%global _hardened_build 1 Name: ppp Version: 2.4.9 Release: 10%{?dist} Summary: The Point-to-Point Protocol daemon License: BSD and LGPLv2+ and GPLv2+ and Public Domain URL: http://www.samba.org/ppp Source0: https://github.com/paulusmack/ppp/archive/ppp-%{version}.tar.gz Source1: ppp-pam.conf Source2: ppp-logrotate.conf Source3: ppp-tmpfiles.conf Source4: ip-down Source5: ip-down.ipv6to4 Source6: ip-up Source7: ip-up.ipv6to4 Source8: ipv6-down Source9: ipv6-up Source10: ifup-ppp Source11: ifdown-ppp Source12: ppp-watch.tar.xz # Fedora-specific Patch0002: ppp-2.4.9-config.patch Patch0004: 0004-doc-add-configuration-samples.patch Patch0005: ppp-2.4.9-build-sys-don-t-hardcode-LIBDIR-but-set-it-according.patch Patch0006: 0006-scritps-use-change_resolv_conf-function.patch Patch0011: 0011-build-sys-don-t-put-connect-errors-log-to-etc-ppp.patch Patch0012: ppp-2.4.8-pppd-we-don-t-want-to-accidentally-leak-fds.patch Patch0013: ppp-2.4.9-everywhere-O_CLOEXEC-harder.patch Patch0014: 0014-everywhere-use-SOCK_CLOEXEC-when-creating-socket.patch Patch0015: 0015-pppd-move-pppd-database-to-var-run-ppp.patch Patch0016: 0016-rp-pppoe-add-manpage-for-pppoe-discovery.patch Patch0018: 0018-scritps-fix-ip-up.local-sample.patch Patch0023: 0023-build-sys-install-rp-pppoe-plugin-files-with-standar.patch Patch0024: 0024-build-sys-install-pppoatm-plugin-files-with-standard.patch Patch0025: ppp-2.4.8-pppd-install-pppd-binary-using-standard-perms-755.patch Patch0026: ppp-2.4.9-configure-cflags-allow-commas.patch # https://github.com/ppp-project/ppp/commit/d7e62a8499c4032d79e05afbd8fd3efd51c5b148 Patch0027: ppp-2.4.9-pppd-eap-Fix-bug-causing-incorrect-response-length-3.patch # https://github.com/ppp-project/ppp/commit/e609ed8bb62e4648568eaa49fbbc858dfda6d122 Patch0028: ppp-2.4.9-pppd-Fix-logical-error-in-comparing-valid-encryption.patch # https://github.com/ppp-project/ppp/pull/267/commits/6bfe06b9428a60eb637d5450d65dd3932fe5a83f Patch0029: ppp-2.4.9-pppd-Expose-the-MPPE-keys-generated-through-an-API-2.patch # https://github.com/ppp-project/ppp/commit/a75fb7b198eed50d769c80c36629f38346882cbf Patch0030: ppp-2.4.9-CVE-2022-4603.patch BuildRequires: make BuildRequires: gcc BuildRequires: pam-devel, libpcap-devel, systemd, systemd-devel, glib2-devel BuildRequires: openssl-devel Requires: glibc >= 2.0.6, /etc/pam.d/system-auth, libpcap >= 14:0.8.3-6, systemd Requires(pre): /usr/bin/getent Requires(pre): /usr/sbin/groupadd %description The ppp package contains the PPP (Point-to-Point Protocol) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an ISP (Internet Service Provider) or other organization over a modem and phone line. %package -n network-scripts-%{name} Summary: PPP legacy network service support Requires: network-scripts Supplements: (%{name} and network-scripts) %description -n network-scripts-%{name} This provides the ifup and ifdown scripts for use with the legacy network service. %package devel Summary: Headers for ppp plugin development Requires: %{name}%{?