Commit Graph

2407 Commits

Author SHA1 Message Date
Douglas R. Reno
d0c42be1cf Initial tags for 11.3 2023-02-14 18:44:18 -06:00
Ken Moffat
b1c55f0042 Update to gnutls-3.8.0. 2023-02-14 00:52:56 +00:00
Bruce Dubbs
df29efcbca Update to libcap-2.67. 2023-02-13 12:33:04 -06:00
Ken Moffat
b66736fb6e Update to nss-3.88.1. 2023-02-10 20:35:58 +00:00
Bruce Dubbs
fad9b8d31b Update to stunnel-5.68. 2023-02-09 12:58:48 -06:00
Xi Ruoyao
6c22d02146
mitkrb: Document the test failure w/o network
And remove the test failure caused by a previous installed version: the
upstream claims it's already fixed (the same story as gnutls and
-disable-rpath workaround).
2023-02-10 00:34:35 +08:00
Pierre Labastie
48dbad55b3 PAM: Improve typography of generic config files
Report by Rainer Fiebig
2023-02-05 22:14:11 +01:00
Bruce Dubbs
075cb1ea56 Update to openssh and ssh-askpass 9.2p1. 2023-02-03 20:35:54 -06:00
Pierre Labastie
54d589072b Remove eol spaces 2023-01-29 13:51:59 +01:00
Xi Ruoyao
17aa21c551
Change all http://*.sourceforge.net/ URLs to https
Now all sourceforge.net subdomains have a valid SSL certificate.  The
changes are automatically done via a sed.  I've reviewed the changes and
reverted the changes in archive/*, pst/xml/docbook-xsl.xml, and
stylesheets/lfs-xsl/lfs-l10n.xml.  Other changes should (hopefully) be
fine.
2023-01-29 12:35:23 +08:00
Bruce Dubbs
bed8f3ef4e Synchronize openssh md5sums in multiple packages 2023-01-26 16:31:45 -06:00
Tim Tassonis
5327b2af3c Update to sudo-1.9.12p2 2023-01-19 23:35:11 +01:00
Pierre Labastie
c10acfe844 Change ulink to xref for sphinx 2023-01-18 17:02:55 +01:00
Pierre Labastie
c9384fd073 Remove the --disable-rpath option for gnutls
This option is not needed for recent versions of gnutls, as
the build system does exactly what is expected: link binaries and
libraries with rpath pointing to the build tree at first, then
remove rpath completely when relinking at install time.
2023-01-17 13:50:55 +01:00
Thomas Trepl
579c512dc8 Make ssh-askpass using gtk3 (prev. gtk2) 2023-01-15 18:20:42 +01:00
Thomas Trepl
97e37e1b60 Upgrade iptables-1.8.9 2023-01-13 10:29:24 +01:00
Bruce Dubbs
b2b3ee6949 Update to nss-3.87. 2023-01-06 12:55:50 -06:00
Xi Ruoyao
6a6d01e6ed
nss: "the lfs book" -> "the LFS book" 2023-01-06 13:22:39 +08:00
Pierre Labastie
c478431105 Create /etc/profile.d in make-ca
make-ca may be built before the bash startup files, because it may
be needed early for downloading packages. In this case the
/etc/profile.d directory may not exist. Of course, another possibility
would be to have make-ca depend on the bash startup files.
2022-12-30 21:53:04 +01:00
DJ Lucas
7e611b1da3 Update to make-ca-1.12. Fixes #17449. 2022-12-27 20:30:58 -06:00
Pierre Labastie
8bcda70c82 Typo 2022-12-21 23:00:29 +01:00
Pierre Labastie
624015965a Update to gnupg2-2.4.0 2022-12-21 22:56:20 +01:00
Pierre Labastie
562131ee10 make-ca: fix the location of a distributed file 2022-12-19 16:10:45 +01:00
Ken Moffat
0d7f7190cf Update to nss-3.86. 2022-12-18 19:03:17 +00:00
David Bryant
48771ae06f Unless it's a directory name, or something like that, "test suite"
should be spelled as two words.
2022-12-13 12:19:29 -06:00
Douglas R. Reno
ee2e637781 make-ca: Remove extra newline from the new python3 instructions 2022-12-09 14:55:36 -06:00
Bruce Dubbs
cbb07ee487 Typo 2022-12-09 12:12:34 -06:00
Ken Moffat
012af225d4 Explain how to use system certificates with python3. 2022-12-01 20:18:33 +00:00
Pierre Labastie
3f2db3a638 Remove sect1info tags
They only contain a date tag that is nowhere used.
2022-11-29 08:58:07 +01:00
Pierre Labastie
b3c16a7828 Small spacing fix 2022-11-25 09:37:59 +01:00
Pierre Labastie
024fb949cc Returns to a more reasonable value of rounds in shadow 2022-11-25 08:31:43 +01:00
Pierre Labastie
353fc67e02 Typo
Thanks to "rhubarbpieguy" for the report.
2022-11-24 14:58:08 +01:00
DJ Lucas
c066a42f3e Update to make-ca-1.11. Fixes #17340. 2022-11-23 23:33:32 -06:00
Pierre Labastie
2bfa995646 Update to libpwquality-1.4.5 2022-11-20 09:45:05 +01:00
Bruce Dubbs
e0e8726f9b Update to krb5-1.20.1. 2022-11-17 16:35:30 -06:00
Bruce Dubbs
a46256a8f3 Update to nss-3.85. 2022-11-17 13:51:13 -06:00
Pierre Labastie
7f27f7aecc Update to shadow-4.13 2022-11-16 17:59:31 +01:00
Pierre Labastie
3619a5b958 Adjust the number of crypt rounds in PAM files
To match shadow's one.
2022-11-16 17:15:52 +01:00
Pierre Labastie
ae27cdcfc9 shadow: don't use <cond> && <cmd> for conditional
Explain why in a comment.
2022-11-16 17:15:52 +01:00
Pierre Labastie
4635a45ddb Shadow: increase the number of rounds for passwd
for the SHA512 crypt method, the default number of rounds (5000) is
too low to prevent brute force attacks on modern hardware. Multiply
it by 1000 (not sure it is enough).
2022-11-16 17:15:27 +01:00
Bruce Dubbs
3fe867a0ed Update to polkit-122. 2022-11-15 14:37:11 -06:00
Douglas R. Reno
14bd41d008 Add JS102 and archive JS91. 2022-11-14 14:01:00 -06:00
Bruce Dubbs
5e42468556 Update to sudo-1.9.12p1. 2022-11-08 15:24:09 -06:00
Bruce Dubbs
2d63a2eaf1 Update to stunnel-5.67. 2022-11-06 13:41:54 -06:00
Xi Ruoyao
a476c5de8a
volume_key: find gpgme and gpg correctly 2022-10-28 17:17:34 +08:00
Xi Ruoyao
b3285de6d5
libgpg-error and gpgme: remove {gpg-error,gpgme}-config from contents
libgpg-error stop to provide gpg-error-config in 1.46.  And, if gpgme is
built with libgpg-error-1.46, it won't ship gpgme-config as well.
2022-10-28 16:27:19 +08:00
Xi Ruoyao
367cbd0d1f
gpgme: add patch for using latest libgpg-error 2022-10-28 16:20:07 +08:00
Xi Ruoyao
0c73c5b624
gpgme: prepare for Python 3.11 update 2022-10-28 16:11:26 +08:00
Bruce Dubbs
bf14832521 Update to sudo-1.9.12. 2022-10-24 11:19:29 -05:00
David Bryant
7f70be6a97 Edited grammar, style, and English idiom. Clarified a few things,
and patched a broken link to an external reference.
2022-10-23 11:29:56 -05:00
Bruce Dubbs
c7f3c15472 Fix sed target in gnupg2 2022-10-21 14:13:17 -05:00
Bruce Dubbs
36380812f6 Update to nss-3.84. 2022-10-21 12:41:05 -05:00
Bruce Dubbs
70069a9dd3 Update to gnupg-2.3.8. 2022-10-21 12:11:42 -05:00
Bruce Dubbs
fd6f0d21e0 Update to openssh-9.1p1 snd ssh-askpass-9.1p1. 2022-10-05 18:34:45 -05:00
Bruce Dubbs
743907e6b4 Update to libcap-2.66. 2022-10-01 12:31:01 -05:00
Pierre Labastie
fb3a93b301 cracklib: Fix commands and command explanations
Prompted by a report by "r1c0n3r0" on irc #lfs-support.
