. ap/hplip-3.24.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. ap/linuxdoc-tools-0.9.83-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. ap/rpm-4.20.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. ap/undervolt-0.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/Cython-3.0.11-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/cmake-3.31.1-x86_64-1.txz: Upgraded. d/distcc-3.4-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. d/gdb-15.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/gyp-20210831_d6c5dd51-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. d/kernel-headers-6.12.1-x86-1.txz: Upgraded. d/libtool-2.5.4-x86_64-1.txz: Upgraded. d/llvm-19.1.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/mercurial-6.9-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/meson-1.6.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/python-pip-24.3.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/python-setuptools-75.6.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/python3-3.12.7-x86_64-1.txz: Upgraded. Python 3.12 has been aging for more than a year, so it's time to take it. Shared library .so-version bump. d/scons-4.8.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/slacktrack-2.24-x86_64-1.txz: Upgraded. When touching the filesystem, use xargs -P $(nproc) for a nice speedup. k/kernel-source-6.12.1-noarch-1.txz: Upgraded. kde/cantor-23.08.5-x86_64-13.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kapidox-5.116.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kdev-python-23.08.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kig-23.08.5-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kmymoney-5.1.3-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kopeninghours-23.08.5-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. kde/krita-5.2.6-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/Mako-1.3.5-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/PyQt-builder-1.16.4-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/PyQt5-5.15.11-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/PyQt5_sip-12.15.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/QScintilla-2.14.1-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/avahi-20240306_709e60f-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/boost-1.86.0-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. l/brotli-1.1.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/dbus-python-1.3.2-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/gexiv2-0.14.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/gi-docgen-2024.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/glade-3.40.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/gobject-introspection-1.82.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/gtk4-4.16.6-x86_64-1.txz: Upgraded. l/lensfun-0.3.4-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/libcaca-0.99.beta20-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/libcap-ng-0.8.5-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libmtp-1.1.22-x86_64-1.txz: Upgraded. l/libnvme-1.11.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libplist-2.6.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libwebp-1.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libxml2-2.13.5-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libxslt-1.1.42-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/mozilla-nss-3.107-x86_64-1.txz: Upgraded. l/newt-0.52.24-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/protobuf-28.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pycairo-1.27.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pycups-2.0.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pycurl-7.45.3-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/pygobject3-3.50.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pyparsing-3.1.2-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-Jinja2-3.1.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-MarkupSafe-3.0.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-PyYAML-6.0.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-alabaster-1.0.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-appdirs-1.4.4-x86_64-8.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-babel-2.16.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-build-1.2.2.post1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-calver-2022.6.26-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-certifi-2024.8.30-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-cffi-1.17.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-chardet-5.2.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-charset-normalizer-3.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-distro-1.9.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-dnspython-2.7.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-docutils-0.21.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-doxypypy-0.8.8.7-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-doxyqml-0.5.3-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-editables-0.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-flit-core-3.10.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-future-1.0.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-glad2-2.0.8-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-hatch-vcs-0.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-hatchling-1.26.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-html5lib-1.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-idna-3.10-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-imagesize-1.4.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-importlib_metadata-8.5.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-installer-0.7.0-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-lxml-5.3.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-markdown-3.7-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-notify2-0.3.1-x86_64-12.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-packaging-24.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pathspec-0.12.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pbr-6.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pillow-11.0.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pluggy-1.5.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-ply-3.11-x86_64-10.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-psutil-6.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pycparser-2.22-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pygments-2.18.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pyproject-hooks-1.2.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pysol_cards-0.18.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-random2-1.0.2-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-requests-2.32.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-sane-2.9.1-x86_64-7.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-setuptools_scm-8.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-six-1.16.0-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-smartypants-2.0.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-snowballstemmer-2.2.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-sphinx-8.1.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-sphinx_rtd_theme-3.0.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-tomli-w-1.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-trove-classifiers-2024.10.21.16-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-typogrify-2.0.7-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-urllib3-2.2.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-webencodings-0.5.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-wheel-0.45.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-zipp-3.21.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/sip-6.8.6-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/speech-dispatcher-0.11.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/system-config-printer-1.5.18-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/talloc-2.4.2-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/tdb-1.4.12-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/tevent-0.16.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. n/epic5-3.0.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/fetchmail-6.5.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/getmail-6.19.05-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/gpgme-1.24.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/iptraf-ng-1.2.2-x86_64-1.txz: Upgraded. n/net-snmp-5.9.4-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. n/nftables-1.1.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/nmap-7.95-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. n/nss-pam-ldapd-0.9.12-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. n/obexftp-0.24.2-x86_64-14.txz: Rebuilt. Recompiled against python3-3.12.7. n/php-8.3.14-x86_64-1.txz: Upgraded. This update fixes security issues: LDAP: Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932) MySQLnd: Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929) PDO DBLIB: Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236) PDO Firebird: Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236) Streams: Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234) Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233) For more information, see: https://www.php.net/ChangeLog-8.php#8.3.14 https://www.cve.org/CVERecord?id=CVE-2024-8932 https://www.cve.org/CVERecord?id=CVE-2024-8929 https://www.cve.org/CVERecord?id=CVE-2024-11236 https://www.cve.org/CVERecord?id=CVE-2024-11234 https://www.cve.org/CVERecord?id=CVE-2024-11233 (* Security fix *) n/pssh-2.3.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. n/samba-4.21.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-1.5.31-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-anthy-1.5.16-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-hangul-1.5.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-libpinyin-1.15.8-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-table-1.17.8-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. x/marisa-0.2.6-x86_64-12.txz: Rebuilt. Recompiled against python3-3.12.7. x/pyxdg-0.28-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/xcb-proto-1.17.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. xap/blueman-2.4.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. xap/hexchat-2.16.2-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. extra/brltty/brltty-6.7-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