_isa} = %{version}-%{release} %description devel This package contains the header files for building plugins for ppp. %prep %autosetup -p1 -n %{name}-%{name}-%{version} tar -xJf %{SOURCE12} %build %configure --cflags="$RPM_OPT_FLAGS -fPIC -Wall -fno-strict-aliasing" %{make_build} LDFLAGS="%{?build_ldflags} -pie" %{make_build} -C ppp-watch LDFLAGS="%{?build_ldflags} -pie" %install make INSTROOT=%{buildroot} install install-etcppp find scripts -type f | xargs chmod a-x make ROOT=%{buildroot} -C ppp-watch install # create log files dir install -d %{buildroot}%{_localstatedir}/log/ppp # install pam config install -d %{buildroot}%{_sysconfdir}/pam.d install -m 644 %{SOURCE1} %{buildroot}%{_sysconfdir}/pam.d/ppp # install logrotate script install -d %{buildroot}%{_sysconfdir}/logrotate.d install -m 644 -p %{SOURCE2} %{buildroot}%{_sysconfdir}/logrotate.d/ppp # install tmpfiles drop-in install -d %{buildroot}%{_tmpfilesdir} install -m 644 -p %{SOURCE3} %{buildroot}%{_tmpfilesdir}/ppp.conf # install scripts (previously owned by initscripts package) install -d %{buildroot}%{_sysconfdir}/ppp install -p %{SOURCE4} %{buildroot}%{_sysconfdir}/ppp/ip-down install -p %{SOURCE5} %{buildroot}%{_sysconfdir}/ppp/ip-down.ipv6to4 install -p %{SOURCE6} %{buildroot}%{_sysconfdir}/ppp/ip-up install -p %{SOURCE7} %{buildroot}%{_sysconfdir}/ppp/ip-up.ipv6to4 install -p %{SOURCE8} %{buildroot}%{_sysconfdir}/ppp/ipv6-down install -p %{SOURCE9} %{buildroot}%{_sysconfdir}/ppp/ipv6-up install -d %{buildroot}%{_sysconfdir}/sysconfig/network-scripts/ install -p %{SOURCE10} %{buildroot}%{_sysconfdir}/sysconfig/network-scripts/ifup-ppp install -p %{SOURCE11} %{buildroot}%{_sysconfdir}/sysconfig/network-scripts/ifdown-ppp # ghosts mkdir -p %{buildroot}%{_rundir}/ppp %pre /usr/bin/getent group dip >/dev/null 2>&1 || /usr/sbin/groupadd -r -g 40 dip >/dev/null 2>&1 || : %post %tmpfiles_create ppp.conf %files %doc FAQ README README.cbcp README.linux README.MPPE README.MSCHAP80 README.MSCHAP81 README.pwfd README.pppoe scripts sample README.eap-tls %{_sbindir}/chat %{_sbindir}/pppd %{_sbindir}/pppdump %{_sbindir}/pppoe-discovery %{_sbindir}/pppstats %{_sbindir}/ppp-watch %dir %{_sysconfdir}/ppp %{_sysconfdir}/ppp/ip-up %{_sysconfdir}/ppp/ip-down %{_sysconfdir}/ppp/ip-up.ipv6to4 %{_sysconfdir}/ppp/ip-down.ipv6to4 %{_sysconfdir}/ppp/ipv6-up %{_sysconfdir}/ppp/ipv6-down %{_mandir}/man8/chat.8* %{_mandir}/man8/pppd.8* %{_mandir}/man8/pppdump.8* %{_mandir}/man8/pppd-radattr.8* %{_mandir}/man8/pppd-radius.8* %{_mandir}/man8/pppstats.8* %{_mandir}/man8/pppoe-discovery.8* %{_mandir}/man8/ppp-watch.8* %{_libdir}/pppd %ghost %dir %{_rundir}/ppp %dir %{_sysconfdir}/logrotate.d %attr(700, root, root) %dir %{_localstatedir}/log/ppp %config(noreplace) %{_sysconfdir}/ppp/eaptls-client %config(noreplace) %{_sysconfdir}/ppp/eaptls-server %config(noreplace) %{_sysconfdir}/ppp/chap-secrets %config(noreplace) %{_sysconfdir}/ppp/options %config(noreplace) %{_sysconfdir}/ppp/pap-secrets %config(noreplace) %{_sysconfdir}/pam.d/ppp %config(noreplace) %{_sysconfdir}/logrotate.d/ppp %{_tmpfilesdir}/ppp.conf %files -n network-scripts-%{name} %{_sysconfdir}/sysconfig/network-scripts/ifdown-ppp %{_sysconfdir}/sysconfig/network-scripts/ifup-ppp %files devel %{_includedir}/pppd %doc PLUGINS %changelog * Thu Jan 4 2024 Jaroslav Škarvada - 2.4.9-10 - Fixed improper validation of array index of the component pppdump Resolves: CVE-2022-4603 * Fri Jan 20 2023 Fedora Release Engineering - 2.4.9-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering - 2.4.9-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Apr 05 2022 Marcin Zajaczkowski - 2.4.9-7 - Backport patches from master for SSTP to connect using EAP-TLS to Azure VnetGWay and Windows RAS server * Fri Jan 21 2022 Fedora Release Engineering - 2.4.9-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Tue Sep 14 2021 Sahana Prasad - 2.4.9-5 - Rebuilt with OpenSSL 3.0.0 * Fri Jul 23 2021 Fedora Release Engineering - 2.4.9-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Mon Mar 8 2021 Jaroslav Škarvada - 2.4.9-3 - Keep lock files in /var/lock (https://github.com/ppp-project/ppp/pull/227) * Wed Jan 27 2021 Fedora Release Engineering - 2.4.