8:36 p.m.
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-22850fa97e
2019-02-02 02:35:43.153750
--------------------------------------------------------------------------------
Name : libxcrypt
Product : Fedora 28
Version : 4.4.3
Release : 2.fc28
URL : https://github.com/besser82/libxcrypt
Summary : Extended crypt library for descrypt, md5crypt, bcrypt, and others
Description :
libxcrypt is a modern library for one-way hashing of passwords. It
supports a wide variety of both modern and historical hashing methods:
yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt, sha256crypt,
md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt, and descrypt.
It provides the traditional Unix crypt and crypt_r interfaces, as well
as a set of extended interfaces pioneered by Openwall Linux, crypt_rn,
crypt_ra, crypt_gensalt, crypt_gensalt_rn, and crypt_gensalt_ra.
libxcrypt is intended to be used by login(1), passwd(1), and other
similar programs; that is, to hash a small number of passwords during
an interactive authentication dialogue with a human. It is not suitable
for use in bulk password-cracking applications, or in any other situation
where speed is more important than careful handling of sensitive data.
However, it is intended to be fast and lightweight enough for use in
servers that must field thousands of login attempts per minute.
--------------------------------------------------------------------------------
Update Information:
- New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 24 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.3-2
- Fix and simplify the conditionals for the compat package
- Add an option to replace unsafe functions in the compat lib with a stub
- Add patch to fix another possible format-overflow
* Thu Jan 24 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.3-1
- New upstream release
* Thu Jan 24 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-8
- Optimize file removal for compatibility library
* Mon Jan 21 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-7
- Add two upstream patches to fix build with GCC 9
* Mon Jan 21 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-6
- Add upstream patch to add proper C++-guards in <xcrypt.h>
* Mon Jan 14 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-5
- Build the compat package with glibc hashing methods only
- Add an option to disable the compat-package for future use
* Mon Jan 14 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-4
- Bump SO-name for Fedora >= 30 and enable compat package (#1666033)
- Add distribution README file
- Update description of the compat package
- Conditionally remove non-built hashing methods from description
* Sun Dec 23 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-3
- Remove architecture bits from Recommends
* Sun Dec 23 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-2
- Update summary
* Sat Dec 22 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-1
- New upstream release
* Thu Dec 6 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.1-1
- New upstream release
* Tue Dec 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.0-5
- Sync -fno-plt patch with upstream commit
* Tue Dec 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.0-4
- Backport upstream commit to fix a memory leak from a static pointer
* Tue Dec 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.0-3
- Backport upstream PR to build with -fno-plt optimization
* Mon Nov 26 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.0-2
- Backport upstream commit to use a safer strcpy for the NT method
- Backport upstream generating base64 encoded output for NT gensalt
- Backport upstream commit to require less rbytes for NT gensalt
- Backport upstream commit to test incremental hmac-sha256 computation
- Add Recommends: mkpasswd for Fedora >= 30
* Tue Nov 20 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.0-1
- New upstream release
* Wed Nov 14 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.4-1
- New upstream release
* Wed Nov 14 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.3-4
- Bump release for proper obsoletion of former common sub-package
* Wed Nov 14 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.3-3
- Add two upstream patches with minor fixes
- Add HMAC checksum file for the static library
- Drop the common sub-package
- Some spec-file optimizations
* Tue Nov 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.3-2
- Add a patch to define crypt_gensalt_r as macro, so applications
link the identical crypt_gensalt_rn directly
* Sun Nov 11 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.3-1
- New upstream release
* Sun Nov 11 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.2-1
- New upstream release
* Sun Nov 11 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.1-2
- Backport two patches from upstream fixing the gensalt function for
NT to properly terminate its returned output
* Sat Nov 10 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.1-1
- New upstream release
* Sat Nov 10 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.0-1
- New upstream release
* Fri Oct 26 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.3-1
- New upstream release
* Thu Oct 25 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.2-2
- Add patch updating to recent development version
- Run valgrind-memcheck
- Use bootstrap script
* Thu Oct 18 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.2-1
- New upstream release
* Mon Oct 1 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.1-3
- Drop compat-devel package
- Set configure options from globals
* Sun Sep 30 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.1-2
- Build out-of-tree
- Split off noarch-bits into common sub-package
- Update %description
- Prepare to remove legacy API from library and to provide a compatibilty
package for the legacy API
* Sat Sep 29 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.1-1
- New upstream release
- Add new manpages
* Sat Sep 29 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.0-1
- New upstream release
* Fri Aug 24 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.2-1
- New upstream release
* Wed Aug 8 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.1-4
- Move *.3 manpages to devel subpackage (#1613762)
- Add needed Conflicts: man-pages < 4.15-3
* Wed Aug 8 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.1-3
- Make crypt{,_r} return NULL on failure (#1611784)
* Sat Aug 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.1-2
- Add manpages for crypt{,_r,_ra}.3 (#1610307)
* Wed Aug 1 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.1-1
- New upstream release
* Fri Jul 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.0-1
- New upstream release
* Fri Jul 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.0.1-6
- Make testsuite fail on error again
- Update patch0 with more upstream fixes
* Fri Jul 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.0.1-5
- Add patch to update to recent development branch
- Re-enable SUNMD5 support as it is BSD licensed now
- Build compatibility symbols for glibc only
- Skip failing testsuite once
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Jun 29 2018 Florian Weimer <fweimer(a)redhat.com> - 4.0.1-3
- Remove CDDL from license list (#1592445)
* Fri Jun 29 2018 Florian Weimer <fweimer(a)redhat.com> - 4.0.1-2
- Remove SUNMD5 support (#1592445)
* Wed May 16 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.0.1-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1669278 - libxcrypt-4.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1669278
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-22850fa97e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------