PYTHON=python3.10 is not needed anymore, as well as CPPFLAGS.
Document autoreconf.
2022-09-30 08:15:22 +02:00
Pierre Labastie
2c6c92d6a9 Update to gnutls-3.7.8 2022-09-29 17:47:10 +02:00
Douglas R. Reno
59949b6046 Update to NSS-3.83 2022-09-21 10:14:47 -05:00
Bruce Dubbs
4d7adfd9e2 Update to stunnel-5.66. 2022-09-16 15:28:12 -05:00
Pierre Labastie
a4289351e1 Unconditionally use duktape for polkit
- duktape is so low overhead, that even if mozjs is later
  needed, it is not a problem...
- it simplifies our instructions, otherwise, we would have had to
  use four <screen> sections (sysd-duktape, sysv-duktape, sysd-mozjs,
  and sysv-mozjs). GNOME can also be used with sysv.
2022-09-16 08:39:31 +02:00
Tim Tassonis
f401faa609 Add duktape-2.7.0, allow polkit to use duktape instead of JS. 2022-09-15 19:15:50 +02:00
Pierre Labastie
4e207bb418 Replace tabs with spaces (except in Makefile :) 2022-09-11 18:22:44 +02:00
Xi Ruoyao
cd29bc9b3d
postlfs: URL updates 2022-09-08 12:52:53 +08:00
Bruce Dubbs
fd6676f5cc Update to shadow-4.12.3. 2022-09-07 19:51:01 -05:00
Pierre Labastie
4b3110c85a Fix autoreconf command in cracklib 2022-09-06 06:42:58 +02:00
Bruce Dubbs
056b5965ec Package updates
Update to neon-0.32.3.
Update to libwpe-1.12.3.
Update to cracklib-2.9.8.
Update to libsoup-3.0.8.
2022-09-05 18:03:13 -05:00
Pierre Labastie
7076607a6d Update url of lwn.net security database
Also change urls to https on the vulnerabilities page
2022-09-01 07:50:29 +02:00
Bruce Dubbs
01e2c90e25 Minor fixes.
Remove an inoperative ftp feference for the tree command.
Fix a minor gramma error in nss.
2022-08-30 22:25:07 -05:00
Douglas R. Reno
96923efd52 Typo fixes 2022-08-28 15:11:37 -05:00
Bruce Dubbs
5cc198cd36 Update to vim-9.0.0228 (sync with LFS. And some tags. 2022-08-26 11:43:04 -05:00
Thomas Trepl (Moody)
9cb50666dd Merge branch 'trunk' of git.linuxfromscratch.org:blfs into trunk 2022-08-26 12:19:51 +02:00
Thomas Trepl (Moody)
1bbb5ddaa5 Some more tags 2022-08-26 12:19:35 +02:00
Douglas R. Reno
8a2cb97ea3 Tag GNOME Applications and dependencies 2022-08-25 21:47:44 -05:00
Douglas R. Reno
fe33e3f2bd Tag GNOME Libraries and relevant dependencies 2022-08-25 16:50:31 -05:00
Bruce Dubbs
7263a049ae Tags 2022-08-25 16:06:42 -05:00
Douglas R. Reno
b1c0fa79df Update to WebKitGTK+-2.36.7 and other tags. 2022-08-25 11:25:40 -05:00
Douglas R. Reno
cce66dc465 Tag WebKitGTK+ dependencies prior to working on the update 2022-08-24 18:52:52 -05:00
Thomas Trepl (Moody)
b5d7180d02 Tags for 11.2 2022-08-24 18:36:22 +02:00
Bruce Dubbs
0ddf4e7c2a Tags 2022-08-22 22:55:37 -05:00
Douglas R. Reno
aa0b625099 Tag Xorg and dependencies 2022-08-22 21:55:59 -05:00
Bruce Dubbs
24c3176cab Update to shadow-4.12.2 and tag it. 2022-08-22 19:22:38 -05:00
Douglas R. Reno
ce1dd9df4e Several tags 2022-08-22 15:41:07 -05:00
Douglas R. Reno
9b8ff698ec Fix building hdparm-9.64 with glibc-2.36
Tags up to that point
2022-08-22 14:37:51 -05:00
Douglas R. Reno
ecc23863e9 libevent: Typo fix
llvm: Document new test failures
Tags
2022-08-22 14:03:54 -05:00
Bruce Dubbs
05299f4f48 Some initial 11.2 tags 2022-08-21 20:40:45 -05:00
Douglas R. Reno
65aeaa0242 Update to nss-3.82 2022-08-20 00:36:07 -05:00
Pierre Labastie
c24176220d gpgme: remove a useless sed part
Starting with python-3.10.6, no warning is issued if
"import distutils" is used in a python script. So the
corresponding sed can be removed. It was wrong anyway for
gpgme-1.18.0, because the line number had changed.
