shadow: Update to version 4.14.2

  - Update from version 4.13 to 4.14.2
- Update of rootfile not required
- Supress installation of groups patch updated for changed layout of source tarball
- Changelog
    4.14.2:
	    libshadow:
	        Fix build with musl libc.
	        Avoid NULL dereference.
	        Update utmp at an initial login
	    useradd(8):
	        Set proper SELinux labels for def_usrtemplate
	    Manual:
	        Document --prefix in chage(1), chpasswd(8), and passwd(1)
    4.14.1:
	    Build system:
	        Merge libshadow and libmisc into a single libshadow. This fixes
	        problems in the linker, which were reported at least in Gentoo.
    4.14.0
      This release includes some steps toward preparing for the Y2038 (e.g. removing
      lastlog conditionally), a great deal of removal of obsolete function checks (like
      rmdir), and overhaul of some string manipulation functions, of which there is
      more to come. And a great deal more. The abbreviated git log follows:
	Serge Hallyn: configure.ac: check for strlcpy
	Michael Vetter: Remove intree website
	Serge Hallyn: 4.14.0-rc4 pre-release
	Serge Hallyn: Releases: add etc/shadow-maint to distfiles
	Serge Hallyn: 4.14.0-rc3
	Iker Pedrosa: libmisc: include freezero
	Iker Pedrosa: libmisc: add freezero source code
	Iker Pedrosa: libmisc: add readpassphrase source code
	Iker Pedrosa: configure: add with-libbsd option
	Iker Pedrosa: man: include shadow-man.xsl in tarball
	Iker Pedrosa: man: include its.rules in tarball
	Iker Pedrosa: autogen: enable lastlog build
	Christian Göttsche: Add wrapper for write(2)
	Serge Hallyn: tag 4.14.0-rc2
	Michael Vetter: Add new files to libmisc_la_SOURCES
	Serge Hallyn: Add a make dist CI test
	Serge Hallyn: 4.14.0-rc1
	Serge Hallyn: remove xmalloc.c from POTFILES.in
	Iker Pedrosa: logoutd: add missing <utmp.h> include
	Iker Pedrosa: CI: compile old utmp interface in Fedora
	Iker Pedrosa: src: add SELINUX library
	Iker Pedrosa: libmisc: conditionally compile utmp.c and logind.c
	Iker Pedrosa: lib: replace USER_NAME_MAX_LENGTH macro
	Iker Pedrosa: libmisc: call active_sessions_count()
	Iker Pedrosa: libmisc: implement active_sessions_count()
	Iker Pedrosa: utmp: update update_utmp()
	Iker Pedrosa: utmp: move update_utmp
	Iker Pedrosa: utmp: move failtmp()
	Iker Pedrosa: libmisc: implement get_session_host()
	Iker Pedrosa: configure: new option enable-logind
	xiongshenglan: shadow userdel: add the adaptation to the busybox ps in 01-kill_user_procs.sh
	Michael Vetter: chsh: warn if root sets a shell not listed in /etc/shells
	Michael Vetter: doc: mention ci workflow file to learn about deps
	Serge Hallyn: man/po/Makefile: add a comment to shadow-man-pages.pot
	Vegard Nossum: newgrp: fix potential string injection
	Todd Zullinger: lastlog: fix alignment of Latest header
	Iker Pedrosa: configure: fix lastlog check
	Alan D. Salewski: subuid.5: reference newusers(8) rather than newusers(1)
	Iker Pedrosa: CI: build lastlog in Fedora
	Iker Pedrosa: man: conditionally build lastlog documentation
	Iker Pedrosa: usermod: conditionally build lastlog functionality
	Iker Pedrosa: useradd: conditionally build lastlog functionality
	Iker Pedrosa: login: conditionally build lastlog functionality
	Iker Pedrosa: lastlog: stop building by default
	Iker Pedrosa: CI: update debian repos
	Bernd Kuhls: Fix yescrypt support
	Jeffrey Bencteux: chgpasswd: fix segfault in command-line options
	Alejandro Colomar: gpasswd(1): Fix password leak
	Alejandro Colomar: src/useradd.c: create_mail(): Cosmetic
	Alejandro Colomar: src/useradd.c: create_home(): Cosmetic
	Alejandro Colomar: src/useradd.c: create_home(): Cosmetic
	Alejandro Colomar: src/useradd.c: create_home(): Cosmetic
	Alejandro Colomar: src/useradd.c: close_group_files(): Cosmetic
	Alejandro Colomar: src/useradd.c: check_uid_range(): Cosmetic
	Jaroslav Jindrak: build: link passwd, chpasswd and chage against libdl
	Jaroslav Jindrak: configure: check whether fgetpwent_r is available before marking xprefix_getpwnam_r as reentrant
	Jaroslav Jindrak: passwd: fall back to non-PAM code when prefix is used
	Jaroslav Jindrak: chpasswd: fall back to non-PAM code when prefix is used
	Jaroslav Jindrak: chpasswd: add --prefix/-P options
	Jaroslav Jindrak: chage: add --prefix/-P options
	Jaroslav Jindrak: passwd: Respect --prefix/-P options
	Michael Vetter: prefix: add prefix support
	Iker Pedrosa: strtoday: remove unnecessary cast
	Alejandro Colomar: Use temporary variable
	Alejandro Colomar: realloc(NULL, ...) is equivalent to malloc(...)
	Alejandro Colomar: Simplify allocation APIs
	Christian Göttsche: Drop alloca(3)
	Christian Göttsche: usermod: fix off-by-one issues
	Alejandro Colomar: libmisc/csrand.c: Update comments
	Alejandro Colomar: lib/nss.c: Fix use of invalid p
	Alejandro Colomar: lib/nss.c: Fix use of uninitialized p
	Alejandro Colomar: Centralize error handling
	Alejandro Colomar: Second verse, it gets worse; it gets no better than this
	Alejandro Colomar: ROFL: Rolling on the floor looping
	Alejandro Colomar: This ain't no loop
	Iker Pedrosa: newusers: Improve error message
	Martin Kletzander: ch(g)passwd: Check selinux permissions upon startup
	Skyler Ferrante: Check if crypt_method null before dereferencing
	Alejandro Colomar: xgetXXbyYY: Simplify elifs
	Alejandro Colomar: xgetXXbyYY: Centralize error handling
