Hello community,
here is the log from the commit of package cyrus-sasl for openSUSE:Factory checked in at 2018-12-11 15:45:12
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/cyrus-sasl (Old)
and /work/SRC/openSUSE:Factory/.cyrus-sasl.new.19453 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cyrus-sasl"
Tue Dec 11 15:45:12 2018 rev:57 rq:655748 version:2.1.27
Changes:
--------
--- /work/SRC/openSUSE:Factory/cyrus-sasl/cyrus-sasl-saslauthd.changes 2018-02-16 21:40:30.492098273 +0100
+++ /work/SRC/openSUSE:Factory/.cyrus-sasl.new.19453/cyrus-sasl-saslauthd.changes 2018-12-11 15:45:15.054376879 +0100
@@ -1,0 +2,31 @@
+Sat Nov 17 10:14:14 UTC 2018 - Michael Ströder
+
+- removed patches obsoleted by upstream changes:
+ * shared_link_on_ppc.patch
+ * fix-sasl-header.diff
+ * cyrus-sasl-revert_gssapi_flags.patch
+ * cyrus-sasl-issue-402.patch
+ * cyrus-sasl-2.1.27-openssl-1.1.0.patch
+- replaced cumlocal/ with m4/ in patches
+- added fix_libpq-fe_include.diff for fixing including libpq-fe.h
+- Update to 2.1.27
+ * cache.c:
+ Don’t use cached credentials if timeout has expired
+ Fixed debug logging output
+ * ipc_doors.c:
+ Fixed potential DoS attack (from Oracle)
+ * ipc_unix.c:
+ Prevent premature closing of socket
+ * auth_rimap.c:
+ Added support LOGOUT command
+ Added support for unsolicited CAPABILITY responses in LOGIN reply
+ Properly detect end of responses (don’t needlessly wait)
+ Properly handle backslash in passwords
+ * auth_httpform:
+ Fix off-by-one error in string termination
+ Added support for 204 success response
+ * auth_krb5.c:
+ Added krb5_conv_krb4_instance option
+ Added more verbose error logging
+
+-------------------------------------------------------------------
--- /work/SRC/openSUSE:Factory/cyrus-sasl/cyrus-sasl.changes 2018-02-16 21:40:30.648092647 +0100
+++ /work/SRC/openSUSE:Factory/.cyrus-sasl.new.19453/cyrus-sasl.changes 2018-12-11 15:45:15.366376536 +0100
@@ -1,0 +2,32 @@
+Sat Nov 17 10:14:14 UTC 2018 - Michael Ströder
+
+- removed patches obsoleted by upstream changes:
+ * shared_link_on_ppc.patch
+ * fix-sasl-header.diff
+ * cyrus-sasl-revert_gssapi_flags.patch
+ * cyrus-sasl-issue-402.patch
+ * cyrus-sasl-2.1.27-openssl-1.1.0.patch
+- replaced cumlocal/ with m4/ in patches
+- added fix_libpq-fe_include.diff for fixing including libpq-fe.h
+- Update to 2.1.27
+ * Added support for OpenSSL 1.1
+ * Added support for lmdb
+ * Lots of build fixes
+ * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
+ * DIGEST-MD5 plugin:
+ Fixed memory leaks
+ Fixed a segfault when looking for non-existent reauth cache
+ Prevent client from going from step 3 back to step 2
+ Allow cmusaslsecretDIGEST-MD5 property to be disabled
+ * GSSAPI plugin:
+ Added support for retrieving negotiated SSF
+ Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
+ Properly compute maxbufsize AFTER security layers have been set
+ * SCRAM plugin:
+ Added support for SCRAM-SHA-256
+ * LOGIN plugin:
+ Don’t prompt client for password until requested by server
+ * NTLM plugin:
+ Fixed crash due to uninitialized HMAC context
+
+-------------------------------------------------------------------
Old:
----
cyrus-sasl-2.1.26.tar.gz
cyrus-sasl-2.1.27-openssl-1.1.0.patch
cyrus-sasl-issue-402.patch
cyrus-sasl-revert_gssapi_flags.patch
fix-sasl-header.diff
shared_link_on_ppc.patch
New:
----
cyrus-sasl-2.1.27.tar.gz
fix_libpq-fe_include.diff
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ cyrus-sasl-saslauthd.spec ++++++
--- /var/tmp/diff_new_pack.Mj3qvf/_old 2018-12-11 15:45:16.538375248 +0100
+++ /var/tmp/diff_new_pack.Mj3qvf/_new 2018-12-11 15:45:16.542375244 +0100
@@ -22,7 +22,7 @@
%endif
Name: cyrus-sasl-saslauthd
-Version: 2.1.26