2022-08-15 18:31:25 +02:00
Bruce Dubbs
55bad52508 Update to gpgme-1.18.0. 2022-08-14 14:42:22 -05:00
Bruce Dubbs
504d78775d Update to gnutls-3.7.7. 2022-07-29 16:26:41 -05:00
Bruce Dubbs
f2a6409e03 Update to nettle-3.8.1. 2022-07-28 11:51:55 -05:00
Bruce Dubbs
4ef89d0c04 Update to libcap-2.65. 2022-07-24 15:08:38 -05:00
Douglas R. Reno
fb1f32be41 cyrus-sasl: Java support was removed in 2.1.28. 2022-07-23 16:23:44 -05:00
Bruce Dubbs
43fb57ca50 Update to nss-3.81. 2022-07-22 13:12:39 -05:00
Douglas R. Reno
6b7a631375 Package Updates:
Update to stunnel-5.65
Update to samba-4.16.3
Update to openldap-2.6.3
2022-07-21 12:26:27 -05:00
Douglas R. Reno
7d5d3d4bf5 Package Updates:
Update to polkit-121
Update to mesa-22.1.4
Update to libwebp-1.2.3
Update to inkscape-1.2.1
2022-07-20 21:47:56 -05:00
Douglas R. Reno
c2051dbdc3 Five Security Updates:
Update to node.js-16.16.0
Update to php-8.1.8
Add security patch for Dovecot (fixes CVE-2022-30550)
Update to seamonkey-2.53.13
Update to gnupg-2.3.7
Mark git as a security update
2022-07-13 17:12:03 -05:00
Ken Moffat
0fa93ad43e Update to nss-3.80. 2022-06-26 18:05:26 +01:00
Bruce Dubbs
b76b9a36c2 Update to sudo-1.9.11p3. 2022-06-23 22:28:01 -05:00
Bruce Dubbs
a8368655aa Update to sudo-1.9.11p2. 2022-06-13 14:06:53 -05:00
Bruce Dubbs
3ee1d767da Update to sudo-1.9.11p1. 2022-06-09 10:55:05 -05:00
Bruce Dubbs
d458b1c1aa Update to sudo-1.9.11. 2022-06-07 13:31:50 -05:00
Douglas R. Reno
785c02f0f4 Package Updates:
Update to nettle-3.8
Update to gnome-desktop-42.2
2022-06-03 00:37:18 -05:00
Ken Moffat
71e36c7987 Package Updates:
firefox-91.10.0,
js-91.10.0,
nss-3.79.
2022-05-31 18:41:49 +01:00
Bruce Dubbs
e1be4fda9d Update to gnutls-3.7.6. 2022-05-28 10:57:51 -05:00
Pierre Labastie
dd3a9414fd Update to MIT Kerberos V5-1.20 2022-05-27 15:47:04 +02:00
Bruce Dubbs
f959ec4f55 Update to iptables-1.8.8. 2022-05-15 16:24:52 -05:00
Xi Ruoyao
3bf9519654
update to gnutls-3.7.5 (#16533)
Also add brotli as optinonal.