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jan 5 2021 Jaroslav Škarvada - 2.4.9-1 - New version Resolves: rhbz#1912617 * Mon Aug 10 2020 Jaroslav Škarvada - 2.4.8-8 - Added workaround for Windows Server 2019 Resolves: rhbz#1867047 * Tue Jul 28 2020 Fedora Release Engineering - 2.4.8-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Thu May 21 2020 Jaroslav Škarvada - 2.4.8-6 - Added missing options to man pages * Tue Apr 7 2020 Jaroslav Škarvada - 2.4.8-5 - Updated EAP-TLS patch to v1.300 * Mon Apr 6 2020 Jaroslav Škarvada - 2.4.8-4 - Updated EAP-TLS patch to v1.201 * Fri Feb 28 2020 Tom Stellard - 2.4.8-3 - Use make_build macro - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make * Wed Feb 26 2020 Jaroslav Škarvada - 2.4.8-2 - Fixed ghost directories verification * Fri Feb 21 2020 Jaroslav Škarvada - 2.4.8-1 - New version - Changed sources to github - Dropped 0028-pppoe-include-netinet-in.h-before-linux-in.h, ppp-2.4.7-DES-openssl, ppp-2.4.7-honor-ldflags, ppp-2.4.7-coverity-scan-fixes patches (all upstreamed) - Fixed buffer overflow in the eap_request and eap_response functions Resolves: CVE-2020-8597 * Thu Jan 30 2020 Fedora Release Engineering - 2.4.7-33 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Jul 26 2019 Fedora Release Engineering - 2.4.7-32 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sat Feb 02 2019 Fedora Release Engineering - 2.4.7-31 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Jan 14 2019 Björn Esser - 2.4.7-30 - Rebuilt for libcrypt.so.2 (#1666033) * Mon Dec 3 2018 Jaroslav Škarvada - 2.4.7-29 - Fixed some issues found by coverity scan * Tue Nov 20 2018 Jaroslav Škarvada - 2.4.7-28 - Fixed network scripts related regression caused by release 26 * Mon Nov 5 2018 Jaroslav Škarvada - 2.4.7-27 - Updated EAP-TLS patch to v1.102 * Tue Jul 24 2018 Lubomir Rintel - 2.4.7-26 - Split out the network-scripts * Fri Jul 13 2018 Fedora Release Engineering - 2.4.7-25 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Sat Jun 30 2018 Peter Robinson 2.4.7-24 - Remove group/defattr, minor spec cleanups * Wed Jun 20 2018 Jaroslav Škarvada - 2.4.7-23 - Replaced initscripts requirement by the network-scripts Resolves: rhbz#1592384 * Tue Jun 5 2018 Jaroslav Škarvada - 2.4.7-22 - Updated EAP-TLS patch to v1.101 Resolves: CVE-2018-11574 * Mon Apr 9 2018 Jaroslav Škarvada - 2.4.7-21 - Link with -E not to break plugins Resolves: rhbz#1564459 * Fri Apr 6 2018 Jaroslav Škarvada - 2.4.7-20 - Also build all DSOs with distro's LDFLAGS Related: rhbz#1563157 * Wed Apr 4 2018 Jaroslav Škarvada - 2.4.7-19 - Build with distro's LDFLAGS Resolves: rhbz#1563157 * Tue Mar 27 2018 Jaroslav Škarvada - 2.4.7-18 - Used openssl for the DES instead of the libcrypt / glibc Resolves: rhbz#1556132 * Fri Feb 09 2018 Igor Gnatenko - 2.4.7-17 - Escape macros in %%changelog * Fri Feb 09 2018 Fedora Release Engineering - 2.4.7-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Sat Jan 20 2018 Björn Esser - 2.4.7-15 - Rebuilt for switch to libxcrypt * Mon Aug 21 2017 Jaroslav Škarvada - 2.4.7-14 - EAP-TLS patch updated