2024-11-22 23:08:18 +01:00
i?86) ARCH=i686 ;;
Tue Sep 6 20:21:24 UTC 2022 a/cracklib-2.9.8-x86_64-1.txz: Upgraded. a/gawk-5.2.0-x86_64-1.txz: Upgraded. a/grep-3.8-x86_64-1.txz: Upgraded. a/kernel-firmware-20220902_2f2f018-noarch-1.txz: Upgraded. a/kernel-generic-5.19.7-x86_64-1.txz: Upgraded. a/kernel-huge-5.19.7-x86_64-1.txz: Upgraded. a/kernel-modules-5.19.7-x86_64-1.txz: Upgraded. a/pcmciautils-018-x86_64-5.txz: Rebuilt. rc.pcmcia: change fgrep to grep -F. a/pkgtools-15.1-noarch-1.txz: Upgraded. removepkg: change fgrep to grep -F. a/sysvinit-functions-8.53-x86_64-6.txz: Rebuilt. /etc/rc.d/init.d/functions: change egrep to grep -E. a/sysvinit-scripts-15.1-noarch-2.txz: Rebuilt. rc.cpufreq: command-line choice should take priority over /etc/default/cpufreq. Thanks to af7567. rc.6: change egrep to grep -E. ap/sqlite-3.39.3-x86_64-1.txz: Upgraded. ap/vim-9.0.0396-x86_64-1.txz: Upgraded. Fixed use after free. Thanks to marav for the heads-up. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3099 (* Security fix *) d/autoconf-2.71-noarch-2.txz: Rebuilt. doinst.sh: change fgrep to grep -F. d/autoconf-archive-2022.09.03-noarch-1.txz: Upgraded. d/automake-1.16.5-noarch-2.txz: Rebuilt. doinst.sh: change fgrep to grep -F. d/kernel-headers-5.19.7-x86-1.txz: Upgraded. d/libtool-2.4.7-x86_64-4.txz: Rebuilt. doinst.sh: change fgrep to grep -F. d/meson-0.63.2-x86_64-1.txz: Upgraded. d/vala-0.56.3-x86_64-1.txz: Upgraded. k/kernel-source-5.19.7-noarch-1.txz: Upgraded. kde/bluedevil-5.25.5-x86_64-1.txz: Upgraded. kde/breeze-5.25.5-x86_64-1.txz: Upgraded. kde/breeze-grub-5.25.5-x86_64-1.txz: Upgraded. kde/breeze-gtk-5.25.5-x86_64-1.txz: Upgraded. kde/drkonqi-5.25.5-x86_64-1.txz: Upgraded. kde/kactivitymanagerd-5.25.5-x86_64-1.txz: Upgraded. kde/kde-cli-tools-5.25.5-x86_64-1.txz: Upgraded. kde/kde-gtk-config-5.25.5-x86_64-1.txz: Upgraded. kde/kdecoration-5.25.5-x86_64-1.txz: Upgraded. kde/kdeplasma-addons-5.25.5-x86_64-1.txz: Upgraded. kde/kgamma5-5.25.5-x86_64-1.txz: Upgraded. kde/khotkeys-5.25.5-x86_64-1.txz: Upgraded. kde/kinfocenter-5.25.5-x86_64-1.txz: Upgraded. kde/kmenuedit-5.25.5-x86_64-1.txz: Upgraded. kde/kscreen-5.25.5-x86_64-1.txz: Upgraded. kde/kscreenlocker-5.25.5-x86_64-1.txz: Upgraded. kde/ksshaskpass-5.25.5-x86_64-1.txz: Upgraded. kde/ksystemstats-5.25.5-x86_64-1.txz: Upgraded. kde/kwallet-pam-5.25.5-x86_64-1.txz: Upgraded. kde/kwayland-integration-5.25.5-x86_64-1.txz: Upgraded. kde/kwin-5.25.5-x86_64-1.txz: Upgraded. kde/kwrited-5.25.5-x86_64-1.txz: Upgraded. kde/layer-shell-qt-5.25.5-x86_64-1.txz: Upgraded. kde/libkscreen-5.25.5-x86_64-1.txz: Upgraded. kde/libksysguard-5.25.5-x86_64-1.txz: Upgraded. kde/milou-5.25.5-x86_64-1.txz: Upgraded. kde/oxygen-5.25.5-x86_64-1.txz: Upgraded. kde/oxygen-sounds-5.25.5-x86_64-1.txz: Upgraded. kde/plasma-browser-integration-5.25.5-x86_64-1.txz: Upgraded. kde/plasma-desktop-5.25.5-x86_64-1.txz: Upgraded. kde/plasma-disks-5.25.5-x86_64-1.txz: Upgraded. kde/plasma-firewall-5.25.5-x86_64-1.txz: Upgraded. kde/plasma-integration-5.25.5-x86_64-1.txz: Upgraded. kde/plasma-nm-5.25.5-x86_64-1.txz: Upgraded. kde/plasma-pa-5.25.5-x86_64-1.txz: Upgraded. kde/plasma-sdk-5.25.5-x86_64-1.txz: Upgraded. kde/plasma-systemmonitor-5.25.5-x86_64-1.txz: Upgraded. kde/plasma-vault-5.25.5-x86_64-1.txz: Upgraded. kde/plasma-wayland-protocols-1.8.0-x86_64-1.txz: Upgraded. kde/plasma-workspace-5.25.5-x86_64-1.txz: Upgraded. kde/plasma-workspace-wallpapers-5.25.5-x86_64-1.txz: Upgraded. kde/polkit-kde-agent-1-5.25.5-x86_64-1.txz: Upgraded. kde/powerdevil-5.25.5-x86_64-1.txz: Upgraded. kde/qqc2-breeze-style-5.25.5-x86_64-1.txz: Upgraded. kde/sddm-kcm-5.25.5-x86_64-1.txz: Upgraded. kde/systemsettings-5.25.5-x86_64-1.txz: Upgraded. kde/xdg-desktop-portal-kde-5.25.5-x86_64-1.txz: Upgraded. l/fluidsynth-2.2.9-x86_64-1.txz: Upgraded. l/libsoup3-3.0.8-x86_64-1.txz: Upgraded. l/libssh-0.10.3-x86_64-1.txz: Upgraded. l/neon-0.32.3-x86_64-1.txz: Upgraded. l/slang-2.3.3-x86_64-1.txz: Upgraded. n/nmap-7.93-x86_64-1.txz: Upgraded. x/ibus-m17n-1.4.11-x86_64-1.txz: Upgraded. x/libXft-2.3.5-x86_64-1.txz: Upgraded. xap/mozilla-firefox-104.0.2-x86_64-1.txz: Upgraded. This is a bugfix release. For more information, see: https://www.mozilla.org/en-US/firefox/104.0.2/releasenotes/ xap/vim-gvim-9.0.0396-x86_64-1.txz: Upgraded. xfce/xfce4-pulseaudio-plugin-0.4.4-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
2022-09-06 22:21:24 +02:00
arm*) readelf /usr/bin/file -A | grep -E -q "Tag_CPU.*[4,5]" && ARCH=arm || ARCH=armv7hl ;;
Wed Feb 12 05:05:50 UTC 2020 Hey folks! PAM has finally landed in /testing. Some here wanted it to go right into the main tree immediately, and in a more normal development cycle I'd have been inclined to agree (it is -current, after all). But it's probably better for it to appear in /testing first, to make sure we didn't miss any bugs and also to serve as a warning shot that we'll be shaking up the tree pretty good over the next few weeks. I'd like to see this merged into the main tree in a day or two, so any testing is greatly appreciated. Switching to the PAM packages (or reverting from them) is as easy as installing all of them with upgradepkg --install-new, and if reverting then remove the three leftover _pam packages. After reverting, a bit of residue will remain in /etc/pam.d/ and /etc/security/ which can either be manually deleted or simply ignored. While there are many more features available in PAM compared with plain shadow, out of the box about the only noticable change is the use of cracklib and libpwquality to check the quality of a user-supplied password. Hopefully having PAM and krb5 will get us on track to having proper Active Directory integration as well as using code paths that are likely better audited these days. The attack surface *might* be bigger, but it's also a lot better scrutinized. Thanks to Robby Workman and Vincent Batts who did most of the initial heavy lifting on the core PAM packages as a side project for many years. Thanks also to Phantom X whose PAM related SlackBuilds were a valuable reference. And thanks as well to ivandi - I learned a lot from the SlackMATE build scripts and was even occasionally thankful for the amusing ways you would kick my ass on LQ. ;-) You're more than welcome to let us know where we've messed up this time. The binutils and glibc packages in /testing were removed and are off the table for now. I'm not seeing much upside to heading down that rabbit hole at the moment. Next we need to be looking at Xfce 4.14 and Plasma 5.18 LTS and some other things that have been held back since KDE4 couldn't use them. Cheers! :-) a/kernel-generic-5.4.19-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.19-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.19-x86_64-1.txz: Upgraded. a/lvm2-2.03.08-x86_64-1.txz: Upgraded. a/shadow-4.8.1-x86_64-2.txz: Rebuilt. Automatically backup /etc/login.defs and install the new version if incompatible PAM options are detected. d/kernel-headers-5.4.19-x86-1.txz: Upgraded. k/kernel-source-5.4.19-noarch-1.txz: Upgraded. VALIDATE_FS_PARSER y -> n xap/mozilla-thunderbird-68.5.0-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/68.5.0/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6793 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6794 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6797 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6798 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6792 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6800 (* Security fix *) isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/at-3.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cifs-utils-6.10-x86_64-2_pam.txz: Added. testing/packages/PAM/cracklib-2.9.7-x86_64-1_pam.txz: Added. testing/packages/PAM/cups-2.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cyrus-sasl-2.1.27-x86_64-2_pam.txz: Added. testing/packages/PAM/dovecot-2.3.9.2-x86_64-1_pam.txz: Added. testing/packages/PAM/gnome-keyring-3.34.0-x86_64-1_pam.txz: Added. testing/packages/PAM/hplip-3.19.12-x86_64-2_pam.txz: Added. testing/packages/PAM/kde-workspace-4.11.22-x86_64-6_pam.txz: Added. testing/packages/PAM/libcap-2.31-x86_64-1_pam.txz: Added. testing/packages/PAM/libcgroup-0.41-x86_64-5_pam.txz: Added. testing/packages/PAM/libpwquality-1.4.2-x86_64-1_pam.txz: Added. testing/packages/PAM/mariadb-10.4.12-x86_64-1_pam.txz: Added. testing/packages/PAM/netatalk-3.1.12-x86_64-2_pam.txz: Added. testing/packages/PAM/netkit-rsh-0.17-x86_64-2_pam.txz: Added. testing/packages/PAM/openssh-8.1p1-x86_64-1_pam.txz: Added. testing/packages/PAM/openvpn-2.4.8-x86_64-1_pam.txz: Added. testing/packages/PAM/pam-1.