293464 2026-02-26 12:55:04 +0000 security/py-passlib: broken since bcrypt 5 2026-03-10 13:54:21 +0000 1 1 1 Unclassified Ports & Packages Individual Port(s) Latest Any Any New --- Affects Some People --- 1 topical bofh filis oldest_to_newest 1409068 0 topical 2026-02-26 12:55:04 +0000 Since bcrypt 5.0, py-passlib is broken, see https://github.com/ansible/ansible/issues/85919 passlib is effectively dead (last update 2020), so fixing it upstream is not really feasible. Thus, the best way is to get rid of it (see https://github.com/ansible/ansible/pull/85970), but meanwhile we need a fix, especially since Ansible's "hwpasswd" is broken. Using the fix presented in https://github.com/ansible/ansible/issues/85919 seems to work. 1409069 1 268377 topical 2026-02-26 12:58:20 +0000 Created attachment 268377 Update port to be compatible with bcrypt 5 based on https://github.com/ansible/ansible/issues/85919 268377 2026-02-26 12:58:20 +0000 2026-02-26 12:58:20 +0000 Update port to be compatible with bcrypt 5 file_293464.txt text/plain 3638 topical ZGlmZiAtLWdpdCBhL3NlY3VyaXR5L3B5LXBhc3NsaWIvTWFrZWZpbGUgYi9zZWN1cml0eS9weS1w YXNzbGliL01ha2VmaWxlDQppbmRleCBkZGI1ZjliNzg1MzYuLjBlNWRkN2M5NDcwYSAxMDA2NDQN Ci0tLSBhL3NlY3VyaXR5L3B5LXBhc3NsaWIvTWFrZWZpbGUNCisrKyBiL3NlY3VyaXR5L3B5LXBh c3NsaWIvTWFrZWZpbGUNCkBAIC0xLDYgKzEsNiBAQA0KIFBPUlROQU1FPQlwYXNzbGliDQogUE9S VFZFUlNJT049CTEuNy40DQotUE9SVFJFVklTSU9OPQkxDQorUE9SVFJFVklTSU9OPQkyDQogQ0FU RUdPUklFUz0Jc2VjdXJpdHkgcHl0aG9uDQogTUFTVEVSX1NJVEVTPQlQWVBJDQogUEtHTkFNRVBS RUZJWD0JJHtQWVRIT05fUEtHTkFNRVBSRUZJWH0NCmRpZmYgLS1naXQgYS9zZWN1cml0eS9weS1w YXNzbGliL2ZpbGVzL3BhdGNoLWJjcnlwdC5weSBiL3NlY3VyaXR5L3B5LXBhc3NsaWIvZmlsZXMv cGF0Y2gtYmNyeXB0LnB5DQpuZXcgZmlsZSBtb2RlIDEwMDY0NA0KaW5kZXggMDAwMDAwMDAwMDAw Li5jMDQ4OTRlNTkwNjINCi0tLSAvZGV2L251bGwNCisrKyBiL3NlY3VyaXR5L3B5LXBhc3NsaWIv ZmlsZXMvcGF0Y2gtYmNyeXB0LnB5DQpAQCAtMCwwICsxLDU1IEBADQorLS0tIHBhc3NsaWIvaGFu ZGxlcnMvYmNyeXB0Lm9yaWcJMjAyNS0xMC0wNiAxNjoyODo1OS4xNzE0NzQ0NTUgLTA0MDANCisr