to version 0.999 - Switched to openssl-1.1 * Thu Aug 03 2017 Fedora Release Engineering - 2.4.7-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering - 2.4.7-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Sat Feb 11 2017 Fedora Release Engineering - 2.4.7-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Sat Dec 10 2016 Lubomir Rintel - 2.4.7-10 - Fix FTBFS * Thu Feb 04 2016 Fedora Release Engineering - 2.4.7-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Thu Jun 18 2015 Fedora Release Engineering - 2.4.7-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Mon Feb 09 2015 Michal Sekletar - 2.4.7-7 - prevent running into issues caused by undefined behavior (pointers of incompatible types aliasing the same object) * Wed Dec 10 2014 Michal Sekletar - 2.4.7-6 - fix logical expression in eap_client_active macro (#1023620) * Wed Nov 19 2014 Michal Sekletar - 2.4.7-5 - don't mark logrotate config as executable (#1164435) * Tue Sep 2 2014 Peter Robinson 2.4.7-4 - devel package should depend on base package as per guidelines * Tue Aug 19 2014 Michal Sekletar - 2.4.7-3 - don't mark tmpfiles dropin as executable (#1131293) * Sun Aug 17 2014 Fedora Release Engineering - 2.4.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Mon Aug 11 2014 Michal Sekletar - 2.4.7-1 - rebase to 2.4.7. Includes fix for CVE-2014-3158 (#1128716) * Fri Jun 20 2014 Michal Sekletar - 2.4.6-6 - version 0.997 of EAP-TLS patch * Sat Jun 07 2014 Fedora Release Engineering - 2.4.6-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed Apr 16 2014 Michal Sekletar - 2.4.6-4 - move ppp initscripts to ppp package (#1088220) * Mon Apr 14 2014 Michal Sekletar - 2.4.6-3 - don't require perl and expect (#1086846) * Thu Apr 10 2014 Michal Sekletar - 2.4.6-2 - rebase to 2.4.6 * Thu Aug 01 2013 Michal Sekletar - 2.4.5-33 - fix post installation scriptlet * Fri Jul 12 2013 Michal Sekletar - 2.4.5-32 - don't ship /var/lock/ppp in rpm payload and create it in %%post instead - fix installation of tmpfiles.d configuration - enable hardened build - fix bogus dates in changelog - compile all binaries with hardening flags * Thu Jul 04 2013 Michal Sekletar - 2.4.5-31 - fix possible NULL pointer dereferencing * Wed May 29 2013 Michal Sekletar - 2.4.5-30 - make radius plugin config parser less strict - resolves : #906913 * Wed Mar 20 2013 Michal Sekletar - 2.4.5-29 - Add creation of dip system group * Wed Mar 20 2013 Michal Sekletar - 2.4.5-28 - Add /etc/logrotate.d to files section since we no longer hard depend on logrotate * Wed Mar 20 2013 Michal Sekletar - 2.4.5-27 - Don't hard depend on logrotate * Thu Feb 14 2013 Fedora Release Engineering - 2.4.5-26 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Mon Nov 12 2012 Michal Sekletar - 2.4.5-25 - Resolves: #840190 - install configuration file in /usr/lib/tmpfiles.d * Tue Sep 11 2012 Michal Sekletar - 2.4.5-24 - Removed unnecessary dependency on systemd-unit * Sat Jul 21 2012 Fedora Release Engineering - 2.4.5-23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Tue May 29 2012 Michal Sekletar - Resolves: #817011 - fixed ppp-2.4.5-eaptls-mppe-0.99 patch, added variable definition * Mon May 21 2012 Michal Sekletar - Resolves: #817013 - fixed support for multilink channels in pppol2tp plugin * Thu May 17 2012 Michal Sekletar - Resolves: #771340 - fixed compilation of pppd without USE_EAPTLS * Sat Jan 14 2012 Fedora Release Engineering - 