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/polkit-0.116-x86_64-1_pam.txz: Added. testing/packages/PAM/popa3d-1.0.3-x86_64-3_pam.txz: Added. testing/packages/PAM/ppp-2.4.7-x86_64-3_pam.txz: Added. testing/packages/PAM/proftpd-1.3.6b-x86_64-1_pam.txz: Added. testing/packages/PAM/samba-4.11.6-x86_64-1_pam.txz: Added. testing/packages/PAM/screen-4.8.0-x86_64-1_pam.txz: Added. testing/packages/PAM/shadow-4.8.1-x86_64-2_pam.txz: Added. testing/packages/PAM/sudo-1.8.31-x86_64-1_pam.txz: Added. testing/packages/PAM/system-config-printer-1.5.12-x86_64-2_pam.txz: Added. testing/packages/PAM/util-linux-2.35.1-x86_64-1_pam.txz: Added. testing/packages/PAM/vsftpd-3.0.3-x86_64-5_pam.txz: Added. testing/packages/PAM/xdm-1.1.11-x86_64-9_pam.txz: Added. testing/packages/PAM/xlockmore-5.62-x86_64-1_pam.txz: Added. testing/packages/PAM/xscreensaver-5.43-x86_64-1_pam.txz: Added. testing/packages/binutils-2.34-x86_64-1.txz: Removed. testing/packages/glibc-2.31-x86_64-1.txz: Removed. testing/packages/glibc-i18n-2.31-x86_64-1.txz: Removed. testing/packages/glibc-profile-2.31-x86_64-1.txz: Removed. testing/packages/glibc-solibs-2.31-x86_64-1.txz: Removed. usb-and-pxe-installers/usbboot.img: Rebuilt.
2020-02-12 06:05:50 +01:00
# Unless $ARCH is already set, use uname -m for all other archs:
*) ARCH=$(uname -m) ;;
esac
export ARCH
fi
# If the variable PRINT_PACKAGE_NAME is set, then this script will report what
# the name of the created package would be, and then exit. This information
# could be useful to other scripts.
if [ ! -z "${PRINT_PACKAGE_NAME}" ]; then
echo "$PKGNAM-$VERSION-$ARCH-$BUILD.txz"
exit 0
fi
NUMJOBS=${NUMJOBS:-" -j$(expr $(nproc) + 1) "}
Fri Nov 22 22:08:18 UTC 2024 a/kernel-firmware-20241122_3ed524d-noarch-1.txz: Upgraded. a/kernel-generic-6.12.1-x86_64-1.txz: Upgraded. a/libblockdev-3.2.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/libbytesize-2.11-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/libpwquality-1.4.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. a/mkinitrd-1.4.11-x86_64-48.txz: Rebuilt. remove-orphaned-initrds: fixed output path when removing dangling symlinks. Thanks to Mechanikx. a/nut-2.8.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/util-linux-2.40.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/volume_key-0.3.12-x86_64-9.txz: Rebuilt. Recompiled against python3-3.12.7. ap/hplip-3.24.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. ap/linuxdoc-tools-0.9.83-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. ap/rpm-4.20.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. ap/undervolt-0.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/Cython-3.0.11-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/cmake-3.31.1-x86_64-1.txz: Upgraded. d/distcc-3.4-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. d/gdb-15.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/gyp-20210831_d6c5dd51-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. d/kernel-headers-6.12.1-x86-1.txz: Upgraded. d/libtool-2.5.4-x86_64-1.txz: Upgraded. d/llvm-19.1.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/mercurial-6.9-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/meson-1.6.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/python-pip-24.3.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/python-setuptools-75.6.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/python3-3.12.7-x86_64-1.txz: Upgraded. Python 3.12 has been aging for more than a year, so it's time to take it. Shared library .so-version bump. d/scons-4.8.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/slacktrack-2.24-x86_64-1.txz: Upgraded. When touching the filesystem, use xargs -P $(nproc) for a nice speedup. k/kernel-source-6.12.1-noarch-1.txz: Upgraded. kde/cantor-23.08.5-x86_64-13.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kapidox-5.116.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kdev-python-23.08.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kig-23.08.5-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kmymoney-5.1.3-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kopeninghours-23.08.5-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. kde/krita-5.2.6-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/Mako-1.3.5-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/PyQt-builder-1.16.4-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/PyQt5-5.15.11-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/PyQt5_sip-12.15.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/QScintilla-2.14.1-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/avahi-20240306_709e60f-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/boost-1.86.0-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. l/brotli-1.1.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/dbus-python-1.3.2-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/gexiv2-0.14.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/gi-docgen-2024.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/glade-3.40.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/gobject-introspection-1.82.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/gtk4-4.16.6-x86_64-1.txz: Upgraded. l/lensfun-0.3.4-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/libcaca-0.99.beta20-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/libcap-ng-0.8.5-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libmtp-1.1.22-x86_64-1.txz: Upgraded. l/libnvme-1.11.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libplist-2.6.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libwebp-1.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libxml2-2.13.5-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libxslt-1.1.42-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/mozilla-nss-3.107-x86_64-1.txz: Upgraded. l/newt-0.52.24-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/protobuf-28.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pycairo-1.27.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pycups-2.0.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pycurl-7.45.3-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/pygobject3-3.50.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pyparsing-3.1.2-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-Jinja2-3.1.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-MarkupSafe-3.0.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-PyYAML-6.0.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-alabaster-1.0.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-appdirs-1.4.4-x86_64-8.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-babel-2.16.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-build-1.2.2.post1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-calver-2022.6.26-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-certifi-2024.8.30-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-cffi-1.17.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-chardet-5.2.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-charset-normalizer-3.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-distro-1.9.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-dnspython-2.7.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-docutils-0.21.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-doxypypy-0.8.8.7-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-doxyqml-0.5.3-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-editables-0.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-flit-core-3.10.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-future-1.0.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-glad2-2.0.8-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-hatch-vcs-0.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-hatchling-1.26.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-html5lib-1.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-idna-3.10-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-imagesize-1.4.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-importlib_metadata-8.5.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-installer-0.7.0-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-lxml-5.3.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-markdown-3.7-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-notify2-0.3.1-x86_64-12.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-packaging-24.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pathspec-0.12.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pbr-6.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pillow-11.0.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pluggy-1.5.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-ply-3.11-x86_64-10.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-psutil-6.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pycparser-2.22-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pygments-2.18.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pyproject-hooks-1.2.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pysol_cards-0.18.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-random2-1.0.2-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-requests-2.32.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-sane-2.9.1-x86_64-7.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-setuptools_scm-8.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-six-1.16.0-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-smartypants-2.0.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-snowballstemmer-2.2.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-sphinx-8.1.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-sphinx_rtd_theme-3.0.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-tomli-w-1.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-trove-classifiers-2024.10.21.16-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-typogrify-2.0.7-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-urllib3-2.2.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-webencodings-0.5.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-wheel-0.45.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-zipp-3.21.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/sip-6.8.6-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/speech-dispatcher-0.11.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/system-config-printer-1.5.18-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/talloc-2.4.2-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/tdb-1.4.12-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/tevent-0.16.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. n/epic5-3.0.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/fetchmail-6.5.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/getmail-6.19.05-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/gpgme-1.24.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/iptraf-ng-1.2.2-x86_64-1.txz: Upgraded. n/net-snmp-5.9.4-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. n/nftables-1.1.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/nmap-7.95-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. n/nss-pam-ldapd-0.9.12-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. n/obexftp-0.24.2-x86_64-14.txz: Rebuilt. Recompiled against python3-3.12.7. n/php-8.3.14-x86_64-1.txz: Upgraded. This update fixes security issues: LDAP: Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932) MySQLnd: Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929) PDO DBLIB: Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236) PDO Firebird: Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236) Streams: Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234) Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233) For more information, see: https://www.php.net/ChangeLog-8.php#8.3.14 https://www.cve.org/CVERecord?id=CVE-2024-8932 https://www.cve.org/CVERecord?id=CVE-2024-8929 https://www.cve.org/CVERecord?id=CVE-2024-11236 https://www.cve.org/CVERecord?id=CVE-2024-11234 https://www.cve.org/CVERecord?id=CVE-2024-11233 (* Security fix *) n/pssh-2.3.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. n/samba-4.21.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-1.5.31-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-anthy-1.5.16-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-hangul-1.5.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-libpinyin-1.15.8-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-table-1.17.8-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. x/marisa-0.2.6-x86_64-12.txz: Rebuilt. Recompiled against python3-3.12.7. x/pyxdg-0.28-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/xcb-proto-1.17.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. xap/blueman-2.4.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. xap/hexchat-2.16.2-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. extra/brltty/brltty-6.7-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
2024-11-22 23:08:18 +01:00
if [ "$ARCH" = "i686" ]; then
SLKCFLAGS="-O2 -march=pentium4 -mtune=generic"
Wed Feb 12 05:05:50 UTC 2020 Hey folks! PAM has finally landed in /testing. Some here wanted it to go right into the main tree immediately, and in a more normal development cycle I'd have been inclined to agree (it is -current, after all). But it's probably better for it to appear in /testing first, to make sure we didn't miss any bugs and also to serve as a warning shot that we'll be shaking up the tree pretty good over the next few weeks. I'd like to see this merged into the main tree in a day or two, so any testing is greatly appreciated. Switching to the PAM packages (or reverting from them) is as easy as installing all of them with upgradepkg --install-new, and if reverting then remove the three leftover _pam packages. After reverting, a bit of residue will remain in /etc/pam.d/ and /etc/security/ which can either be manually deleted or simply ignored. While there are many more features available in PAM compared with plain shadow, out of the box about the only noticable change is the use of cracklib and libpwquality to check the quality of a user-supplied password. Hopefully having PAM and krb5 will get us on track to having proper Active Directory integration as well as using code paths that are likely better audited these days. The attack surface *might* be bigger, but it's also a lot better scrutinized. Thanks to Robby Workman and Vincent Batts who did most of the initial heavy lifting on the core PAM packages as a side project for many years. Thanks also to Phantom X whose PAM related SlackBuilds were a valuable reference. And thanks as well to ivandi - I learned a lot from the SlackMATE build scripts and was even occasionally thankful for the amusing ways you would kick my ass on LQ. ;-) You're more than welcome to let us know where we've messed up this time. The binutils and glibc packages in /testing were removed and are off the table for now. I'm not seeing much upside to heading down that rabbit hole at the moment. Next we need to be looking at Xfce 4.14 and Plasma 5.18 LTS and some other things that have been held back since KDE4 couldn't use them. Cheers! :-) a/kernel-generic-5.4.19-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.19-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.19-x86_64-1.txz: Upgraded. a/lvm2-2.03.08-x86_64-1.txz: Upgraded. a/shadow-4.8.1-x86_64-2.txz: Rebuilt. Automatically backup /etc/login.defs and install the new version if incompatible PAM options are detected. d/kernel-headers-5.4.19-x86-1.txz: Upgraded. k/kernel-source-5.4.19-noarch-1.txz: Upgraded. VALIDATE_FS_PARSER y -> n xap/mozilla-thunderbird-68.5.0-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/68.5.0/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6793 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6794 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6797 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6798 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6792 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6800 (* Security fix *) isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/at-3.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cifs-utils-6.10-x86_64-2_pam.txz: Added. testing/packages/PAM/cracklib-2.9.7-x86_64-1_pam.txz: Added. testing/packages/PAM/cups-2.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cyrus-sasl-2.1.27-x86_64-2_pam.txz: Added. testing/packages/PAM/dovecot-2.3.9.2-x86_64-1_pam.txz: Added. testing/packages/PAM/gnome-keyring-3.34.0-x86_64-1_pam.txz: Added. testing/packages/PAM/hplip-3.19.12-x86_64-2_pam.txz: Added. testing/packages/PAM/kde-workspace-4.11.22-x86_64-6_pam.txz: Added. testing/packages/PAM/libcap-2.31-x86_64-1_pam.txz: Added. testing/packages/PAM/libcgroup-0.41-x86_64-5_pam.txz: Added. testing/packages/PAM/libpwquality-1.4.2-x86_64-1_pam.txz: Added. testing/packages/PAM/mariadb-10.4.12-x86_64-1_pam.txz: Added. testing/packages/PAM/netatalk-3.1.12-x86_64-2_pam.txz: Added. testing/packages/PAM/netkit-rsh-0.17-x86_64-2_pam.txz: Added. testing/packages/PAM/openssh-8.1p1-x86_64-1_pam.txz: Added. testing/packages/PAM/openvpn-2.4.8-x86_64-1_pam.txz: Added. testing/packages/PAM/pam-1.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/polkit-0.116-x86_64-1_pam.txz: Added. testing/packages/PAM/popa3d-1.0.3-x86_64-3_pam.txz: Added. testing/packages/PAM/ppp-2.4.7-x86_64-3_pam.txz: Added. testing/packages/PAM/proftpd-1.3.6b-x86_64-1_pam.txz: Added. testing/packages/PAM/samba-4.11.6-x86_64-1_pam.txz: Added. testing/packages/PAM/screen-4.8.0-x86_64-1_pam.txz: Added. testing/packages/PAM/shadow-4.8.1-x86_64-2_pam.txz: Added. testing/packages/PAM/sudo-1.8.31-x86_64-1_pam.txz: Added. testing/packages/PAM/system-config-printer-1.5.12-x86_64-2_pam.txz: Added. testing/packages/PAM/util-linux-2.35.1-x86_64-1_pam.txz: Added. testing/packages/PAM/vsftpd-3.0.3-x86_64-5_pam.txz: Added. testing/packages/PAM/xdm-1.1.11-x86_64-9_pam.txz: Added. testing/packages/PAM/xlockmore-5.62-x86_64-1_pam.txz: Added. testing/packages/PAM/xscreensaver-5.43-x86_64-1_pam.txz: Added. testing/packages/binutils-2.34-x86_64-1.txz: Removed. testing/packages/glibc-2.31-x86_64-1.txz: Removed. testing/packages/glibc-i18n-2.31-x86_64-1.txz: Removed. testing/packages/glibc-profile-2.31-x86_64-1.txz: Removed. testing/packages/glibc-solibs-2.31-x86_64-1.txz: Removed. usb-and-pxe-installers/usbboot.img: Rebuilt.