KysgcGFzc2xpYi9oYW5kbGVycy9iY3J5cHQucHkJMjAyNS0xMC0wOCAxMDozODowMC42ODIzMTgx NTkgLTA0MDANCitAQCAtMzc0LDE0ICszNzQsMjYgQEANCisgICAgICAgICAgICAgTk9URTogaWYg aW4gZnV0dXJlIHdlIG5lZWQgdG8gZGVsaWJlcmF0ZWx5IGNyZWF0ZSBoYXNoZXMgd2hpY2ggaGF2 ZSB0aGlzIGJ1ZywNCisgICAgICAgICAgICAgICAgICAgY2FuIHVzZSBzb21ldGhpbmcgbGlrZSAn aGFzaHB3KHJlcGVhdF9zdHJpbmcoc2VjcmV0WzooKDErc2VjcmV0KSAlIDI1Nikgb3IgMV0pLCA3 MiknDQorICAgICAgICAgICAgICIiIg0KKy0gICAgICAgICAgICAjIGNoZWNrIGlmIGl0IGV4aGli aXRzIHdyYXBhcm91bmQgYnVnDQorKw0KKysgICAgICAgICAgICAjIFNlY3JldCB3aGljaCB3aWxs IHRyaXAgdGhlIHdyYXBhcm91bmQgYnVnLCBpZiBwcmVzZW50DQorICAgICAgICAgICAgIHNlY3Jl dCA9IChiIjAxMjM0NTY3ODkiKjI2KVs6MjU1XQ0KKy0gICAgICAgICAgICBidWdfaGFzaCA9IGlk ZW50LmVuY29kZSgiYXNjaWkiKSArIGIiMDQkUjFsSjJna05hb1BHZGFmRS5ILjE2Lm5WeWgybmlI c0dKaGF5T0hMTWlYbEk0NW84L0RVLjYiDQorLSAgICAgICAgICAgIGlmIHZlcmlmeShzZWNyZXQs IGJ1Z19oYXNoKToNCistICAgICAgICAgICAgICAgIHJldHVybiBUcnVlDQorIA0KKy0gICAgICAg ICAgICAjIGlmIGl0IGRvZXNuJ3QgaGF2ZSB3cmFwYXJvdW5kIGJ1ZywgbWFrZSBzdXJlIGl0ICpk b2VzKiBoYW5kbGUgdGhpbmdzDQorLSAgICAgICAgICAgICMgY29ycmVjdGx5IC0tIG9yIHdlJ3Jl IGluIHNvbWUgd2VpcmQgdGhpcmQgY2FzZS4NCisrICAgICAgICAgICAgIyBQeXRob24gYmNyeXB0 ID49IDUuMC4wIHdpbGwgcmFpc2UgYW4gZXhjZXB0aW9uIG9uIHBhc3N3b3JkcyBncmVhdCB0aGFu IDcyIGNoYXJhY3RlcnMsDQorKyAgICAgICAgICAgICMgd2hlcmVhcyBlYXJsaWVyIHZlcnNpb25z IHdpdGhvdXQgdGhlIHdyYXBhcm91bmQgYnVnIHNpbGVudGx5IHRydW5jYXRlZCB0aGUgaW5wdXQg dG8gNzINCisrICAgICAgICAgICAgIyBjaGFyYWN0ZXJzLiBTZWUgaWYgdGhlIGV4Y2VwdGlvbiBp cyBnZW5lcmF0ZWQuDQorKw0KKysgICAgICAgICAgICB0cnk6DQorKyAgICAgICAgICAgICAgICBi dWdfaGFzaCA9IGlkZW50LmVuY29kZSgiYXNjaWkiKSArIGIiMDQkUjFsSjJna05hb1BHZGFmRS5I LjE2Lm5WeWgybmlIc0dKaGF5T0hMTWlYbEk0NW84L0RVLjYiDQorKw0KKysgICAgICAgICAgICAg ICAgIyBJZiB3ZSBnZXQgaGVyZSwgdGhlIGJhY2tlbmQgYXV0by10cnVuY2F0ZXMsIHRlc3QgZm9y IHdyYXBhcm91bmQgYnVnDQorKyAgICAgICAgICAgICAgICBpZiB2ZXJpZnkoc2VjcmV0LCBidWdf aGFzaCk6DQorKyAgICAgICAgICAgICAgICAgICAgcmV0dXJuIFRydWUNCisrICAgICAgICAgICAg ZXhjZXB0IFZhbHVlRXJyb3I6DQorKyAgICAgICAgICAgICAgICAjIEJhY2tlbmQgZXhwbGljaXRs