Commit graph

4 commits

Author SHA1 Message Date
Patrick J Volkerding
ca24bdf217 Tue Dec 1 20:18:01 UTC 2020
a/hwdata-0.342-noarch-1.txz:  Upgraded.
a/pam-1.5.1-x86_64-1.txz:  Upgraded.
ap/sqlite-3.34.0-x86_64-1.txz:  Upgraded.
l/libarchive-3.5.0-x86_64-1.txz:  Upgraded.
x/fontconfig-2.13.92-x86_64-1.txz:  Upgraded.
  I'm pretty sure there was a good reason to switch to 2.13.92 on the devel
  release path, but I'm not sure the same can be said about 2.13.93. We'll
  stick with this one for now until there's a stable release or another good
  reason to bump it.
x/xorg-server-1.20.10-x86_64-1.txz:  Upgraded.
x/xorg-server-xephyr-1.20.10-x86_64-1.txz:  Upgraded.
x/xorg-server-xnest-1.20.10-x86_64-1.txz:  Upgraded.
x/xorg-server-xvfb-1.20.10-x86_64-1.txz:  Upgraded.
x/xorg-server-xwayland-1.20.10-x86_64-1.txz:  Upgraded.
xap/gnuplot-5.4.1-x86_64-1.txz:  Upgraded.
2020-12-02 08:59:56 +01:00
Patrick J Volkerding
f85cda2ade Tue Oct 20 21:58:52 UTC 2020
a/aaa_elflibs-15.0-x86_64-24.txz:  Rebuilt.
  Don't skip this one as it contains the libnsl-2.30.so built by glibc that
  it's likely many third-party packages will be linking to for some time.
  Upgraded: libcap.so.2.44, libelf-0.181.so, libpopt.so.0.0.1,
  libcurl.so.4.7.0, libexpat.so.1.6.12, libglib-2.0.so.0.6600.2,
  libgmodule-2.0.so.0.6600.2, libgobject-2.0.so.0.6600.2,
  libgthread-2.0.so.0.6600.2, libidn.so.12.6.1, liblber-2.4.so.2.11.2,
  libldap-2.4.so.2.11.2, libmpc.so.3.2.0, libmpfr.so.6.1.0, libpsl.so.5.3.3.
  Added: libnsl-2.30.so, libnsl.so.2.0.1.
  Removed: libdvdread.so.4.2.0, libicudata.so.65.1, libicui18n.so.65.1,
  libicuio.so.65.1, libicutest.so.65.1, libicutu.so.65.1, libicuuc.so.65.1.
a/glibc-solibs-2.30-x86_64-2.txz:  Rebuilt.
a/pam-1.4.0-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
a/quota-4.05-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
a/xfsprogs-5.9.0-x86_64-1.txz:  Upgraded.
ap/linuxdoc-tools-0.9.73-x86_64-6.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
ap/vorbis-tools-1.4.0-x86_64-5.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
d/cvs-1.11.23-x86_64-5.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
d/git-2.29.0-x86_64-1.txz:  Upgraded.
d/perl-5.32.0-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
d/python2-2.7.18-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
d/python3-3.8.6-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
d/rcs-5.10.0-x86_64-1.txz:  Upgraded.
d/subversion-1.14.0-x86_64-3.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
kde/kdelibs-4.14.38-x86_64-7.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
kde/kopete-4.14.3-x86_64-9.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
kde/perlkde-4.14.3-x86_64-10.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
kde/perlqt-4.14.3-x86_64-11.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
l/freetype-2.10.4-x86_64-1.txz:  Upgraded.
  Fix heap buffer overflow in embedded PNG bitmap handling.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999
  (* Security fix *)
l/glibc-2.30-x86_64-2.txz:  Rebuilt.
  Rebuilt without the --enable-obsolete-nsl and --enable-obsolete-rpc options.
  This change has been somewhat overdue, but since glibc was providing these
  options we just continued to use them here - however, newer versions of
  glibc have dropped this code entirely and it is expected to be provided in
  standalone packages. So we'll do that to make things easier moving forward.
  Please note that libnss_nisplus has been unmaintained upstream for quite
  some time, is considered obsolete, and no longer compiles. As a result it
  will no longer be provided... but there are better options these days.
l/glibc-i18n-2.30-x86_64-2.txz:  Rebuilt.
l/glibc-profile-2.30-x86_64-2.txz:  Rebuilt.
l/gmime-3.2.7-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
l/libasyncns-0.8-x86_64-3.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
l/libnsl-1.3.0-x86_64-1.txz:  Added.
  This provides the standalone libnsl.
  Shared library .so-version bump.
l/libnss_nis-3.1-x86_64-1.txz:  Added.
l/loudmouth-1.5.3-x86_64-5.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
l/rpcsvc-proto-1.4.2-x86_64-1.txz:  Added.
n/autofs-5.1.6-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/epic5-2.1.2-x86_64-3.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/irssi-1.2.2-x86_64-4.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/net-snmp-5.9-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/netatalk-3.1.12-x86_64-4.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/ntp-4.2.8p15-x86_64-3.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/openldap-2.4.54-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/openssh-8.4p1-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/openvpn-2.4.9-x86_64-3.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/postfix-3.5.7-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/ppp-2.4.8-x86_64-3.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/procmail-3.22-x86_64-4.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/proftpd-1.3.7a-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/rpcbind-1.2.5-x86_64-3.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/samba-4.13.0-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/socat-1.7.3.4-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/stunnel-5.57-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/tcp_wrappers-7.6-x86_64-3.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/tftp-hpa-5.2-x86_64-6.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/uucp-1.07-x86_64-3.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/vsftpd-3.0.3-x86_64-7.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
n/yptools-4.2.3-x86_64-1.txz:  Upgraded.
  Compiled against libnsl-1.3.0.
xap/gftp-2.0.19-x86_64-9.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
xap/pidgin-2.14.1-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
xap/rxvt-unicode-9.22-x86_64-9.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
xap/xine-lib-1.2.10-x86_64-3.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
xap/xine-ui-0.99.12-x86_64-2.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
extra/pure-alsa-system/xine-lib-1.2.10-x86_64-3_alsa.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
extra/sendmail/sendmail-8.16.1-x86_64-3.txz:  Rebuilt.
  Recompiled against libnsl-1.3.0.
extra/sendmail/sendmail-cf-8.16.1-noarch-3.txz:  Rebuilt.
2020-10-21 08:59:58 +02:00
Patrick J Volkerding
0959f2bb54 Sat Jun 13 20:40:31 UTC 2020
a/pam-1.4.0-x86_64-1.txz:  Upgraded.
  IMPORTANT NOTE: This update removes the pam_cracklib and pam_tally2 modules.
  None of our current configuration files in /etc/pam.d/ use either of those,
  but if the configuration files on your machine do you'll need to comment out
  or remove those lines, otherwise you may experience login failures.
a/shadow-4.8.1-x86_64-9.txz:  Rebuilt.
  /etc/pam.d/system-auth: prefix lines that call pam_gnome_keyring.so with '-'
  to avoid spamming the logs about failures.
a/sysvinit-scripts-2.1-noarch-32.txz:  Rebuilt.
  rc.S: create /var/run/faillock directory for pam_faillock(8).
a/util-linux-2.35.2-x86_64-2.txz:  Rebuilt.
  /etc/pam.d/login: change the example for locking an account for too many
  failed login attempts to use pam_faillock instead of pam_tally2.
l/imagemagick-7.0.10_19-x86_64-1.txz:  Upgraded.
l/libzip-1.7.1-x86_64-1.txz:  Upgraded.
n/openssh-8.3p1-x86_64-2.txz:  Rebuilt.
  /etc/pam.d/sshd: change the example for locking an account for too many
  failed login attempts to use pam_faillock instead of pam_tally2.
2020-06-14 08:59:53 +02:00
Patrick J Volkerding
ffef56590d Mon May 18 19:17:21 UTC 2020
Greetings! After three months in /testing, the PAM merge into the main tree
is now complete. When updating, be sure to install the new pam, cracklib, and
libpwquality packages or you may find yourself locked out of your machine.
Otherwise, these changes should be completely transparent and you shouldn't
notice any obvious operational differences. Be careful if you make any changes
in /etc/pam.d/ - leaving an extra console logged in while testing PAM config
changes is a recommended standard procedure. Thanks again to Robby Workman,
Vincent Batts, Phantom X, and ivandi for help implementing this. It's not
done yet and there will be more fine-tuning of the config files, but now we
can move on to build some other updates. Enjoy!
a/cracklib-2.9.7-x86_64-1.txz:  Added.
a/kernel-firmware-20200517_f8d32e4-noarch-1.txz:  Upgraded.
a/libcgroup-0.41-x86_64-7.txz:  Rebuilt.
  Rebuilt to add PAM support.
a/libpwquality-1.4.2-x86_64-1.txz:  Added.
a/lilo-24.2-x86_64-9.txz:  Rebuilt.
  Enable the "compact" option by default.
  liloconfig: correctly set the root partition.
a/pam-1.3.1-x86_64-1.txz:  Added.
a/shadow-4.8.1-x86_64-7.txz:  Rebuilt.
  Rebuilt to add PAM support.
a/utempter-1.2.0-x86_64-1.txz:  Upgraded.
a/util-linux-2.35.1-x86_64-6.txz:  Rebuilt.
  Rebuilt to add PAM support.
a/xfsprogs-5.6.0-x86_64-2.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
ap/at-3.2.1-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
ap/cups-2.3.3-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
ap/hplip-3.20.5-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
ap/mariadb-10.4.13-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
ap/screen-4.8.0-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
ap/soma-3.3.0-noarch-1.txz:  Upgraded.