2020-02-12 06:05:50 +01:00
LIBDIRSUFFIX=""
elif [ "$ARCH" = "x86_64" ]; then
Fri Nov 22 22:08:18 UTC 2024 a/kernel-firmware-20241122_3ed524d-noarch-1.txz: Upgraded. a/kernel-generic-6.12.1-x86_64-1.txz: Upgraded. a/libblockdev-3.2.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/libbytesize-2.11-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/libpwquality-1.4.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. a/mkinitrd-1.4.11-x86_64-48.txz: Rebuilt. remove-orphaned-initrds: fixed output path when removing dangling symlinks. Thanks to Mechanikx. a/nut-2.8.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/util-linux-2.40.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. a/volume_key-0.3.12-x86_64-9.txz: Rebuilt. Recompiled against python3-3.12.7. ap/hplip-3.24.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. ap/linuxdoc-tools-0.9.83-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. ap/rpm-4.20.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. ap/undervolt-0.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/Cython-3.0.11-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/cmake-3.31.1-x86_64-1.txz: Upgraded. d/distcc-3.4-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. d/gdb-15.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/gyp-20210831_d6c5dd51-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. d/kernel-headers-6.12.1-x86-1.txz: Upgraded. d/libtool-2.5.4-x86_64-1.txz: Upgraded. d/llvm-19.1.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/mercurial-6.9-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/meson-1.6.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/python-pip-24.3.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/python-setuptools-75.6.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/python3-3.12.7-x86_64-1.txz: Upgraded. Python 3.12 has been aging for more than a year, so it's time to take it. Shared library .so-version bump. d/scons-4.8.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. d/slacktrack-2.24-x86_64-1.txz: Upgraded. When touching the filesystem, use xargs -P $(nproc) for a nice speedup. k/kernel-source-6.12.1-noarch-1.txz: Upgraded. kde/cantor-23.08.5-x86_64-13.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kapidox-5.116.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kdev-python-23.08.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kig-23.08.5-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kmymoney-5.1.3-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. kde/kopeninghours-23.08.5-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. kde/krita-5.2.6-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/Mako-1.3.5-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/PyQt-builder-1.16.4-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/PyQt5-5.15.11-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/PyQt5_sip-12.15.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/QScintilla-2.14.1-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/avahi-20240306_709e60f-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/boost-1.86.0-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. l/brotli-1.1.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/dbus-python-1.3.2-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/gexiv2-0.14.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/gi-docgen-2024.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/glade-3.40.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/gobject-introspection-1.82.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/gtk4-4.16.6-x86_64-1.txz: Upgraded. l/lensfun-0.3.4-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/libcaca-0.99.beta20-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/libcap-ng-0.8.5-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libmtp-1.1.22-x86_64-1.txz: Upgraded. l/libnvme-1.11.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libplist-2.6.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libwebp-1.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libxml2-2.13.5-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/libxslt-1.1.42-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/mozilla-nss-3.107-x86_64-1.txz: Upgraded. l/newt-0.52.24-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/protobuf-28.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pycairo-1.27.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pycups-2.0.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pycurl-7.45.3-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/pygobject3-3.50.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/pyparsing-3.1.2-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-Jinja2-3.1.4-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-MarkupSafe-3.0.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-PyYAML-6.0.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-alabaster-1.0.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-appdirs-1.4.4-x86_64-8.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-babel-2.16.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-build-1.2.2.post1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-calver-2022.6.26-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-certifi-2024.8.30-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-cffi-1.17.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-chardet-5.2.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-charset-normalizer-3.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-distro-1.9.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-dnspython-2.7.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-docutils-0.21.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-doxypypy-0.8.8.7-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-doxyqml-0.5.3-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-editables-0.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-flit-core-3.10.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-future-1.0.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-glad2-2.0.8-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-hatch-vcs-0.4.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-hatchling-1.26.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-html5lib-1.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-idna-3.10-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-imagesize-1.4.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-importlib_metadata-8.5.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-installer-0.7.0-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-lxml-5.3.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-markdown-3.7-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-notify2-0.3.1-x86_64-12.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-packaging-24.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pathspec-0.12.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pbr-6.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pillow-11.0.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pluggy-1.5.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-ply-3.11-x86_64-10.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-psutil-6.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pycparser-2.22-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pygments-2.18.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pyproject-hooks-1.2.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-pysol_cards-0.18.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-random2-1.0.2-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-requests-2.32.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-sane-2.9.1-x86_64-7.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-setuptools_scm-8.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-six-1.16.0-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-smartypants-2.0.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-snowballstemmer-2.2.0-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-sphinx-8.1.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-sphinx_rtd_theme-3.0.2-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-tomli-w-1.1.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-trove-classifiers-2024.10.21.16-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-typogrify-2.0.7-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-urllib3-2.2.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-webencodings-0.5.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-wheel-0.45.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/python-zipp-3.21.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/sip-6.8.6-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/speech-dispatcher-0.11.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/system-config-printer-1.5.18-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/talloc-2.4.2-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. l/tdb-1.4.12-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. l/tevent-0.16.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. n/epic5-3.0.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/fetchmail-6.5.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/getmail-6.19.05-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/gpgme-1.24.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/iptraf-ng-1.2.2-x86_64-1.txz: Upgraded. n/net-snmp-5.9.4-x86_64-6.txz: Rebuilt. Recompiled against python3-3.12.7. n/nftables-1.1.1-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. n/nmap-7.95-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. n/nss-pam-ldapd-0.9.12-x86_64-5.txz: Rebuilt. Recompiled against python3-3.12.7. n/obexftp-0.24.2-x86_64-14.txz: Rebuilt. Recompiled against python3-3.12.7. n/php-8.3.14-x86_64-1.txz: Upgraded. This update fixes security issues: LDAP: Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932) MySQLnd: Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929) PDO DBLIB: Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236) PDO Firebird: Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236) Streams: Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234) Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233) For more information, see: https://www.php.net/ChangeLog-8.php#8.3.14 https://www.cve.org/CVERecord?id=CVE-2024-8932 https://www.cve.org/CVERecord?id=CVE-2024-8929 https://www.cve.org/CVERecord?id=CVE-2024-11236 https://www.cve.org/CVERecord?id=CVE-2024-11234 https://www.cve.org/CVERecord?id=CVE-2024-11233 (* Security fix *) n/pssh-2.3.