	Alejandro Colomar: xgetXXbyYY: tfix
	Samanta Navarro: xgetXXbyYY: Avoid duplicated error handling block
	Samanta Navarro: xgetXXbyYY: Handle DUP_FUNCTION failure
	Serge Hallyn: sub_[ug]id_{add,remove}: fix return values
	Martin Kletzander: usermod: Small optimization using memmove for password unlock
	Alejandro Colomar: Reorder logic to improve comprehensibility
	Alejandro Colomar: newusers: Fail early
	Alejandro Colomar: newusers: Add missing error handling
	Samanta Navarro: libmisc: Use safer chroot/chdir sequence
	Samanta Navarro: su: Prevent stack overflow in check_perms
	Samanta Navarro: subsystem: Prevent endless loop
	Serge Hallyn: def_load: avoid NULL deref
	Serge Hallyn: def_load: split the econf from non-econf definition
	Tobias Stoeckmann: Plug econf memory leaks
	Samanta Navarro: chsh: Verify that login shell path is absolute
	Samanta Navarro: process_prefix_flag: Drop privileges
	bubu: Update French translations
	Samanta Navarro: get_pid.c: Use tighter validation checks
	Markus Hiereth: replace inadequate German translation of login error message
	Markus Hiereth: Update German translations
	Samanta Navarro: Remove some static char arrays
	Samanta Navarro: commonio: Use do_lock_file again
	Serge Hallyn: Fix broken docbook translations
	ed neville: open with O_CREAT when lock path does not exist
	Samanta Navarro: commonio_open: Remove fcntl call
	Samanta Navarro: commonio_lock_nowait: Remove deprecated code
	Samanta Navarro: login_prompt: Simplify login_prompt API
	Samanta Navarro: login_prompt: Use _exit in signal handler
	Samanta Navarro: login_prompt: Do not parse environment variables
	Samanta Navarro: libmisc/yesno.c: Fix regression
	Alejandro Colomar: libmisc, man: Drop old check and advice for complex character sets in passwords
	Christian Göttsche: semanage: disconnect to free libsemanage internals
	Christian Göttsche: commonio: free removed database entries
	ed neville: run_parts for groupadd and groupdel
	lilinjie: fix typos
	Alejandro Colomar: libmisc/yesno.c: Use getline(3) and rpmatch(3)
	Samanta Navarro: newgrp/useradd: always set SIGCHLD to default
	Serge Hallyn: Update AUTHORS to add Marek Michałkiewicz
	Samanta Navarro: Read whole line in yes_or_no
	Christian Göttsche: useradd/usermod: add --selinux-range argument
	Alejandro Colomar: CI: Make build logs more readable
	Iker Pedrosa: ci: remove explicit fedora dependencies
	Iker Pedrosa: README: add reference to contribution guidelines
	Iker Pedrosa: doc: add contributions introduction
	Iker Pedrosa: doc: add license
	Iker Pedrosa: doc: add releases
	Iker Pedrosa: doc: add Continuous Integration
	Iker Pedrosa: doc: add tests
	Iker Pedrosa: doc: add coding style
	Iker Pedrosa: doc: add build & install
	Serge Hallyn: trivial: vipw.8: fix grammar
	Christian Göttsche: sssd: skip flushing if executable does not exist
	Christian Göttsche: Overhaul valid_field()
	Martin Kletzander: semanage: Do not set default SELinux range
	Michael Vetter: Fix typo in groupadd usage
	Christian Göttsche: ci: update Differential ShellCheck
	tomspiderlabs: Added control character check
	Mike Gilbert: usermod: respect --prefix for --gid option
	Alejandro Colomar: Fix su(1) silent truncation
	Alejandro Colomar: Simplify is_my_tty()
	Alejandro Colomar: Fix is_my_tty() buffer overrun
	Alejandro Colomar: Add STRLEN(): a constexpr strlen(3) for string literals
	Alejandro Colomar: Fix crash with large timestamps
	Paul Eggert: Prefer strcpy(3) to strlcpy(3) when either works
	Paul Eggert: Fix change_field() buffer underrun
	Paul Eggert: Omit unneeded test in change_field()
	Paul Eggert: Simplify change_field() by using strcpy
	skyler-ferrante: Fix null dereference in basename
	Iker Pedrosa: CI: script for local container build
	Iker Pedrosa: CI: build project in containers
	Iker Pedrosa: container: add fedora
	Iker Pedrosa: container: add debian
	Iker Pedrosa: container: add alpine
	Iker Pedrosa: SECURITY.md: add Iker Pedrosa
	Christian Göttsche: selinux: use type safe function pointer assignment
	Christian Göttsche: Use strict prototype in definition
	Vinícius dos Santos Oliveira: Add .editorconfig
	Serge Hallyn: run_some: fix shellcheck warning
	Serge Hallyn: fail on any run_some test failure
	Serge Hallyn: ignore first test in run_some
	Serge Hallyn: swap first two tests - does the first one still fail?
	Serge Hallyn: tests: remove some github runner PATH tweaking
	Alejandro Colomar: tests: Support git-worktree(1)
	Serge Hallyn: tests: newuidmap and newgidmap: update expected fail message
	Serge Hallyn: libsubid: include alloc.h
	Serge Hallyn: run_some: log stderr
	Vinícius dos Santos Oliveira: Validate fds created by the user
	Serge Hallyn: get_pidfd_from_fd: return -1 on error, not 0
	Serge Hallyn: g-h-a workflow: workaround
	Serge Hallyn: Fix regression in some translation strings
	Iker Pedrosa: lib: bit_ceil_wrapul(): stop recursion
	Iker Pedrosa: lib: define ULONG_WIDTH if non-existent
	maqi: Update translation
	Serge Hallyn: newuidmap and newgidmap: support passing pid as fd
	Alejandro Colomar: Fix use-after-free of pointer after realloc(3)
	Alejandro Colomar: Use safer allocation macros
	Alejandro Colomar: libmisc: Add safer allocation macros
	Alejandro Colomar: Use xreallocarray() instead of its pattern
	Alejandro Colomar: Use reallocarrayf() instead of its pattern