+Version: 2.1.27
Release: 0
Summary: The SASL Authentication Server
License: BSD-4-Clause
@@ -34,12 +34,11 @@
Source2: README.Source
Source3: baselibs.conf
Source4: saslauthd.service
+
Patch: cyrus-sasl.dif
-Patch1: shared_link_on_ppc.patch
Patch5: cyrus-sasl-no_rpath.patch
Patch6: cyrus-sasl-lfs.patch
-Patch7: fix-sasl-header.diff
-Patch10: cyrus-sasl-2.1.27-openssl-1.1.0.patch
+Patch7: fix_libpq-fe_include.diff
PreReq: %fillup_prereq
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: db-devel
@@ -77,15 +76,13 @@
%prep
%setup -n cyrus-sasl-%{version} -a 1
%patch
-%patch1
%patch5 -p1
-%patch6
+%patch6 -p1
%patch7 -p1
-%patch10 -p1
%build
find . -name "*.cvsignore" -exec rm -fv "{}" "+"
-autoreconf -f -i
+autoreconf -f
export CFLAGS="-fno-strict-aliasing $RPM_OPT_FLAGS -DLDAP_DEPRECATED"
%configure --with-plugindir=%{_libdir}/sasl2 \
--with-configdir=/etc/sasl2/:%{_libdir}/sasl2 \
@@ -159,7 +156,7 @@
/usr/sbin/*
/usr/bin/*
%doc %{_mandir}/man8/*.gz
-%doc saslauthd/AUTHORS saslauthd/COPYING saslauthd/ChangeLog saslauthd/LDAP_SASLAUTHD saslauthd/NEWS saslauthd/README
+%doc saslauthd/COPYING saslauthd/ChangeLog saslauthd/LDAP_SASLAUTHD
%files -n cyrus-sasl-sqlauxprop
%defattr(-,root,root)
++++++ cyrus-sasl.spec ++++++
--- /var/tmp/diff_new_pack.Mj3qvf/_old 2018-12-11 15:45:16.562375222 +0100
+++ /var/tmp/diff_new_pack.Mj3qvf/_new 2018-12-11 15:45:16.566375217 +0100
@@ -18,7 +18,7 @@
Name: cyrus-sasl
%define lname libsasl2-3
-Version: 2.1.26
+Version: 2.1.27
Release: 0
Url: http://asg.web.cmu.edu/sasl/
Summary: Implementation of Cyrus SASL API
@@ -30,14 +30,9 @@
Source2: README.Source
Source3: baselibs.conf
Patch: cyrus-sasl.dif
-Patch1: shared_link_on_ppc.patch
Patch5: cyrus-sasl-no_rpath.patch
Patch6: cyrus-sasl-lfs.patch
-Patch7: fix-sasl-header.diff
-Patch8: cyrus-sasl-revert_gssapi_flags.patch
-# see https://github.com/cyrusimap/cyrus-sasl/issues/402
-Patch9: cyrus-sasl-issue-402.patch
-Patch10: cyrus-sasl-2.1.27-openssl-1.1.0.patch
+Patch7: fix_libpq-fe_include.diff
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: db-devel
BuildRequires: krb5-mini-devel
@@ -169,17 +164,13 @@
rm -rf %{_builddir}/%{name}-%{version}/dlcompat-*
fi
%patch
-%patch1
%patch5 -p1
-%patch6
+%patch6 -p1
%patch7 -p1
-%patch8 -p1
-%patch9 -p1
-%patch10 -p1
%build
find . -name "*.cvsignore" -exec rm -fv "{}" "+"
-autoreconf -f -i
+autoreconf -f
export CFLAGS="%optflags -fno-strict-aliasing"
%configure --with-pic \
--with-plugindir=%{_libdir}/sasl2 \
@@ -271,7 +262,7 @@
%files devel
%defattr(-,root,root)
-%doc AUTHORS COPYING ChangeLog NEWS README doc
+%doc AUTHORS COPYING ChangeLog README doc
%_includedir/sasl/
%doc %{_mandir}/man3/sasl_*.gz
%{_libdir}/libsasl2.so
++++++ cyrus-sasl-2.1.26.tar.gz -> cyrus-sasl-2.1.27.tar.gz ++++++
++++ 288259 lines of diff (skipped)
++++++ cyrus-sasl-lfs.patch ++++++
--- /var/tmp/diff_new_pack.Mj3qvf/_old 2018-12-11 15:45:17.326374382 +0100
+++ /var/tmp/diff_new_pack.Mj3qvf/_new 2018-12-11 15:45:17.330374378 +0100
@@ -1,83 +1,13 @@
---- configure.in.orig
-+++ configure.in
-@@ -84,7 +84,9 @@ AC_ARG_ENABLE(obsolete_cram_attr,
- enable_obsolete_cram_attr=$enableval,
- enable_obsolete_cram_attr=yes)
+--- cyrus-sasl-2.1.27.orig/configure.ac 2018-10-09 16:58:04.000000000 +0200
++++ cyrus-sasl-2.1.27/configure.ac 2018-11-17 13:05:26.475631124 +0100
+@@ -95,7 +95,9 @@
+ enable_obsolete_digest_attr=$enableval,
+ enable_obsolete_digest_attr=yes)
-AC_PROG_CC
+AC_PROG_CC_STDC
+AC_USE_SYSTEM_EXTENSIONS
+AC_SYS_LARGEFILE
+ AX_PROG_CC_FOR_BUILD
AC_PROG_CPP
AC_PROG_AWK
- AC_PROG_LN_S
---- saslauthd/configure.in.orig
-+++ saslauthd/configure.in
-@@ -19,7 +19,9 @@ AM_INIT_AUTOMAKE(saslauthd,2.1.25)
- CMU_INIT_AUTOMAKE
-
- dnl Checks for programs.