2.4.5-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Mon May 30 2011 Jiri Skala - 2.4.5-18 - fixes #682381 - hardcodes eth0 - fixes #708260 - SELinux is preventing access on the file LCK..ttyUSB3 * Mon Apr 04 2011 Jiri Skala - 2.4.5-17 - fixes #664282 and #664868 - man page fixes * Wed Feb 09 2011 Fedora Release Engineering - 2.4.5-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Thu Dec 02 2010 Jiri Skala - 2.4.5-15 - corrected tmpfiles.d conf - replaced remaining /etc by macros * Tue Nov 30 2010 Jiri Skala - 2.4.5-14 - fixes #656671 - /var/run and /var/lock on tmpfs - replaced paths /var /etc by macros * Tue Nov 16 2010 Jiri Skala - 2.4.5-13 - fixes #565294 - SELinux is preventing /sbin/consoletype access to a leaked packet_socket fd * Wed Sep 29 2010 Jiri Skala - 2.4.5-12 - fixes #637513 - Missing: README.eap-tls - updated to latest eaptls upstream - fixes #637886 - EAP-TLS not working with enabled PPP Multilink Framing option * Thu Aug 05 2010 Jiri Skala - 2.4.5-11 - fixes #617625 - FTBFS in ppp due to change in kernel-headers - fixes pppol2tp Makefile * Tue Jul 13 2010 Jiri Skala - 2.4.5-10 - fixes #613717 - Missing line in example script ip-up.local.add - removed /usr/kerberos/include from eaptls patch * Wed Jun 16 2010 Jiri Skala - 2.4.5-9 - included eap-tls patch * Wed Apr 07 2010 Jiri Skala - 2.4.5-8 - added pppoe-discovery(8) * Fri Mar 05 2010 Jiri Skala - 2.4.5-7 - removed duplicities from patches (ip-*.local.add) * Fri Feb 12 2010 Jiri Skala - 2.4.5-6 - fixes #560014 - SELinux is preventing /usr/sbin/pppd "read write" access on pppd2.tdb * Thu Feb 04 2010 Jiri Skala - 2.4.5-5 - one line correction in fd_leak patch * Wed Feb 03 2010 Jiri Skala - 2.4.5-4 - applied patch fd_leak * Fri Jan 22 2010 Jiri Skala - 2.4.5-3 - fixed some rpmlint complains * Sun Nov 22 2009 Jiri Skala - 2.4.5-2 - updated patches (make local succeeded, koji failed) * Fri Nov 20 2009 Jiri Skala - 2.4.5-1 - updated to latest upstream sources (#538058) * Thu Oct 08 2009 Jiri Skala - 2.4.4-14 - fixed #519042 - ppp package is missing URL in spec - fixed #524575 - ppp: no_strip patch modifies backup files created by previous patches * Wed Sep 16 2009 Tomas Mraz 2.4.4-13 - use password-auth common PAM configuration instead of system-auth * Sun Jul 26 2009 Fedora Release Engineering - 2.4.4-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Fri Mar 06 2009 - Jiri Skala 2.4.4-11 - fixed #488764 - package upgrade should not replace configuration files * Thu Feb 26 2009 Fedora Release Engineering - 2.4.4-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Thu Dec 11 2008 Jiri Skala 2.4.4.-9 - fixed #467004 PPP sometimes gets incorrect DNS servers for mobile broadband connections * Thu Aug 28 2008 Tom "spot" Callaway 2.4.4-8 - fix license tag * Tue May 13 2008 Martin Nagy 2.4.4-7 - add new speeds, patch by Jason Vas Dias (#446132) * Thu Mar 06 2008 Martin Nagy 2.4.4-6 - call closelog earlier (#222295) - fix ChapMS2 (#217076) - moving header files to new -devel package (#203542) * Mon Mar 03 2008 Martin Nagy 2.4.4-5 - put logs into /var/log/ppp (#118837) * Mon Feb 11 2008 Martin Nagy 2.4.4-4 - rebuild for gcc-4.3 * Fri Nov 09 2007 Martin Nagy 2.4.4-3 - removed undesired files from the package (#241753) * Fri Dec 1 2006 Thomas Woerner 2.4.4-2 - fixed build requirement for libpcap (#217661) * Wed Jul 19 2006 Thomas Woerner 2.4.4-1 - new version 2.4.4 with lots of fixes - fixed reesolv.conf