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. n/samba-4.21.1-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-1.5.31-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-anthy-1.5.16-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-hangul-1.5.5-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-libpinyin-1.15.8-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. x/ibus-table-1.17.8-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. x/marisa-0.2.6-x86_64-12.txz: Rebuilt. Recompiled against python3-3.12.7. x/pyxdg-0.28-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. x/xcb-proto-1.17.0-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. xap/blueman-2.4.3-x86_64-2.txz: Rebuilt. Recompiled against python3-3.12.7. xap/hexchat-2.16.2-x86_64-4.txz: Rebuilt. Recompiled against python3-3.12.7. extra/brltty/brltty-6.7-x86_64-3.txz: Rebuilt. Recompiled against python3-3.12.7. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
2024-11-22 23:08:18 +01:00
SLKCFLAGS="-O2 -march=x86-64 -mtune=generic -fPIC"
Wed Feb 12 05:05:50 UTC 2020 Hey folks! PAM has finally landed in /testing. Some here wanted it to go right into the main tree immediately, and in a more normal development cycle I'd have been inclined to agree (it is -current, after all). But it's probably better for it to appear in /testing first, to make sure we didn't miss any bugs and also to serve as a warning shot that we'll be shaking up the tree pretty good over the next few weeks. I'd like to see this merged into the main tree in a day or two, so any testing is greatly appreciated. Switching to the PAM packages (or reverting from them) is as easy as installing all of them with upgradepkg --install-new, and if reverting then remove the three leftover _pam packages. After reverting, a bit of residue will remain in /etc/pam.d/ and /etc/security/ which can either be manually deleted or simply ignored. While there are many more features available in PAM compared with plain shadow, out of the box about the only noticable change is the use of cracklib and libpwquality to check the quality of a user-supplied password. Hopefully having PAM and krb5 will get us on track to having proper Active Directory integration as well as using code paths that are likely better audited these days. The attack surface *might* be bigger, but it's also a lot better scrutinized. Thanks to Robby Workman and Vincent Batts who did most of the initial heavy lifting on the core PAM packages as a side project for many years. Thanks also to Phantom X whose PAM related SlackBuilds were a valuable reference. And thanks as well to ivandi - I learned a lot from the SlackMATE build scripts and was even occasionally thankful for the amusing ways you would kick my ass on LQ. ;-) You're more than welcome to let us know where we've messed up this time. The binutils and glibc packages in /testing were removed and are off the table for now. I'm not seeing much upside to heading down that rabbit hole at the moment. Next we need to be looking at Xfce 4.14 and Plasma 5.18 LTS and some other things that have been held back since KDE4 couldn't use them. Cheers! :-) a/kernel-generic-5.4.19-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.19-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.19-x86_64-1.txz: Upgraded. a/lvm2-2.03.08-x86_64-1.txz: Upgraded. a/shadow-4.8.1-x86_64-2.txz: Rebuilt. Automatically backup /etc/login.defs and install the new version if incompatible PAM options are detected. d/kernel-headers-5.4.19-x86-1.txz: Upgraded. k/kernel-source-5.4.19-noarch-1.txz: Upgraded. VALIDATE_FS_PARSER y -> n xap/mozilla-thunderbird-68.5.0-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/68.5.0/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6793 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6794 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6797 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6798 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6792 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6800 (* Security fix *) isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/at-3.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cifs-utils-6.10-x86_64-2_pam.txz: Added. testing/packages/PAM/cracklib-2.9.7-x86_64-1_pam.txz: Added. testing/packages/PAM/cups-2.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cyrus-sasl-2.1.27-x86_64-2_pam.txz: Added. testing/packages/PAM/dovecot-2.3.9.2-x86_64-1_pam.txz: Added. testing/packages/PAM/gnome-keyring-3.34.0-x86_64-1_pam.txz: Added. testing/packages/PAM/hplip-3.19.12-x86_64-2_pam.txz: Added. testing/packages/PAM/kde-workspace-4.11.22-x86_64-6_pam.txz: Added. testing/packages/PAM/libcap-2.31-x86_64-1_pam.txz: Added. testing/packages/PAM/libcgroup-0.41-x86_64-5_pam.txz: Added. testing/packages/PAM/libpwquality-1.4.2-x86_64-1_pam.txz: Added. testing/packages/PAM/mariadb-10.4.12-x86_64-1_pam.txz: Added. testing/packages/PAM/netatalk-3.1.12-x86_64-2_pam.txz: Added. testing/packages/PAM/netkit-rsh-0.17-x86_64-2_pam.txz: Added. testing/packages/PAM/openssh-8.1p1-x86_64-1_pam.txz: Added. testing/packages/PAM/openvpn-2.4.8-x86_64-1_pam.txz: Added. testing/packages/PAM/pam-1.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/polkit-0.116-x86_64-1_pam.txz: Added. testing/packages/PAM/popa3d-1.0.3-x86_64-3_pam.txz: Added. testing/packages/PAM/ppp-2.4.7-x86_64-3_pam.txz: Added. testing/packages/PAM/proftpd-1.3.6b-x86_64-1_pam.txz: Added. testing/packages/PAM/samba-4.11.6-x86_64-1_pam.txz: Added. testing/packages/PAM/screen-4.8.0-x86_64-1_pam.txz: Added. testing/packages/PAM/shadow-4.8.1-x86_64-2_pam.txz: Added. testing/packages/PAM/sudo-1.8.31-x86_64-1_pam.txz: Added. testing/packages/PAM/system-config-printer-1.5.12-x86_64-2_pam.txz: Added. testing/packages/PAM/util-linux-2.35.1-x86_64-1_pam.txz: Added. testing/packages/PAM/vsftpd-3.0.3-x86_64-5_pam.txz: Added. testing/packages/PAM/xdm-1.1.11-x86_64-9_pam.txz: Added. testing/packages/PAM/xlockmore-5.62-x86_64-1_pam.txz: Added. testing/packages/PAM/xscreensaver-5.43-x86_64-1_pam.txz: Added. testing/packages/binutils-2.34-x86_64-1.txz: Removed. testing/packages/glibc-2.31-x86_64-1.txz: Removed. testing/packages/glibc-i18n-2.31-x86_64-1.txz: Removed. testing/packages/glibc-profile-2.31-x86_64-1.txz: Removed. testing/packages/glibc-solibs-2.31-x86_64-1.txz: Removed. usb-and-pxe-installers/usbboot.img: Rebuilt.
2020-02-12 06:05:50 +01:00
LIBDIRSUFFIX="64"
else
SLKCFLAGS="-O2"
LIBDIRSUFFIX=""
fi
TMP=${TMP:-/tmp}
PKG=$TMP/package-$PKGNAM
rm -rf $PKG
mkdir -p $TMP $PKG
cd $TMP
rm -rf $PKGNAM-$VERSION
tar xvf $CWD/$PKGNAM-$VERSION.tar.?z || exit 1
cd $PKGNAM-$VERSION || exit 1
chown -R root:root .
find . \
\( -perm 777 -o -perm 775 -o -perm 711 -o -perm 555 -o -perm 511 \) \
-exec chmod 755 {} \+ -o \
\( -perm 666 -o -perm 664 -o -perm 600 -o -perm 444 -o -perm 440 -o -perm 400 \) \
-exec chmod 644 {} \+
# this typo was driving me crazy
sed -i "s/there defaults/their defaults/g" doc/man/pam_pwquality.8*
# Configure, build, and install:
CFLAGS="$SLKCFLAGS" \
CXXFLAGS="$SLKCFLAGS" \
./configure \
--prefix=/usr \
--libdir=/usr/lib${LIBDIRSUFFIX} \
--sysconfdir=/etc \
--localstatedir=/var \
--docdir=/usr/doc/$PKGNAM-$VERSION \
--mandir=/usr/man \
--infodir=/usr/info \
--disable-static \
Sat Feb 15 22:57:25 UTC 2020 a/libcgroup-0.41-x86_64-6.txz: Rebuilt. ap/mariadb-10.4.12-x86_64-2.txz: Rebuilt. d/Cython-0.29.15-x86_64-1.txz: Upgraded. d/cmake-3.16.4-x86_64-2.txz: Rebuilt. Recompiled against qt5-5.13.2. d/doxygen-1.8.17-x86_64-2.txz: Rebuilt. Recompiled against qt5-5.13.2. l/ConsoleKit2-1.2.1-x86_64-3.txz: Rebuilt. l/gnome-keyring-3.34.0-x86_64-2.txz: Rebuilt. l/imagemagick-7.0.9_23-x86_64-1.txz: Upgraded. l/polkit-0.116-x86_64-2.txz: Rebuilt. l/python-future-0.18.2-x86_64-1.txz: Added. This is needed by fetchmailconf and will probably see additional use as projects jump off of the sinking Python 2 ship. l/v4l-utils-1.18.0-x86_64-2.txz: Rebuilt. Recompiled against qt5-5.13.2. n/cifs-utils-6.10-x86_64-3.txz: Rebuilt. n/fetchmail-6.4.2-x86_64-1.txz: Upgraded. n/pinentry-1.1.0-x86_64-3.txz: Rebuilt. Recompiled against qt5-5.13.2. n/samba-4.11.6-x86_64-2.txz: Rebuilt. n/wpa_supplicant-2.9-x86_64-2.txz: Rebuilt. Recompiled against qt5-5.13.2. xap/xpdf-4.02-x86_64-3.txz: Rebuilt. Recompiled against qt5-5.13.2. testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-3_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. Remove .la files in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/cifs-utils-6.10-x86_64-3_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/gnome-keyring-3.34.0-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. Remove .la files in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/libcgroup-0.41-x86_64-6_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. Remove .la files in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/libpwquality-1.4.2-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. Remove .la files in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/mariadb-10.4.12-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/pam-1.3.1-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security to support multilib. Thanks to GazL. testing/packages/PAM/polkit-0.116-x86_64-2_pam.txz: Rebuilt. Rebuilt using --with-pam-module-dir=/lib${LIBDIRSUFFIX}/security. testing/packages/PAM/samba-4.11.6-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security.
