linux/poky.git/meta/recipes-extended/pam/libpam_1.5.2.bb, branch nanbield-4.3.2

libpam: update 1.5.2 -> 1.5.3

2023-06-27T15:23:40+00:00

(From OE-Core rev: ddb5e0f8a2cc7c48e1fb53b665e2fd5ed263bb19) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

libpam: Fix the xtests/tst-pam_motd[1|3] failures

2023-04-14T15:44:24+00:00

Reproducer: 1.Enable the ptest of libpam and build the image. 2.Boot the rootfs with nfs, then run the following tests as root: cd /usr/share/Linux-PAM/xtests /usr/share/Linux-PAM/xtests# ./run-xtests.sh . tst-pam_motd1 /usr/share/Linux-PAM/xtests# ./run-xtests.sh . tst-pam_motd3 After applying this patch, the ptest doesn't be failed. (From OE-Core rev: 549e54ad6a175359b0a57987ccdab8989df9d3a9) Signed-off-by: Zhixiong Chi Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

libpam: Remove flex dependency

2023-03-13T17:35:22+00:00

libpam does not have a direct build time dependency toward flex. The libpam code does not have any references to the lib and does not use flex for anything else at runtime. (From OE-Core rev: d48fc8e1f26120e75377caefb5f66eedce50081c) Signed-off-by: Martin Larsson Signed-off-by: Richard Purdie

libpam: fix CVE-2022-28321

2022-11-23T18:27:07+00:00

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream. References: https://nvd.nist.gov/vuln/detail/CVE-2022-28321 Upstream patches: https://github.com/linux-pam/linux-pam/commit/08992030c56c940c0707ccbc442b1c325aa01e6d https://github.com/linux-pam/linux-pam/commit/23393bef92c1e768eda329813d7af55481c6ca9f (From OE-Core rev: b1fd799af0086347de1ec4b72d562b1fb490def1) Signed-off-by: Archana Polampalli Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

meta: fix version checks in all github recipes using the github-releases class

2022-09-28T07:01:10+00:00

(From OE-Core rev: b04316bdd28b7945c2c91b4e43c007b650eedc14) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

meta, meta-selftest: Replace more non-SPDX license identifiers

2022-03-01T23:44:59+00:00

In commit ceda3238 (meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers) all LICENSE variables were updated to only use SPDX license identifiers. This does the same for comments and other variables where it is appropriate to use the official SPDX license identifiers. There are still references to, e.g., "GPLv3", but they are then typically in descriptive text where they refer to the license in a generic sense. (From OE-Core rev: 165759dced7fbe73b1db2ede67047896071dc6d0) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20T16:45:25+00:00

An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie

libpam: Backport ptest fix checking whether files exist

2021-12-12T11:27:23+00:00

Backport a patch to check whether files exist. Before the patch: # ./run-xtests.sh . tst-pam_access1 mv: cannot stat '/etc/security/opasswd': No such file or directory PASS: tst-pam_access1 mv: cannot stat '/etc/security/opasswd-pam-xtests': No such file or directory ================== 1 tests passed 0 tests not run ================== After the patch: # ./run-xtests.sh . tst-pam_access1 PASS: tst-pam_access1 ================== 1 tests passed 0 tests not run ================== (From OE-Core rev: 4903fdbace057df2e39c10aaef3440f89748eed2) Signed-off-by: Mingli Yu Signed-off-by: Richard Purdie

libpam: Fix build with DISTRO_FEATURES usrmerge

2021-10-14T10:48:46+00:00

(From OE-Core rev: 71780bb9ac3c9e096888128d9cf3441c1758d816) Signed-off-by: Zoltán Böszörményi Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

libpam: update 1.5.1 -> 1.5.2

2021-10-11T17:41:37+00:00

Drop patches: issues fixed upstream. Move .pc files to correct place as libpam is instructed to install them in /lib via --libdir. (From OE-Core rev: b2aeaab36d7d46d47301d0729b634d182277cfbd) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie