updated 3 packages

gnutls-3.8.5-1

pam-1.6.1-1

xmlsec1-1.3.4-1

g/gnutls/gnutls-vl.spec

@@ -7,7 +7,7 @@
 Summary:	GNU TLS Library
 Summary(ja):	GNU TLS ライブラリ
 Name:		gnutls
-Version:	3.8.1
+Version:	3.8.5
 Release:	1%{?_dist_release}
 Group:		system,security
 Vendor:		Project Vine
@@ -23,9 +23,6 @@ Source1:	libgnutls-config
 #patches from fedora development
 Patch1: gnutls-3.2.7-rpath.patch
 
-# Delete only after the kernel has been patched for thested systems
-Patch2: gnutls-3.7.8-ktls_disable_keyupdate_test.patch
-
 # follow https://gitlab.com/gnutls/gnutls/-/issues/1443
 Patch3: gnutls-3.7.8-ktls_skip_tls12_chachapoly_test.patch
 
@@ -46,8 +43,8 @@ BuildRequires:	nettle-devel >= 3.6
 Requires:	nettle >= 3.6
 BuildRequires:	texinfo, autogen
 BuildRequires:	unbound-devel unbound-libs
-BuildRequires:	zlib-devel
-Requires:	zlib
+BuildRequires:	zlib-ng-compat-devel
+Requires:	zlib-ng-compat
 # for tests
 BuildRequires:	net-tools
 
@@ -174,6 +171,7 @@ export LDFLAGS="-Wl,--no-add-needed"
 	--disable-static \
 	--disable-openssl-compatibility \
 	--disable-non-suiteb-curves \
+	--enable-ktls \
 	--with-unbound-root-key-file=/var/lib/unbound/root.key \
 	--enable-dane \
 	--disable-rpath \
@@ -181,15 +179,7 @@ export LDFLAGS="-Wl,--no-add-needed"
 	--enable-srp-authentication \
 %endif
 	%{nil}
-#	--with-libgcrypt
-#	--with-lzo \
-#	--with-included-libcfg \
-#       --with-libtasn1-prefix=%{_prefix} \
-#	--with-included-libtasn1 \
-#	--with-included-opencdk \
-#	--with-included-lzo \
 make %{?_smp_mflags}
-# cp lib/COPYING COPYING.LIB
 
 
 %install
@@ -207,7 +197,9 @@ rm -rf %{buildroot}%{_docdir}/gnutls
 
 %ifarch x86_64
 %check
-make check %{?_smp_mflags}
+# KeyUpdate is not yet supported in the kernel.
+xfail_tests="ktls_keyupdate.sh ktls.sh"
+make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null XFAIL_TESTS="$xfail_tests"
 %endif
 
 
@@ -220,6 +212,7 @@ rm -rf %{buildroot}
 %{_libdir}/libgnutls.so.30*
 # %{_libdir}/libgnutls-xssl.so.0*
 %doc README* AUTHORS NEWS THANKS
+%license LICENSE doc/COPYING doc/COPYING.LESSER
 
 %files dane
 %{_libdir}/libgnutls-dane.so.*
@@ -265,6 +258,9 @@ rm -rf %{buildroot}
 
 
 %changelog
+* Wed Apr 10 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.8.5-1
+- new upstream release.
+
 * Tue Oct 03 2023 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.8.1-1
 - new upstream release.
 

p/pam/pam-vl.spec

@@ -7,7 +7,7 @@
 Summary: A security tool which provides authentication for applications
 Summary(ja): アプリケーションに認証の仕組みを提供するセキュリティツール
 Name: pam
-Version: 1.5.3
+Version: 1.6.1
 Release: 1%{?_dist_release}%{?with_systemd:.systemd}
 Group: system
 Vendor: Project Vine
@@ -36,8 +36,8 @@ Source15: pamtmp.conf
 Source16: postlogin.pamd
 Source17: postlogin.5
 Source18: https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
-Patch1:  pam-1.5.3-redhat-modules.patch
-Patch2:  pam-1.5.3-noflex.patch
+Patch1:  pam-1.6.0-redhat-modules.patch
+Patch2:  pam-1.6.0-noflex.patch
 Patch3:  pam-1.5.3-unix-nomsg.patch
 
 #Patch1000: pam-1.5.1-ja.po.patch
@@ -168,6 +168,11 @@ cp %{SOURCE18} .
 %patch3 -p1 -b .nomsg
 
 ## security patch(es)
+#none
+
+sed -i -e 's/WITH_SELINUX/!WITH_SELINUX/g' \
+  modules/pam_pwhistory/Makefile.am \
+  modules/pam_unix/Makefile.am
 
 autoreconf -i
 
@@ -175,6 +180,8 @@ autoreconf -i
 %build
 %configure \
 	--disable-rpath \
+	--disable-static \
+	--disable-prelude \
 	--libdir=/%{_lib} \
 	--includedir=%{_includedir}/security \
 	--enable-isadir=../..%{_moduledir} \
@@ -187,8 +194,6 @@ autoreconf -i
 %if ! %{WITH_AUDIT}
 	--disable-audit \
 %endif
-	--disable-static \
-	--disable-prelude \
 	--enable-openssl \
 	--enable-lastlog
 make -C po update-gmo
@@ -346,6 +351,7 @@ rm -rf %{buildroot}
 %endif
 %dir %{_moduledir}
 %{_moduledir}/pam_access.so
+%{_moduledir}/pam_canonicalize_user.so
 %{_moduledir}/pam_chroot.so
 %{_moduledir}/pam_debug.so
 %{_moduledir}/pam_deny.so
@@ -519,6 +525,12 @@ rm -rf %{buildroot}
 
 
 %changelog
+* Wed Apr 10 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.6.1-1
+- updated to 1.6.1.
+
+* Thu Apr 04 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.6.0-1
+- updated to 1.6.0.
+
 * Thu Oct 12 2023 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.5.3-1
 - updated to 1.5.3.
 

x/xmlsec1/xmlsec1-vl.spec

@@ -1,6 +1,6 @@
 Summary: Library providing support for "XML Signature" and "XML Encryption" standards
 Name: xmlsec1
-Version: 1.3.2
+Version: 1.3.4
 Release: 1%{?_dist_release}
 Group: system
 Vendor: Project Vine
@@ -238,6 +238,12 @@ rm -fr %{buildroot}
 
 
 %changelog
+* Wed Apr 10 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.3.4-1
+- new upstream release.
+
+* Fri Jan 05 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.3.3-1
+- new upstream release.
+
 * Fri Nov 03 2023 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.3.2-1
 - new upstream release.