OpenPOWER buildroot sources https://git.raptorcs.com/git/buildroot/atom?h=2016.11.2 2016-10-16T10:42:28+00:00 2016-10-16T10:42:28+00:00 Bernd Kuhls bernd.kuhls@t-online.de 2016-10-16T08:50:32+00:00 urn:sha1:4882037d631012934ace1a6fe5f19ce66c2f3b68 removed 0003-Conditionally-compile-per-innetgr-availability.patch, applied upstream: https://git.fedorahosted.org/cgit/linux-pam.git/commit/?id=835d64947996b7cc96fe187f9b3103db36dddf77 This bump includes https://git.fedorahosted.org/cgit/linux-pam.git/commit/?id=01e0038fa55581c4afc9d63b6180d2ea77ba2940 which fixes http://autobuild.buildroot.net/results/394/394e22be0ef986463e97b3040dad8f978262732c/ Removed comment in Config.in about broken --enable-static-modules configure option because it was removed upstream: https://git.fedorahosted.org/cgit/linux-pam.git/commit/?id=a684595c0bbd88df71285f43fb27630e3829121e Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2016-03-05T15:52:26+00:00 Brendan Heading brendanheading@gmail.com 2015-08-23T19:02:58+00:00 urn:sha1:2bf63505eb7068d9db182b4f8eb3a10e9c06057d Move to the latest release of linux-pam. This allows us to remove a number of patches and consolidate the existing ones : - 0001-configure.patch - 0007-rhosts.patch these two patches deal with the ruserok function, which is not usable with uclibc. Consolidated into 0002-Conditionally-compile-per-ruserok-availability.patch. - 0003-group.patch - 0005-succeed.patch - 0006-time.patch these three patches deal with the innetgr function, which is not usable with uclibc. Consolidated into 0003-Conditionally-compile-per-innetgr-availability.patch. - 0004-mkdir.patch Fixed in upstream, no longer required. - 0002-doc-makefile-am.patch renamed to 0001-doc-makefile-am.patch. - 0008-fix-CVE-2014-2583.patch - 0009-fix-CVE-2013-7041.patch These patches are already included in the new release and so can be safely deleted. Signed-off-by: Brendan Heading <brendanheading@gmail.com> Tested-by: Carlos Santos <casantos@datacom.ind.br> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2014-12-18T21:55:00+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2014-12-18T18:04:41+00:00 urn:sha1:c165b0e580b6236c3efe93156e02d68d3013c575 To fix: CVE-2013-7041 - use case sensitive comparison in pam_userdb CVE-2014-2583 - potential path traversal issue in pam_timestamp Also add hash file (computed, the hash files upstream cover up to 1.1.7) Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>