mirror of
git://slackware.nl/current.git
synced 2024-12-28 09:59:53 +01:00
aaa6bb3264
a/pam-1.5.3-x86_64-1.txz: Upgraded.
ap/cups-filters-1.28.17-x86_64-2.txz: Rebuilt.
[PATCH] Merge pull request from GHSA-gpxc-v2m8-fr3x.
With execv() command line arguments are passed as separate strings and
not the full command line in a single string. This prevents arbitrary
command execution by escaping the quoting of the arguments in a job
with forged job title.
Thanks to marav.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-24805
(* Security fix *)
ap/vim-9.0.1569-x86_64-1.txz: Upgraded.
xap/vim-gvim-9.0.1569-x86_64-1.txz: Upgraded.
95 lines
5 KiB
Diff
95 lines
5 KiB
Diff
--- ./doc/sag/pam_faillock.xml.orig 2023-05-19 13:22:11.197977808 -0500
|
|
+++ ./doc/sag/pam_faillock.xml 2023-05-19 13:24:39.673969595 -0500
|
|
@@ -1,27 +1,38 @@
|
|
-<section xmlns="http://docbook.org/ns/docbook" version="5.0" xml:id="sag-pam_faillock">
|
|
+<?xml version='1.0' encoding='UTF-8'?>
|
|
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
|
|
+ "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd">
|
|
+<section id='sag-pam_faillock'>
|
|
<title>pam_faillock - temporarily locking access based on failed authentication attempts during an interval</title>
|
|
- <cmdsynopsis sepchar=" ">
|
|
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(id("pam_faillock-cmdsynopsisauth")/*)'/>
|
|
+ <cmdsynopsis>
|
|
+ <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
+ href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(//cmdsynopsis[@id = "pam_faillock-cmdsynopsisauth"]/*)'/>
|
|
</cmdsynopsis>
|
|
- <cmdsynopsis sepchar=" ">
|
|
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(id("pam_faillock-cmdsynopsisacct")/*)'/>
|
|
+ <cmdsynopsis>
|
|
+ <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
+ href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(//cmdsynopsis[@id = "pam_faillock-cmdsynopsisacct"]/*)'/>
|
|
</cmdsynopsis>
|
|
- <section xml:id="sag-pam_faillock-description">
|
|
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(id("pam_faillock-description")/*)'/>
|
|
+ <section id='sag-pam_faillock-description'>
|
|
+ <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
+ href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(//refsect1[@id = "pam_faillock-description"]/*)'/>
|
|
+ </section>
|
|
+ <section id='sag-pam_faillock-options'>
|
|
+ <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
+ href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(//refsect1[@id = "pam_faillock-options"]/*)'/>
|
|
+ </section>
|
|
+ <section id='sag-pam_faillock-types'>
|
|
+ <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
+ href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(//refsect1[@id = "pam_faillock-types"]/*)'/>
|
|
+ </section>
|
|
+ <section id='sag-pam_faillock-return_values'>
|
|
+ <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
+ href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(//refsect1[@id = "pam_faillock-return_values"]/*)'/>
|
|
+ </section>
|
|
+ <section id='sag-pam_faillock-examples'>
|
|
+ <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
+ href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(//refsect1[@id = "pam_faillock-examples"]/*)'/>
|
|
+ </section>
|
|
+ <section id='sag-pam_faillock-author'>
|
|
+ <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
+ href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(//refsect1[@id = "pam_faillock-author"]/*)'/>
|
|
</section>
|
|
- <section xml:id="sag-pam_faillock-options">
|
|
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(id("pam_faillock-options")/*)'/>
|
|
- </section>
|
|
- <section xml:id="sag-pam_faillock-types">
|
|
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(id("pam_faillock-types")/*)'/>
|
|
- </section>
|
|
- <section xml:id="sag-pam_faillock-return_values">
|
|
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(id("pam_faillock-return_values")/*)'/>
|
|
- </section>
|
|
- <section xml:id="sag-pam_faillock-examples">
|
|
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(id("pam_faillock-examples")/*)'/>
|
|
- </section>
|
|
- <section xml:id="sag-pam_faillock-author">
|
|
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(id("pam_faillock-author")/*)'/>
|
|
- </section>
|
|
-</section>
|
|
\ No newline at end of file
|
|
+</section>
|
|
--- ./configure.ac.orig 2023-05-07 18:06:47.000000000 -0500
|
|
+++ ./configure.ac 2023-05-19 13:22:11.198977808 -0500
|
|
@@ -754,6 +754,8 @@
|
|
po/Makefile.in \
|
|
Make.xml.rules \
|
|
modules/Makefile \
|
|
+ modules/pam_chroot/Makefile modules/pam_console/Makefile \
|
|
+ modules/pam_postgresok/Makefile \
|
|
modules/pam_access/Makefile \
|
|
modules/pam_debug/Makefile modules/pam_deny/Makefile \
|
|
modules/pam_echo/Makefile modules/pam_env/Makefile \
|
|
--- ./modules/Makefile.am.orig 2023-05-07 18:06:47.000000000 -0500
|
|
+++ ./modules/Makefile.am 2023-05-19 13:22:11.198977808 -0500
|
|
@@ -44,6 +44,8 @@
|
|
|
|
SUBDIRS := \
|
|
pam_access \
|
|
+ pam_chroot \
|
|
+ pam_console \
|
|
pam_debug \
|
|
pam_deny \
|
|
pam_echo \
|
|
@@ -67,6 +69,7 @@
|
|
$(MAYBE_PAM_NAMESPACE) \
|
|
pam_nologin \
|
|
pam_permit \
|
|
+ pam_postgresok \
|
|
pam_pwhistory \
|
|
$(MAYBE_PAM_RHOSTS) \
|
|
pam_rootok \
|