2020-02-15 23:57:25 +01:00
--with-securedir=/lib${LIBDIRSUFFIX}/security \
Wed Feb 12 05:05:50 UTC 2020 Hey folks! PAM has finally landed in /testing. Some here wanted it to go right into the main tree immediately, and in a more normal development cycle I'd have been inclined to agree (it is -current, after all). But it's probably better for it to appear in /testing first, to make sure we didn't miss any bugs and also to serve as a warning shot that we'll be shaking up the tree pretty good over the next few weeks. I'd like to see this merged into the main tree in a day or two, so any testing is greatly appreciated. Switching to the PAM packages (or reverting from them) is as easy as installing all of them with upgradepkg --install-new, and if reverting then remove the three leftover _pam packages. After reverting, a bit of residue will remain in /etc/pam.d/ and /etc/security/ which can either be manually deleted or simply ignored. While there are many more features available in PAM compared with plain shadow, out of the box about the only noticable change is the use of cracklib and libpwquality to check the quality of a user-supplied password. Hopefully having PAM and krb5 will get us on track to having proper Active Directory integration as well as using code paths that are likely better audited these days. The attack surface *might* be bigger, but it's also a lot better scrutinized. Thanks to Robby Workman and Vincent Batts who did most of the initial heavy lifting on the core PAM packages as a side project for many years. Thanks also to Phantom X whose PAM related SlackBuilds were a valuable reference. And thanks as well to ivandi - I learned a lot from the SlackMATE build scripts and was even occasionally thankful for the amusing ways you would kick my ass on LQ. ;-) You're more than welcome to let us know where we've messed up this time. The binutils and glibc packages in /testing were removed and are off the table for now. I'm not seeing much upside to heading down that rabbit hole at the moment. Next we need to be looking at Xfce 4.14 and Plasma 5.18 LTS and some other things that have been held back since KDE4 couldn't use them. Cheers! :-) a/kernel-generic-5.4.19-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.19-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.19-x86_64-1.txz: Upgraded. a/lvm2-2.03.08-x86_64-1.txz: Upgraded. a/shadow-4.8.1-x86_64-2.txz: Rebuilt. Automatically backup /etc/login.defs and install the new version if incompatible PAM options are detected. d/kernel-headers-5.4.19-x86-1.txz: Upgraded. k/kernel-source-5.4.19-noarch-1.txz: Upgraded. VALIDATE_FS_PARSER y -> n xap/mozilla-thunderbird-68.5.0-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/68.5.0/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6793 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6794 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6797 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6798 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6792 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6800 (* Security fix *) isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/at-3.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cifs-utils-6.10-x86_64-2_pam.txz: Added. testing/packages/PAM/cracklib-2.9.7-x86_64-1_pam.txz: Added. testing/packages/PAM/cups-2.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cyrus-sasl-2.1.27-x86_64-2_pam.txz: Added. testing/packages/PAM/dovecot-2.3.9.2-x86_64-1_pam.txz: Added. testing/packages/PAM/gnome-keyring-3.34.0-x86_64-1_pam.txz: Added. testing/packages/PAM/hplip-3.19.12-x86_64-2_pam.txz: Added. testing/packages/PAM/kde-workspace-4.11.22-x86_64-6_pam.txz: Added. testing/packages/PAM/libcap-2.31-x86_64-1_pam.txz: Added. testing/packages/PAM/libcgroup-0.41-x86_64-5_pam.txz: Added. testing/packages/PAM/libpwquality-1.4.2-x86_64-1_pam.txz: Added. testing/packages/PAM/mariadb-10.4.12-x86_64-1_pam.txz: Added. testing/packages/PAM/netatalk-3.1.12-x86_64-2_pam.txz: Added. testing/packages/PAM/netkit-rsh-0.17-x86_64-2_pam.txz: Added. testing/packages/PAM/openssh-8.1p1-x86_64-1_pam.txz: Added. testing/packages/PAM/openvpn-2.4.8-x86_64-1_pam.txz: Added. testing/packages/PAM/pam-1.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/polkit-0.116-x86_64-1_pam.txz: Added. testing/packages/PAM/popa3d-1.0.3-x86_64-3_pam.txz: Added. testing/packages/PAM/ppp-2.4.7-x86_64-3_pam.txz: Added. testing/packages/PAM/proftpd-1.3.6b-x86_64-1_pam.txz: Added. testing/packages/PAM/samba-4.11.6-x86_64-1_pam.txz: Added. testing/packages/PAM/screen-4.8.0-x86_64-1_pam.txz: Added. testing/packages/PAM/shadow-4.8.1-x86_64-2_pam.txz: Added. testing/packages/PAM/sudo-1.8.31-x86_64-1_pam.txz: Added. testing/packages/PAM/system-config-printer-1.5.12-x86_64-2_pam.txz: Added. testing/packages/PAM/util-linux-2.35.1-x86_64-1_pam.txz: Added. testing/packages/PAM/vsftpd-3.0.3-x86_64-5_pam.txz: Added. testing/packages/PAM/xdm-1.1.11-x86_64-9_pam.txz: Added. testing/packages/PAM/xlockmore-5.62-x86_64-1_pam.txz: Added. testing/packages/PAM/xscreensaver-5.43-x86_64-1_pam.txz: Added. testing/packages/binutils-2.34-x86_64-1.txz: Removed. testing/packages/glibc-2.31-x86_64-1.txz: Removed. testing/packages/glibc-i18n-2.31-x86_64-1.txz: Removed. testing/packages/glibc-profile-2.31-x86_64-1.txz: Removed. testing/packages/glibc-solibs-2.31-x86_64-1.txz: Removed. usb-and-pxe-installers/usbboot.img: Rebuilt.
2020-02-12 06:05:50 +01:00
--with-python-binary=python3 \
--build=$ARCH-slackware-linux || exit 1
make $NUMJOBS || make || exit 1
make install DESTDIR=$PKG || exit 1
# Don't ship .la files:
rm -f $PKG/{,usr/}lib${LIBDIRSUFFIX}/*.la
Sat Feb 15 22:57:25 UTC 2020 a/libcgroup-0.41-x86_64-6.txz: Rebuilt. ap/mariadb-10.4.12-x86_64-2.txz: Rebuilt. d/Cython-0.29.15-x86_64-1.txz: Upgraded. d/cmake-3.16.4-x86_64-2.txz: Rebuilt. Recompiled against qt5-5.13.2. d/doxygen-1.8.17-x86_64-2.txz: Rebuilt. Recompiled against qt5-5.13.2. l/ConsoleKit2-1.2.1-x86_64-3.txz: Rebuilt. l/gnome-keyring-3.34.0-x86_64-2.txz: Rebuilt. l/imagemagick-7.0.9_23-x86_64-1.txz: Upgraded. l/polkit-0.116-x86_64-2.txz: Rebuilt. l/python-future-0.18.2-x86_64-1.txz: Added. This is needed by fetchmailconf and will probably see additional use as projects jump off of the sinking Python 2 ship. l/v4l-utils-1.18.0-x86_64-2.txz: Rebuilt. Recompiled against qt5-5.13.2. n/cifs-utils-6.10-x86_64-3.txz: Rebuilt. n/fetchmail-6.4.2-x86_64-1.txz: Upgraded. n/pinentry-1.1.0-x86_64-3.txz: Rebuilt. Recompiled against qt5-5.13.2. n/samba-4.11.6-x86_64-2.txz: Rebuilt. n/wpa_supplicant-2.9-x86_64-2.txz: Rebuilt. Recompiled against qt5-5.13.2. xap/xpdf-4.02-x86_64-3.txz: Rebuilt. Recompiled against qt5-5.13.2. testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-3_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. Remove .la files in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/cifs-utils-6.10-x86_64-3_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/gnome-keyring-3.34.0-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. Remove .la files in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/libcgroup-0.41-x86_64-6_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. Remove .la files in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/libpwquality-1.4.2-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. Remove .la files in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/mariadb-10.4.12-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/pam-1.3.1-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security to support multilib. Thanks to GazL. testing/packages/PAM/polkit-0.116-x86_64-2_pam.txz: Rebuilt. Rebuilt using --with-pam-module-dir=/lib${LIBDIRSUFFIX}/security. testing/packages/PAM/samba-4.11.6-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security.
2020-02-15 23:57:25 +01:00
# The ones in /lib${LIBDIRSUFFIX}/security can also go:
rm -f $PKG/lib${LIBDIRSUFFIX}/security/*.la
Wed Feb 12 05:05:50 UTC 2020 Hey folks! PAM has finally landed in /testing. Some here wanted it to go right into the main tree immediately, and in a more normal development cycle I'd have been inclined to agree (it is -current, after all). But it's probably better for it to appear in /testing first, to make sure we didn't miss any bugs and also to serve as a warning shot that we'll be shaking up the tree pretty good over the next few weeks. I'd like to see this merged into the main tree in a day or two, so any testing is greatly appreciated. Switching to the PAM packages (or reverting from them) is as easy as installing all of them with upgradepkg --install-new, and if reverting then remove the three leftover _pam packages. After reverting, a bit of residue will remain in /etc/pam.d/ and /etc/security/ which can either be manually deleted or simply ignored. While there are many more features available in PAM compared with plain shadow, out of the box about the only noticable change is the use of cracklib and libpwquality to check the quality of a user-supplied password. Hopefully having PAM and krb5 will get us on track to having proper Active Directory integration as well as using code paths that are likely better audited these days. The attack surface *might* be bigger, but it's also a lot better scrutinized. Thanks to Robby Workman and Vincent Batts who did most of the initial heavy lifting on the core PAM packages as a side project for many years. Thanks also to Phantom X whose PAM related SlackBuilds were a valuable reference. And thanks as well to ivandi - I learned a lot from the SlackMATE build scripts and was even occasionally thankful for the amusing ways you would kick my ass on LQ. ;-) You're more than welcome to let us know where we've messed up this time. The binutils and glibc packages in /testing were removed and are off the table for now. I'm not seeing much upside to heading down that rabbit hole at the moment. Next we need to be looking at Xfce 4.14 and Plasma 5.18 LTS and some other things that have been held back since KDE4 couldn't use them. Cheers! :-) a/kernel-generic-5.4.19-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.19-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.19-x86_64-1.txz: Upgraded. a/lvm2-2.03.08-x86_64-1.txz: Upgraded. a/shadow-4.8.1-x86_64-2.txz: Rebuilt. Automatically backup /etc/login.defs and install the new version if incompatible PAM options are detected. d/kernel-headers-5.4.19-x86-1.txz: Upgraded. k/kernel-source-5.4.19-noarch-1.txz: Upgraded. VALIDATE_FS_PARSER y -> n xap/mozilla-thunderbird-68.5.0-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/68.5.0/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6793 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6794 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6797 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6798 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6792 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6800 (* Security fix *) isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/at-3.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cifs-utils-6.10-x86_64-2_pam.txz: Added. testing/packages/PAM/cracklib-2.9.7-x86_64-1_pam.txz: Added. testing/packages/PAM/cups-2.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cyrus-sasl-2.1.27-x86_64-2_pam.txz: Added. testing/packages/PAM/dovecot-2.3.9.2-x86_64-1_pam.txz: Added. testing/packages/PAM/gnome-keyring-3.34.0-x86_64-1_pam.txz: Added. testing/packages/PAM/hplip-3.19.12-x86_64-2_pam.txz: Added. testing/packages/PAM/kde-workspace-4.11.22-x86_64-6_pam.txz: Added. testing/packages/PAM/libcap-2.31-x86_64-1_pam.txz: Added. testing/packages/PAM/libcgroup-0.41-x86_64-5_pam.txz: Added. testing/packages/PAM/libpwquality-1.4.2-x86_64-1_pam.txz: Added. testing/packages/PAM/mariadb-10.4.12-x86_64-1_pam.txz: Added. testing/packages/PAM/netatalk-3.1.12-x86_64-2_pam.txz: Added. testing/packages/PAM/netkit-rsh-0.17-x86_64-2_pam.txz: Added. testing/packages/PAM/openssh-8.1p1-x86_64-1_pam.txz: Added. testing/packages/PAM/openvpn-2.4.8-x86_64-1_pam.txz: Added. testing/packages/PAM/pam-1.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/polkit-0.116-x86_64-1_pam.txz: Added. testing/packages/PAM/popa3d-1.0.3-x86_64-3_pam.txz: Added. testing/packages/PAM/ppp-2.4.7-x86_64-3_pam.txz: Added. testing/packages/PAM/proftpd-1.3.6b-x86_64-1_pam.txz: Added. testing/packages/PAM/samba-4.11.6-x86_64-1_pam.txz: Added. testing/packages/PAM/screen-4.8.0-x86_64-1_pam.txz: Added. testing/packages/PAM/shadow-4.8.1-x86_64-2_pam.txz: Added. testing/packages/PAM/sudo-1.8.31-x86_64-1_pam.txz: Added. testing/packages/PAM/system-config-printer-1.5.12-x86_64-2_pam.txz: Added. testing/packages/PAM/util-linux-2.35.1-x86_64-1_pam.txz: Added. testing/packages/PAM/vsftpd-3.0.3-x86_64-5_pam.txz: Added. testing/packages/PAM/xdm-1.1.11-x86_64-9_pam.txz: Added. testing/packages/PAM/xlockmore-5.62-x86_64-1_pam.txz: Added. testing/packages/PAM/xscreensaver-5.43-x86_64-1_pam.txz: Added. testing/packages/binutils-2.34-x86_64-1.txz: Removed. testing/packages/glibc-2.31-x86_64-1.txz: Removed. testing/packages/glibc-i18n-2.31-x86_64-1.txz: Removed. testing/packages/glibc-profile-2.31-x86_64-1.txz: Removed. testing/packages/glibc-solibs-2.31-x86_64-1.txz: Removed. usb-and-pxe-installers/usbboot.img: Rebuilt.
2020-02-12 06:05:50 +01:00
mv $PKG/etc/security/pwquality.conf $PKG/etc/security/pwquality.conf.new
# Strip binaries:
find $PKG | xargs file | grep -e "executable" -e "shared object" | grep ELF | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null
# Compress manual pages:
find $PKG/usr/man -type f -exec gzip -9 {} \+
for i in $( find $PKG/usr/man -type l ) ; do
ln -s $( readlink $i ).gz $i.gz
rm $i
done
# Add a documentation directory:
mkdir -p $PKG/usr/doc/${PKGNAM}-$VERSION
cp -a \
AUTHORS* ChangeLog COPYING* NEWS* README* \
$PKG/usr/doc/${PKGNAM}-$VERSION
# If there's a ChangeLog, installing at least part of the recent history
# is useful, but don't let it get totally out of control:
if [ -r ChangeLog ]; then
DOCSDIR=$(echo $PKG/usr/doc/${PKGNAM}-$VERSION)
cat ChangeLog | head -n 1000 > $DOCSDIR/ChangeLog
touch -r ChangeLog $DOCSDIR/ChangeLog
fi
mkdir -p $PKG/install
zcat $CWD/doinst.sh.gz > $PKG/install/doinst.sh
cat $CWD/slack-desc > $PKG/install/slack-desc
cd $PKG
/sbin/makepkg -l y -c n $TMP/$PKGNAM-$VERSION-$ARCH-$BUILD.txz