2022-05-13 20:06:51 +08:00
Bruce Dubbs
e329cfce0a Update to stunnel-5.64. 2022-05-08 13:02:05 -05:00
Xi Ruoyao
3a8682fc2a
gpgme: remove unneeded workaround
This is already fixed by upstream.

I'm not sure if the sed for Python 3.10 is still required: I don't have
SWIG.
2022-05-09 01:13:24 +08:00
Pierre Labastie
b0b536c65d Update to nss-3.78 2022-04-30 17:04:43 +02:00
Bruce Dubbs
9465bea3f5 Update to gnupg-2.3.6. 2022-04-26 12:31:08 -05:00
Xi Ruoyao
9e1670e1f1
Revert "nss: document fails about PayPal certs"
This reverts commit 83996dc912.

The upstream has updated PayPal certs and added a check to skip the test
if the certs expire again.
2022-04-25 02:15:46 +08:00
Bruce Dubbs
6a1db365e3 Update to gnupg-2.3.5. 2022-04-22 12:14:19 -05:00
Pierre Labastie
7a9a7b2665 Remove spaces at the end of lines 2022-04-20 15:36:11 +02:00
Bruce Dubbs
6545853c57 Comment out obsolete command in gnutls 2022-04-17 09:39:34 -05:00
Bruce Dubbs
e21d198428 Update to libcap-2.64 2022-04-14 12:18:34 -05:00
Bruce Dubbs
81a094829e Update to openssh-9.0p1. Includes ssh-askpass. 2022-04-13 11:30:40 -05:00
Pierre Labastie
aa1a6bb2ee gnupg2: typo 2022-04-04 14:05:06 +02:00
Xi Ruoyao
33f6542406
gnupg2: comment out everything related to gpg-zip
In 2.3.x we can't install it via the sed anymore.  If we need it, we'll
have to get it from somewhere else.
2022-04-04 18:39:50 +08:00
Bruce Dubbs
ee15a73618 Update to gnupg-2.3.4 2022-04-03 20:37:28 -05:00
Bruce Dubbs
a3fa2d4bb6 Package updates.
Update to libreoffice-7.3.2.2.
Update to nss-3.77.
2022-04-01 15:14:39 -05:00
Bruce Dubbs
a44d504818 Package updates.
Update to nss-3.76.1.
Update to gparted-1.4.0.
2022-03-29 14:29:38 -05:00
Ken Moffat
b9c353b87a Typo fixes from rhubarbpieguy. 2022-03-25 03:29:22 +00:00
Pierre Labastie
4d15c65857 openssh: don't use ChallengeResponseAuthentication
It is deprecated and replaced with KbdInteractiveAuthentication.
See sshd_config(5):
"KbdInteractiveAuthentication
 Specifies whether to use keyboard-interactive authentication.
 The argument to this keyword must be yes (the default) or no.
 ChallengeResponseAuthentication is a deprecated alias for this."
2022-03-24 17:04:04 +01:00
Pierre Labastie
aa59fb3160 Fix patch version in kerberos "patch" command 2022-03-23 11:58:22 +01:00
Douglas R. Reno
1aa7410a4a Package updates and a new perl module
Add JSON for Samba
Update to Samba-4.16.0
Update to krb5-1.19.3
2022-03-22 14:09:52 -05:00
Bruce Dubbs
a2047917dd Update to gnutls-3.7.4. 2022-03-20 13:20:35 -05:00
Pierre Labastie
d32d872dbd shadow: allow any user to use su
With the present /etc/pam.d/su, the usage of "su" is restricted
to users in the wheel group. Comment out that rule.
2022-03-19 21:22:55 +01:00
Bruce Dubbs
45bc955a30 Package updates.
Update to imlib2-1.8.1.
Update to stunnel-5.63.
Update to httpd-2.4.53.
Update to HTML-Parser-3.77 (Perl module).
2022-03-17 14:21:32 -05:00
Bruce Dubbs
c4938ccc58 Package updates.
Update to gpgme-1.17.1.
Update to pango-1.50.5.