docs (#165072) Thanks to Matt Domsch for the initial patch - enabled CBCP (#199278) * Wed Jul 12 2006 Jesse Keating - 2.4.3-6.2.2 - rebuild * Fri Feb 10 2006 Jesse Keating - 2.4.3-6.2.1 - bump again for double-long bug on ppc(64) * Tue Feb 07 2006 Jesse Keating - 2.4.3-6.2 - rebuilt for new gcc4.1 snapshot and glibc changes * Fri Dec 09 2005 Jesse Keating - rebuilt * Sat Nov 12 2005 Florian La Roche - rebuild * Fri Nov 4 2005 David Woodhouse 2.4.3-5 - Implement ipv6cp-accept-remote option * Fri Oct 7 2005 Tomas Mraz 2.4.3-4 - use include instead of pam_stack in pam config * Sun Jul 31 2005 Florian La Roche - rebuild for libpcap of the day * Tue Jul 19 2005 Thomas Woerner 2.4.3-2.1 - additional patch for the scripts, thanks to Sammy (#163621) * Tue Jul 19 2005 Thomas Woerner 2.4.3-2 - dropped all executable bits in scripts directory to prevent rpm requiring programs used in there * Mon Jul 18 2005 Thomas Woerner 2.4.3-1 - new version 2.4.3 - updated patches: make, lib64, dontwriteetc, fix, fix64, no_strip, radiusplugin - dropped patches: bpf, signal, pcap, pppoatm, pkgcheck * Tue Nov 2 2004 Thomas Woerner 2.4.2-7 - fixed out of bounds memory access, possible DOS * Thu Oct 7 2004 David Woodhouse 2.4.2-6.3 - Fix use of 'demand' without explicit MTU/MRU with pppoatm * Tue Oct 5 2004 David Woodhouse 2.4.2-6.2 - Link pppoatm plugin against libresolv. - Revert to linux-atm headers without the workaround for #127098 * Mon Oct 4 2004 David Woodhouse 2.4.2-6.1 - Include atmsap.h for pppoatm plugin. * Mon Oct 4 2004 David Woodhouse 2.4.2-6 - Add pppoatm plugin (#131555) * Thu Sep 16 2004 Thomas Woerner 2.4.2-5.1 - fixed subscript out of range (#132677) * Wed Sep 15 2004 Thomas Woerner 2.4.2-5 - example scripts are using change_resolv_conf to modify /etc/resolv.conf (#132482) - require new libpcap library (>= 0.8.3-6) with a fix for inbound/outbound filter processing - not using internal libpcap structures anymore, fixes inbound/outbound filter processing (#128053) * Fri Aug 6 2004 Thomas Woerner 2.4.2-4 - fixed signal handling (#29171) * Mon Jun 21 2004 Thomas Woerner 2.4.2-3.1 - fixed compiler warnings - fixed 64bit problem with ms-chap (#125501) - enabled pie again * Tue Jun 15 2004 Elliot Lee - rebuilt * Mon May 24 2004 David Woodhouse 2.4.2-2.3 - Enable IPv6 support. Disable PIE to avoid bogus Provides: * Fri May 14 2004 Thomas Woerner 2.4.2-2.2 - compiled pppd and chat PIE * Thu May 13 2004 Thomas Woerner 2.4.2-2.1 - added 'missingok' to ppp.logrotate (#122911) * Fri May 07 2004 Nils Philippsen 2.4.2-2 - don't write to /etc (#118837) * Wed Mar 10 2004 Nalin Dahyabhai 2.4.2-1 - update to 2.4.2 * Fri Feb 13 2004 Elliot Lee - rebuilt * Fri Sep 5 2003 Nalin Dahyabhai 2.4.1-15 - rebuild * Fri Sep 5 2003 Nalin Dahyabhai 2.4.1-14 - apply the patch from -11 * Wed Jun 04 2003 Elliot Lee - rebuilt * Tue Jun 3 2003 Nalin Dahyabhai 2.4.1-12 - rebuild * Tue Jun 3 2003 Nalin Dahyabhai 2.4.1-11 - check for libcrypt in the right directory at compile-time * Wed Jan 22 2003 Tim Powers - rebuilt * Thu Dec 12 2002 Elliot Lee 2.4.1-9 - Fix build failure by rebuilding * Tue Nov 19 2002 Nalin Dahyabhai 2.4.1-8 - rebuild - set x86_64 to use varargs the way s390 does * Mon Jul 22 2002 Florian La Roche - add patch: * Thu Jun 06 2002 Phil Knirsch - Fixed varargs problem for s390/s390x. * Fri Jun 21 2002 Tim Powers - automated rebuild * Sun May 26 2002 Tim Powers - automated rebuild * Fri May 17 2002 Nalin Dahyabhai 2.4.1-4 - rebuild in new environment * Wed Feb 27 2002 Nalin Dahyabhai 2.4.1-3 - revert cbcp patch, it's wrong (#55367) * Thu Aug 9 2001 Nalin Dahyabhai 2.4.1-2 - add buildprereq on pam-devel (#49559) - add patch to respond to CBCP LCP requests (#15738) - enable cbcp support at build-time - change the Copyright: tag to a License: tag * Wed May 23 2001 Nalin Dahyabhai 2.4.1-1 - update to 2.4.1 * Fri Dec 1 2000 Nalin Dahyabhai - rebuild in new environment * Thu Nov 9 2000 Nalin Dahyabhai - update to 2.4.0 * Wed Jul 12 2000 Prospector - automatic rebuild * Mon Jun 5 2000 Nalin Dahyabhai - move man pages to %%{_mandir} * Thu Jun 1 2000 Nalin Dahyabhai - change perms using defattr - modify PAM setup to use system-auth * Sun Mar 26 2000 Florian La Roche - change to root:root perms * Mon Mar 06 2000 Nalin Dahyabhai - reaper bugs verified as fixed - check pam_open_session result code (bug #9966) * Mon Feb 07 2000 Nalin Dahyabhai - take a shot at the wrong reaper bugs (#8153, #5290) * Thu Feb 03 2000 Nalin Dahyabhai - free ride through the build system (release 2) * Tue Jan 18 2000 Nalin Dahyabhai - Update to 2.3.11 * Sat Nov 06 1999 Michael K. Johnson - Better fix for both problems * Fri Nov 05 1999 Michael K. Johnson - fix for double-dial problem - fix for requiring a controlling terminal problem * Sun Sep 19 1999 Preston Brown - 2.3.10 bugfix release * Fri Aug 13 1999 Michael K. Johnson - New version 2.3.9 required for kernel 2.3.13 and will be required for new initscripts. auth patch removed; 2.3.9 does the same thing more readably than the previous patch. * Thu Jun 24 1999 Cristian Gafton - add pppdump * Fri Apr 09 1999 Cristian Gafton - force pppd use the glibc's logwtmp instead of implementing its own * Thu Apr 01 1999 Preston Brown - version 2.3.7 bugfix release * Tue Mar 23 1999 Cristian Gafton - version 2.3.6 * Mon Mar 22 1999 Michael Johnson - auth patch * Sun Mar 21 1999 Cristian Gafton - auto rebuild in the new build environment (release 3) * Thu Jan 07 1999 Cristian Gafton - build for glibc 2.1 * Fri Jun 5 1998 Jeff Johnson - updated to 2.3.5. * Tue May 19 1998 Prospector System - translations modified for de * Fri May 8 1998 Jakub Jelinek - make it run with kernels 2.1.100 and above. * Fri Apr 24 1998 Prospector System - translations modified for de, fr, tr * Wed Mar 18 1998 Cristian Gafton - requires glibc 2.0.6 or later * Wed Mar 18 1998 Michael K. Johnson - updated PAM patch to not turn off wtmp/utmp/syslog logging. * Wed Jan 7 1998 Cristian Gafton - added the /etc/pam.d config file - updated PAM patch to include session support * Tue Jan 6 1998 Cristian Gafton - updated to ppp-2.3.3, build against glibc-2.0.6 - previous patches not required any more. - added buildroot - fixed the PAM support, which was really, completely broken and against any standards (session support is still not here... :-( ) - we build against running kernel and pray that it will work - added a samples patch; updated glibc patch * Thu Dec 18 1997 Erik Troan - added a patch to use our own route.h, rather then glibc's (which has alignment problems on Alpha's) -- I only applied this patch on the Alpha, though it should be safe everywhere * Fri Oct 10 1997 Erik Troan - turned off the execute bit for scripts in /usr/doc * Fri Jul 18 1997 Erik Troan - built against glibc * Tue Mar 25 1997 Erik Troan - Integrated new patch from David Mosberger - Improved description