--AC_PROG_CC
-+AC_PROG_CC_STDC
-+AC_USE_SYSTEM_EXTENSIONS
-+AC_SYS_LARGEFILE
- AC_PROG_CPP
- AC_PROG_AWK
- AC_PROG_MAKE_SET
---- plugins/Makefile.am.orig
-+++ plugins/Makefile.am
-@@ -49,7 +49,8 @@
- plugin_version = 3:0:0
-
- INCLUDES=-I$(top_srcdir)/include -I$(top_srcdir)/lib -I$(top_srcdir)/sasldb -I$(top_builddir)/include
--AM_LDFLAGS = -module -export-dynamic -rpath $(plugindir) -version-info $(plugin_version)
-+AM_CPPFLAGS = -include $(top_builddir)/config.h
-+AM_LDFLAGS = -module -shared -export-dynamic -rpath $(plugindir) -version-info $(plugin_version)
-
- COMPAT_OBJS = @LTGETADDRINFOOBJS@ @LTGETNAMEINFOOBJS@ @LTSNPRINTFOBJS@
-
---- lib/Makefile.am.orig
-+++ lib/Makefile.am
-@@ -43,7 +43,8 @@
- # CURRENT:REVISION:AGE
- sasl_version = 3:0:0
-
--INCLUDES=-DLIBSASL_EXPORTS=1 -I$(top_srcdir)/include -I$(top_srcdir)/plugins -I$(top_builddir)/include -I$(top_srcdir)/sasldb
-+
-+AM_CPPFLAGS=-DLIBSASL_EXPORTS=1 -include $(top_builddir)/config.h -I$(top_srcdir)/include -I$(top_srcdir)/plugins -I$(top_builddir)/include -I$(top_srcdir)/sasldb
-
- EXTRA_DIST = windlopen.c staticopen.h NTMakefile
- EXTRA_LIBRARIES = libsasl2.a
---- saslauthd/Makefile.am.orig
-+++ saslauthd/Makefile.am
-@@ -26,7 +26,7 @@ saslcache_SOURCES = saslcache.c
-
- EXTRA_DIST = saslauthd.8 saslauthd.mdoc config include \
- getnameinfo.c getaddrinfo.c LDAP_SASLAUTHD
--INCLUDES = -I$(top_srcdir)/include -I$(top_builddir)/include -I$(top_srcdir)/../include
-+AM_CPPFLAGS = -include $(top_builddir)/config.h -I$(top_srcdir)/include -I$(top_builddir)/include -I$(top_srcdir)/../include
- DEFS = @DEFS@ -DSASLAUTHD_CONF_FILE_DEFAULT=\"@sysconfdir@/saslauthd.conf\" -I. -I$(srcdir) -I..
