Bug 193020

Summary: [UPDATE] security/pam_google_authenticator: Include improvements against brute force attack
Product: Ports & Packages Reporter: rsimmons0
Component: Individual Port(s)Assignee: Thomas Zander <riggs>
Status: Closed FIXED    
Severity: Affects Many People CC: jnlin, riggs
Priority: Normal    
Version: Latest   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
patch to update security/pam_google_authenticator
koobs: maintainer-approval? (jnlin)
updated distfile none

Description rsimmons0 2014-08-26 16:23:13 UTC 
Created attachment 146318 [details]
patch to update security/pam_google_authenticator

There have been two upstream changes recently to google authenticator, one of which is fix for brute force attacks as described here:
https://code.google.com/p/google-authenticator/source/detail?r=86af4c32a2940b13397cac52eee435e6acedb8a5

I have updated the port to include all changes up until today's date. The file that can be downloaded from Google code changes size every time its downloaded, so it can't be used as a distfile. I have included an updated version of the distfile along with a patch to update this port.
Comment 1 rsimmons0 2014-08-26 16:23:56 UTC 
Created attachment 146319 [details]
updated distfile
Comment 2 John Marino freebsd_committer freebsd_triage 2014-08-26 18:49:49 UTC 
Maintainer needs to approval, notifying in CC

Also, committer needs to host distfile in LOCAL/
Comment 3 rsimmons0 2014-08-26 18:51:13 UTC 
Sorry, how do I host the distfile?
Comment 4 John Marino freebsd_committer freebsd_triage 2014-09-04 17:21:07 UTC 
I said "the committer", not "the submitter".  You are the submitter.
Comment 5 John Marino freebsd_committer freebsd_triage 2014-09-20 18:32:19 UTC 
This PR timed out thus maintainer approval is no longer required.  I'm moving it to "patch-ready" status.  However, the committer that takes this PR needs to also host the distfile in their LOCAL/ directory.
Comment 6 rsimmons0 2014-09-21 00:58:17 UTC 
I'm willing to take maintainership of this port, if the current maintainer is willing or has gone MIA.
Comment 7 commit-hook freebsd_committer freebsd_triage 2014-10-18 08:52:01 UTC 
A commit references this bug:

Author: riggs
Date: Sat Oct 18 08:51:47 UTC 2014
New revision: 371100
URL: https://svnweb.freebsd.org/changeset/ports/371100

Log:
  - Update to upstream version 20140826

  PR:		193020
  Submitted by:	rsimmons0@gmail.com
  Approved by:	maintainer timeout

Changes:
  head/security/pam_google_authenticator/Makefile
  head/security/pam_google_authenticator/distinfo
  head/security/pam_google_authenticator/files/patch-Makefile
Comment 8 Thomas Zander freebsd_committer freebsd_triage 2014-10-18 08:54:09 UTC 
If the maintainer remains unresponsive / MIA, you can submit a patch with the next update in which you change the maintainer email address in the Makefile. Thanks!