| 1 |
ulm 13/08/28 06:00:25 |
| 2 |
|
| 3 |
Modified: ChangeLog |
| 4 |
Added: pam_skey-1.1.5-r5.ebuild |
| 5 |
Removed: pam_skey-1.1.5-r3.ebuild pam_skey-1.1.5-r4.ebuild |
| 6 |
Log: |
| 7 |
Erase cleartext passwords from memory, fixes security bug 482588, CVE-2013-4285. Committing with stable keywords, thanks to Agostino Sarubbo for testing on amd64 and x86. Remove vulnerable versions. |
| 8 |
|
| 9 |
(Portage version: 2.2.1/cvs/Linux x86_64, RepoMan options: --force, signed Manifest commit with key 9433907D693FB5B8!) |
| 10 |
|
| 11 |
Revision Changes Path |
| 12 |
1.24 sys-auth/pam_skey/ChangeLog |
| 13 |
|
| 14 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-auth/pam_skey/ChangeLog?rev=1.24&view=markup |
| 15 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-auth/pam_skey/ChangeLog?rev=1.24&content-type=text/plain |
| 16 |
diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-auth/pam_skey/ChangeLog?r1=1.23&r2=1.24 |
| 17 |
|
| 18 |
Index: ChangeLog |
| 19 |
=================================================================== |
| 20 |
RCS file: /var/cvsroot/gentoo-x86/sys-auth/pam_skey/ChangeLog,v |
| 21 |
retrieving revision 1.23 |
| 22 |
retrieving revision 1.24 |
| 23 |
diff -u -r1.23 -r1.24 |
| 24 |
--- ChangeLog 26 Aug 2013 16:32:46 -0000 1.23 |
| 25 |
+++ ChangeLog 28 Aug 2013 06:00:25 -0000 1.24 |
| 26 |
@@ -1,6 +1,14 @@ |
| 27 |
# ChangeLog for sys-auth/pam_skey |
| 28 |
# Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2 |
| 29 |
-# $Header: /var/cvsroot/gentoo-x86/sys-auth/pam_skey/ChangeLog,v 1.23 2013/08/26 16:32:46 ulm Exp $ |
| 30 |
+# $Header: /var/cvsroot/gentoo-x86/sys-auth/pam_skey/ChangeLog,v 1.24 2013/08/28 06:00:25 ulm Exp $ |
| 31 |
+ |
| 32 |
+*pam_skey-1.1.5-r5 (28 Aug 2013) |
| 33 |
+ |
| 34 |
+ 28 Aug 2013; Ulrich Müller <ulm@g.o> -pam_skey-1.1.5-r3.ebuild, |
| 35 |
+ -pam_skey-1.1.5-r4.ebuild, +pam_skey-1.1.5-r5.ebuild: |
| 36 |
+ Erase cleartext passwords from memory, fixes security bug 482588, |
| 37 |
+ CVE-2013-4285. Committing with stable keywords, thanks to Agostino Sarubbo |
| 38 |
+ for testing on amd64 and x86. Remove vulnerable versions. |
| 39 |
|
| 40 |
*pam_skey-1.1.5-r4 (26 Aug 2013) |
| 41 |
|
| 42 |
@@ -90,6 +98,6 @@ |
| 43 |
16 Jan 2008; Ulrich Mueller <ulm@g.o> +metadata.xml, |
| 44 |
+pam_skey-1.1.4.ebuild: |
| 45 |
Import from Sunrise overlay. Original ebuild and patch contributed by |
| 46 |
- Dani Church <dani.church@×××××.com>, Jakub Moc <jakub@g.o> and me, |
| 47 |
+ Dani Church <dani.church@×××××.com>, Jakub Moc <jakub@g.o> and me, |
| 48 |
bug 55279. |
| 49 |
|
| 50 |
|
| 51 |
|
| 52 |
|
| 53 |
1.1 sys-auth/pam_skey/pam_skey-1.1.5-r5.ebuild |
| 54 |
|
| 55 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-auth/pam_skey/pam_skey-1.1.5-r5.ebuild?rev=1.1&view=markup |
| 56 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-auth/pam_skey/pam_skey-1.1.5-r5.ebuild?rev=1.1&content-type=text/plain |
| 57 |
|
| 58 |
Index: pam_skey-1.1.5-r5.ebuild |
| 59 |
=================================================================== |
| 60 |
# Copyright 1999-2013 Gentoo Foundation |
| 61 |
# Distributed under the terms of the GNU General Public License v2 |
| 62 |
# $Header: /var/cvsroot/gentoo-x86/sys-auth/pam_skey/pam_skey-1.1.5-r5.ebuild,v 1.1 2013/08/28 06:00:25 ulm Exp $ |
| 63 |
|
| 64 |
EAPI=5 |
| 65 |
|
| 66 |
inherit eutils pam autotools multilib readme.gentoo |
| 67 |
|
| 68 |
DESCRIPTION="PAM interface for the S/Key authentication system" |
| 69 |
HOMEPAGE="http://freshmeat.net/projects/pam_skey/" |
| 70 |
SRC_URI="http://dkorunic.net/tarballs/${P}.tar.gz |
| 71 |
mirror://gentoo/${P}-patches-6.tar.xz" |
| 72 |
|
| 73 |
LICENSE="GPL-2" |
| 74 |
SLOT="0" |
| 75 |
KEYWORDS="amd64 x86" |
| 76 |
|
| 77 |
RDEPEND=">=sys-libs/pam-0.78-r3 |
| 78 |
>=sys-auth/skey-1.1.5-r4" |
| 79 |
DEPEND="${RDEPEND} |
| 80 |
app-arch/xz-utils" |
| 81 |
|
| 82 |
DOCS="README INSTALL" |
| 83 |
DOC_CONTENTS="To use the pam_skey module, you need to configure PAM |
| 84 |
by adding a line like: |
| 85 |
\n\nauth [success=done ignore=ignore auth_err=die default=bad] pam_skey.so\n |
| 86 |
\nto an appropriate place in the /etc/pam.d/system-auth file. |
| 87 |
Consult the README and INSTALL files in /usr/share/doc/${PF} |
| 88 |
for detailed instructions. |
| 89 |
\n\nPlease note that calling this module from unprivileged |
| 90 |
applications, e.g. screensavers, is not supported. |
| 91 |
\n\nError checking has become stricter in pam_skey-1.1.5-r4; |
| 92 |
errors returned from the underlying skey library when accessing |
| 93 |
the S/Key data base will no longer be ignored. |
| 94 |
Make sure that your PAM configuration is correct." |
| 95 |
|
| 96 |
src_prepare() { |
| 97 |
EPATCH_SUFFIX=patch epatch |
| 98 |
epatch_user |
| 99 |
|
| 100 |
cd autoconf |
| 101 |
eautoconf |
| 102 |
eautoheader |
| 103 |
mv configure defs.h.in .. || die "mv failed" |
| 104 |
} |
| 105 |
|
| 106 |
src_configure() { |
| 107 |
econf --libdir="/$(get_libdir)" CFLAGS="${CFLAGS} -fPIC" |
| 108 |
} |
| 109 |
|
| 110 |
pkg_postinst() { |
| 111 |
case ${REPLACING_VERSIONS} in |
| 112 |
1.1.[45]|1.1.5-r[123]) FORCE_PRINT_ELOG=1 ;; |
| 113 |
esac |
| 114 |
readme.gentoo_print_elog |
| 115 |
} |
Archives