From patchwork Tue Apr 28 12:11:10 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 9748 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4g4fRm3yhWz3x6x for ; Tue, 28 Apr 2026 12:11:32 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [IPv6:2001:678:b28::201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "E8" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4g4fRm1MyZz7GY for ; Tue, 28 Apr 2026 12:11:32 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4g4fRd2yrPz377S for ; Tue, 28 Apr 2026 12:11:25 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4g4fRY1Scmz34Rr for ; Tue, 28 Apr 2026 12:11:21 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4g4fRX0HK6z7FQ; Tue, 28 Apr 2026 12:11:20 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1777378280; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=D75NxfJdZCeUwkgds8I3+Dak6EnYVnYs8jxRcRk/JPY=; b=XQjPuC9I9TBP+oE3Go3ELmhwPi4DKZ1qvf5I+Ze0UE82gGT8Br3nA5VJNqkDvsKIkisKXR N8mnIC1DtOmVQWBA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1777378280; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=D75NxfJdZCeUwkgds8I3+Dak6EnYVnYs8jxRcRk/JPY=; b=eD+BaKj28J3dtiCgXruEKxgP1c0Tu7nsnvYKjmGuzfeYiDIV2LY0+hcIXE69REQ7uiveJG 4Bx7llBcTanDiUFQaHFZ+6kKMaBx/w4LWLtLXIeay02kITLm+Q5nnW177SRM9niIsH72X7 j0ePJEYpjiRAbQdMML1IZkdqLF++2zclUzFHYi0LgVYSbu1Vqyn5C+uVGMjYVwgz6ti6o9 uPZTbaAJZX31l9r2l9qy0tTPh4JKIa31+GV1hgJGgiNNaJyP1xAapv7wtIAoWr5OkBe6UG Q/HhnXukpzU7cpK+4TMoymPgHAfezBfSQPZP0wRRAOPzJ1Itj2JWP/u8aIBk1w== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] oath-toolkit: Update to version 2.6.14 Date: Tue, 28 Apr 2026 14:11:10 +0200 Message-ID: <20260428121111.1146161-10-adolf.belka@ipfire.org> In-Reply-To: <20260428121111.1146161-1-adolf.belka@ipfire.org> References: <20260428121111.1146161-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 2.6.13 to 2.6.14 - No change to rootfile - Changelog 2.6.14 ** pam_oath: Support null_usersfile_okay parameter. The argument no_usersfile_okay forces the module to act as if the user is not present in the config, if the config file does not exist. This has security implications only use if you know what you are doing. E.g. if the file is in a mount like home and that fails to be mounted, then this will succeed even if the OTP if configured for that user. Patch by Luna, Jan Zerebecki, and Miika Alikirri; see . ** pam_oath README: Suggest `KbdInteractiveAuthentication`. Instead of deprecated `ChallengeResponseAuthentication`. Patch by lvgenggeng, see . ** Various build fixes including updated gnulib files. Fixes building with glibc 2.43, see . Signed-off-by: Adolf Belka --- lfs/oath-toolkit | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/lfs/oath-toolkit b/lfs/oath-toolkit index 70aa20256..3834d010d 100644 --- a/lfs/oath-toolkit +++ b/lfs/oath-toolkit @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2022-2025 IPFire Team # +# Copyright (C) 2022-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.6.13 +VER = 2.6.14 THISAPP = oath-toolkit-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 055014039c611c382ba1cf902482c22df765636e7393e0a3f5acb0811a6be55b6b9dc7fc269d31705081bf02c240589d4fecdeb79fd151082a902e09597e7303 +$(DL_FILE)_BLAKE2 = 0d20e9d60350268080abd245b47bd84ae426a0007cba8af049994a1f6a5f9153220a570f3ff93432a8c369e8becc342011cea46cf3c75cad2e3f8a70107af2e3 install : $(TARGET) @@ -72,7 +72,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && find . -name wchar.in.h | xargs sed -i 's/^\(_GL_EXTERN_C wchar_t \*\)wmemchr (/\1(wmemchr) (/' cd $(DIR_APP) && find . -name stdlib.in.h | xargs sed -i 's/^\(_GL_EXTERN_C void \*\)bsearch (/\1(bsearch) (/' - cd $(DIR_APP) && ./configure --prefix=/usr + cd $(DIR_APP) && ./configure \ + --prefix=/usr cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE) cd $(DIR_APP) && make install @rm -rf $(DIR_APP)