  Thanks to David Woodfall.
ap/sqlite-3.31.1-x86_64-2.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
ap/sudo-1.9.0-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
ap/vim-8.2.0788-x86_64-1.txz:  Upgraded.
d/bison-3.6.2-x86_64-1.txz:  Upgraded.
d/meson-0.54.2-x86_64-1.txz:  Upgraded.
d/python-setuptools-46.4.0-x86_64-1.txz:  Upgraded.
d/vala-0.48.6-x86_64-1.txz:  Upgraded.
kde/calligra-2.9.11-x86_64-36.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
kde/kde-workspace-4.11.22-x86_64-7.txz:  Rebuilt.
  Rebuilt to add PAM support.
l/ConsoleKit2-1.2.1-x86_64-4.txz:  Rebuilt.
  Rebuilt to add PAM support.
l/boost-1.73.0-x86_64-2.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
l/gnome-keyring-3.36.0-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
l/harfbuzz-2.6.6-x86_64-2.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
l/icu4c-67.1-x86_64-1.txz:  Upgraded.
  Shared library .so-version bump.
l/imagemagick-7.0.10_13-x86_64-1.txz:  Upgraded.
l/libcap-2.34-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
l/libical-3.0.8-x86_64-2.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
l/libuv-1.38.0-x86_64-1.txz:  Upgraded.
l/libvisio-0.1.7-x86_64-3.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
l/polkit-0.116-x86_64-3.txz:  Rebuilt.
  Rebuilt to add PAM support.
l/qt-4.8.7-x86_64-16.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
l/qt5-5.13.2-x86_64-4.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
l/qt5-webkit-5.212.0_alpha4-x86_64-2.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
l/raptor2-2.0.15-x86_64-9.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
l/system-config-printer-1.5.12-x86_64-4.txz:  Rebuilt.
  Rebuilt to add PAM support.
l/vte-0.60.2-x86_64-2.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
n/cifs-utils-6.10-x86_64-4.txz:  Rebuilt.
  Rebuilt to add PAM support.
n/cyrus-sasl-2.1.27-x86_64-4.txz:  Rebuilt.
  Rebuilt to add PAM support.
n/dovecot-2.3.10.1-x86_64-1.txz:  Upgraded.
  Rebuilt to add PAM support.
  Compiled against icu4c-67.1.
  This update fixes several denial-of-service vulnerabilities.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10957
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10958
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10967
  (* Security fix *)
n/mutt-1.14.1-x86_64-1.txz:  Upgraded.
n/netatalk-3.1.12-x86_64-3.txz:  Rebuilt.
  Rebuilt to add PAM support.
n/netkit-rsh-0.17-x86_64-3.txz:  Rebuilt.
  Rebuilt to add PAM support.
n/nss-pam-ldapd-0.9.11-x86_64-1.txz:  Added.
n/openssh-8.2p1-x86_64-3.txz:  Rebuilt.
  Rebuilt to add PAM support.
n/openvpn-2.4.9-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
n/pam-krb5-4.9-x86_64-1.txz:  Added.
n/php-7.4.6-x86_64-2.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
n/popa3d-1.0.3-x86_64-4.txz:  Rebuilt.
  Rebuilt to add PAM support.
n/postfix-3.5.2-x86_64-1.txz:  Upgraded.
  Compiled against icu4c-67.1.
n/ppp-2.4.8-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
n/proftpd-1.3.6c-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
n/samba-4.12.2-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
  Recompiled against icu4c-67.1.
n/tin-2.4.4-x86_64-2.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
n/vsftpd-3.0.3-x86_64-6.txz:  Rebuilt.
  Rebuilt to add PAM support.
t/texlive-2019.190626-x86_64-4.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
x/vulkan-sdk-1.2.135.0-x86_64-1.txz:  Upgraded.
x/xdm-1.1.11-x86_64-10.txz:  Rebuilt.
  Rebuilt to add PAM support.
x/xisxwayland-1-x86_64-1.txz:  Added.
xap/sane-1.0.30-x86_64-1.txz:  Upgraded.
  This update fixes several security issues.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12867
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12862
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12863
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12865
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12866
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12861
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12864
  (* Security fix *)
xap/vim-gvim-8.2.0788-x86_64-1.txz:  Upgraded.
xap/xlockmore-5.63-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
xap/xscreensaver-5.44-x86_64-2.txz:  Rebuilt.
  Rebuilt to add PAM support.
extra/brltty/brltty-6.1-x86_64-2.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
extra/pure-alsa-system/qt5-5.13.2-x86_64-4_alsa.txz:  Rebuilt.
  Recompiled against icu4c-67.1.
isolinux/initrd.img:  Rebuilt.
  Added PAM libraries, security modules, and config files.
usb-and-pxe-installers/usbboot.img:  Rebuilt.
  Added PAM libraries, security modules, and config files.
2020-05-18 23:25:14 +02:00