Update to cmake-3.22.3.
2022-03-08 14:21:14 -06:00
Douglas R. Reno
0771e2fae7 Package updates
Update to ruby-3.1.1
Update to nss-3.76
2022-03-08 09:32:17 -06:00
Bruce Dubbs
f2a19b4e88 Package updates.
Update to sudo-1.9.10.
Update to umockdev-0.17.7.
Update to poppler-22.03.0.
Update to HTTP-Daemon-6.14 (Perl Module).
Update to python-dbusmock-0.26.1 (Python module).
Update to nghttp2-1.47.0.
2022-03-07 15:03:10 -06:00
Xi Ruoyao
3b88aed743
openssh: add which as optional dependency for tests
It's used at regress/test-exec.sh:317 and invoked multiple times during
test.
2022-03-08 03:31:04 +08:00
Xi Ruoyao
bf654b16dc
polkit: uncomment test dependencies
Forgot to do this yesterday...
2022-03-08 01:49:30 +08:00
Douglas R. Reno
e7dc117818 OpenSSH: Comment out the description for --with-md5-passwords, and move
the commented option above the <screen> statement so that we're not
causing formatting issues
2022-03-06 16:07:23 -06:00
Pierre Labastie
02cb684932 Update to openssh-8.9p1 with ssh-askpass 2022-03-06 10:50:13 +01:00
Xi Ruoyao
492cca2c43
polkit: document -Dtests=true 2022-03-06 17:24:10 +08:00
Xi Ruoyao
60caf48d89
polkit: use archive tarball and enable tests
Normally we perfer release tarballs than archives.  But for polkit, we
are using meson so the generated configure script is not needed.  And,
the release tarball lacks test support files and prevents us from
running tests.

For such a "security related" package, skipping test seems not good...
(That being said, we'd been busying fix CVEs not found by the test. :( )
2022-03-06 16:45:02 +08:00
Xi Ruoyao
b5b1af683a
update to JS91 (#15368)
* js-78 -> js-91.6.0
* gjs-1.70.1 -> gjs-1.71.90: it's a development release, but works fine
                             with GNOME 41
* add polkit-0.120-js91-1.patch
2022-03-06 16:22:05 +08:00
Douglas R. Reno
4483a9ae12 Package updates and a security fix
Fix CVE-2021-4115 in Polkit
Update to cyrus-sasl-2.1.28 (Security Update)
Update to flac-1.3.4 (Security Update)
Update to seamonkey-2.53.11 (Security Update)
2022-03-03 13:15:04 -06:00
Bruce Dubbs
db8d276a9d Tags and a minor dependency upgrade 2022-02-20 14:30:51 -06:00
Bruce Dubbs
ef8290b1d0 Tags - mostly multimedia 2022-02-19 16:48:51 -06:00
Bruce Dubbs
7107b6ef0f Package updates.
Update to nano-6.2.
Update to vim-8.2.4383. Sync with LFS.
2022-02-19 00:02:53 -06:00
Bruce Dubbs
de22bfa148 Tags 2022-02-18 21:48:44 -06:00
Douglas R. Reno
f1a479c7e7 Package Updates and Tags
Update to xf86-input-wacom-1.0.0
Update to libdrm-2.4.110
Update to XWayland-22.1.0
2022-02-18 13:06:30 -06:00
Xi Ruoyao
ab01ea5cef
shadow: add --disable-static
Sync with LFS.
2022-02-18 12:53:58 +08:00
Douglas R. Reno
ca783379c5 Package Updates and Tags:
Update to tree-2.0.2
Update to scons-4.3.0
2022-02-17 19:44:13 -06:00
Douglas R. Reno
d962244313 Tags and add text regarding failing tests in libevent
Off to a few utilities next, and then X...
2022-02-17 14:06:36 -06:00
Xi Ruoyao
9c7363e58d
Tag dependencies for UEFI packages
Will tag the UEFI packages themselves tomorrow.
2022-02-17 23:49:05 +08:00
Bruce Dubbs
03a2986c05 A package update and some tags.
Update to libqalculate-4.0.0.
2022-02-16 22:44:55 -06:00