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/shadow                                    |   9 +-
 ...4.13-suppress_installation_of_groups.patch | 267 ------------------
 ...14.2-suppress_installation_of_groups.patch | 259 +++++++++++++++++
 3 files changed, 264 insertions(+), 271 deletions(-)
 delete mode 100644 src/patches/shadow-4.13-suppress_installation_of_groups.patch
 create mode 100644 src/patches/shadow-4.14.2-suppress_installation_of_groups.patch

Message ID	20231110105910.11113-7-adolf.belka@ipfire.org
State	Staged
Commit	c012d7c0b4fb1078d1b9ccfe0742251fd51419a4
Headers	From: Adolf Belka <adolf.belka@ipfire.org> To: development@lists.ipfire.org Subject: [PATCH] shadow: Update to version 4.14.2 Date: Fri, 10 Nov 2023 11:59:04 +0100 Message-ID: <20231110105910.11113-7-adolf.belka@ipfire.org> In-Reply-To: <20231110105910.11113-1-adolf.belka@ipfire.org> References: <20231110105910.11113-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Message-ID-Hash: N7526GWJQ2NKOPU6SLIPOMWF5D4Z2CEH Precedence: list Archived-At: <https://lists.ipfire.org/mailman3/hyperkitty/list/development@lists.ipfire.org/message/N7526GWJQ2NKOPU6SLIPOMWF5D4Z2CEH/>
Series	shadow: Update to version 4.14.2 \| shadow: Update to version 4.14.2

shadow: Update to version 4.14.2

Commit Message

Patch