-
-
---- utils/Makefile.am.orig
-+++ utils/Makefile.am
-@@ -89,7 +89,7 @@ libsfsasl2_la_SOURCES =
- libsfsasl2_la_LIBADD = sfsasl.lo
- libsfsasl2_la_LDFLAGS = -version-info 1:0:0 -export-dynamic -rpath $(libdir)
-
--INCLUDES=-I$(top_srcdir)/include -I$(top_builddir)/include @SASL_DB_INC@
-+AM_CPPFLAGS = -include $(top_builddir)/config.h -I$(top_srcdir)/include -I$(top_builddir)/include @SASL_DB_INC@
- EXTRA_DIST = saslpasswd2.8 sasldblistusers2.8 pluginviewer.8 sfsasl.h sfsasl.c smtptest.c testsuite.c pluginviewer.c NTMakefile
-
- sfsasl.lo: sfsasl.c
---- sasldb/Makefile.am.orig
-+++ sasldb/Makefile.am
-@@ -44,7 +44,7 @@
- # Note that this doesn't necessaraly follow the libsasl2 verison info
- sasl_version = 1:25:0
-
--INCLUDES=-I$(top_srcdir)/include -I$(top_builddir)/include @SASL_DB_INC@
-+AM_CPPFLAGS= -include $(top_builddir)/config.h -I$(top_srcdir)/include -I$(top_builddir)/include @SASL_DB_INC@
-
- extra_common_sources = db_none.c db_ndbm.c db_gdbm.c db_berkeley.c
-
++++++ cyrus-sasl-no_rpath.patch ++++++
--- /var/tmp/diff_new_pack.Mj3qvf/_old 2018-12-11 15:45:17.338374369 +0100
+++ /var/tmp/diff_new_pack.Mj3qvf/_new 2018-12-11 15:45:17.338374369 +0100
@@ -1,7 +1,7 @@
-Index: cyrus-sasl-2.1.26/cmulocal/cyrus.m4
+Index: cyrus-sasl-2.1.26/m4/cyrus.m4
===================================================================
---- cyrus-sasl-2.1.26.orig/cmulocal/cyrus.m4
-+++ cyrus-sasl-2.1.26/cmulocal/cyrus.m4
+--- cyrus-sasl-2.1.26.orig/m4/cyrus.m4
++++ cyrus-sasl-2.1.26/m4/cyrus.m4
@@ -32,14 +32,5 @@ AC_DEFUN([CMU_ADD_LIBPATH_TO], [
dnl runpath initialization
AC_DEFUN([CMU_GUESS_RUNPATH_SWITCH], [
++++++ cyrus-sasl.dif ++++++
--- /var/tmp/diff_new_pack.Mj3qvf/_old 2018-12-11 15:45:17.350374356 +0100
+++ /var/tmp/diff_new_pack.Mj3qvf/_new 2018-12-11 15:45:17.350374356 +0100
@@ -1,7 +1,7 @@
-Index: cmulocal/cyrus.m4
+Index: m4/cyrus.m4
===================================================================
---- cmulocal/cyrus.m4.orig
-+++ cmulocal/cyrus.m4
+--- m4/cyrus.m4.orig
++++ m4/cyrus.m4
@@ -37,7 +37,7 @@ AC_DEFUN([CMU_GUESS_RUNPATH_SWITCH], [
SAVE_LDFLAGS="${LDFLAGS}"
LDFLAGS="-R /usr/lib"
@@ -25,20 +25,13 @@
else
Index: sasldb/Makefile.am
===================================================================
---- sasldb/Makefile.am.orig
-+++ sasldb/Makefile.am
-@@ -48,6 +48,7 @@ INCLUDES=-I$(top_srcdir)/include -I$(top
-
- extra_common_sources = db_none.c db_ndbm.c db_gdbm.c db_berkeley.c
-
-+AM_CFLAGS = "-fPIC"
- EXTRA_DIST = NTMakefile
-
- noinst_LTLIBRARIES = libsasldb.la
-@@ -66,3 +67,8 @@ libsasldb.a: libsasldb.la $(SASL_DB_BACK
- $(AR) cru .libs/$@ $(SASL_DB_BACKEND_STATIC)
-
-
+--- sasldb/Makefile.am 2016-01-29 18:35:35.000000000 +0100
++++ sasldb/Makefile.am 2018-11-17 12:51:05.800696917 +0100
+@@ -57,3 +57,9 @@
+ libsasldb_la_DEPENDENCIES = $(SASL_DB_BACKEND)
+ libsasldb_la_LIBADD = $(SASL_DB_BACKEND)
+ libsasldb_la_LDFLAGS = -no-undefined
++
+# avoid these two files created at the same time, they use both the same
+# dep file
+db_berkeley.lo: db_berkeley.o
++++++ fix_libpq-fe_include.diff ++++++
--- cyrus-sasl-2.1.27.orig/plugins/sql.c 2016-12-10 16:45:55.000000000 +0100
+++ cyrus-sasl-2.1.27/plugins/sql.c 2018-11-17 14:04:33.821540573 +0100
@@ -188,7 +188,7 @@
#endif /* HAVE_MYSQL */
#ifdef HAVE_PGSQL
-#include
+#include
static void *_pgsql_open(char *host, char *port, int usessl,
const char *user, const char *password,