eSB3aWxsIG5vdCBhdXRvLXRydW5jYXRlLCB0cnVuY2F0ZSB0aGUgcGFzc3dvcmQgdG8gNzIgY2hh cmFjdGVycw0KKysgICAgICAgICAgICAgICAgc2VjcmV0ID0gc2VjcmV0Wzo3Ml0NCisrICAgICAg ICAgICAgDQorKyAgICAgICAgICAgICMgQ2hlY2sgdG8gbWFrZSBzdXJlIHRoYXQgdGhlIGJhY2tl bmQgc3RpbGwgaGFzaGVzIGNvcnJlY3RseTsgaWYgbm90LCB3ZSdyZSBpbiBhIGZhaWx1cmUgY2Fz ZQ0KKysgICAgICAgICAgICAjIG5vdCByZWxhdGVkIHRvIHRoZSBvcmlnaW5hbCB3cmFwYXJvdW5k IGJ1ZyBvciBiY3J5cHQgPj0gNS4wLjAgaW5wdXQgbGVuZ3RoIHJlc3RyaWN0aW9uLg0KKyAgICAg ICAgICAgICBjb3JyZWN0X2hhc2ggPSBpZGVudC5lbmNvZGUoImFzY2lpIikgKyBiIjA0JFIxbEoy Z2tOYW9QR2RhZkUuSC4xNi4xTUtIUHZtS3dyeWV1bFJlMjI1TEtQcm9XWXd0OU9pIg0KKyAgICAg ICAgICAgICBpZiBub3QgdmVyaWZ5KHNlY3JldCwgY29ycmVjdF9oYXNoKToNCisgICAgICAgICAg ICAgICAgIHJhaXNlIFJ1bnRpbWVFcnJvcigiJXMgYmFja2VuZCBmYWlsZWQgdG8gdmVyaWZ5ICVz IHdyYXBhcm91bmQgaGFzaCIgJSAoYmFja2VuZCwgaWRlbnQpKQ0KK0BAIC02MTcsMTAgKzYyOSwx NiBAQA0KKyAgICAgICAgIGV4Y2VwdCBJbXBvcnRFcnJvcjogIyBwcmFnbWE6IG5vIGNvdmVyDQor ICAgICAgICAgICAgIHJldHVybiBGYWxzZQ0KKyAgICAgICAgIHRyeToNCistICAgICAgICAgICAg dmVyc2lvbiA9IF9iY3J5cHQuX19hYm91dF9fLl9fdmVyc2lvbl9fDQorKyAgICAgICAgICAgICMg Ik5ldyBzdHlsZSIgKDc5M2JlZiAyMDIzLTExLTIzKSB2ZXJzaW9uDQorKyAgICAgICAgICAgIHZl cnNpb24gPSBfYmNyeXB0Ll9fdmVyc2lvbl9fDQorICAgICAgICAgZXhjZXB0Og0KKy0gICAgICAg ICAgICBsb2cud2FybmluZygiKHRyYXBwZWQpIGVycm9yIHJlYWRpbmcgYmNyeXB0IHZlcnNpb24i LCBleGNfaW5mbz1UcnVlKQ0KKy0gICAgICAgICAgICB2ZXJzaW9uID0gJzx1bmtub3duPicNCisr ICAgICAgICAgICAgdHJ5Og0KKysgICAgICAgICAgICAgICAgIyBPbGQgc3R5bGUgdmVyaW9uDQor KyAgICAgICAgICAgICAgICB2ZXJzaW9uID0gX2JjcnlwdC5fX2Fib3V0X18uX192ZXJzaW9uX18N CisrICAgICAgICAgICAgZXhjZXB0Og0KKysgICAgICAgICAgICAgICAgIyBDYW4ndCBmaW5kIHZl cnNpb24NCisrICAgICAgICAgICAgICAgIGxvZy53YXJuaW5nKCIodHJhcHBlZCkgZXJyb3IgcmVh ZGluZyBiY3J5cHQgdmVyc2lvbiIsIGV4Y19pbmZvPVRydWUpDQorKyAgICAgICAgICAgICAgICB2 ZXJzaW9uID0gJzx1bmtub3duPicNCisgDQorICAgICAgICAgbG9nLmRlYnVnKCJkZXRlY3RlZCAn YmNyeXB0JyBiYWNrZW5kLCB2ZXJzaW9uICVyIiwgdmVyc2lvbikNCisgICAgICAgICByZXR1cm4g bWl4aW5fY2xzLl9maW5hbGl6ZV9iYWNrZW5kX21peGluKG5hbWUsIGRyeXJ1bik=