--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2025-94d036070f
2025-09-20 01:24:45.862720+00:00
--------------------------------------------------------------------------------

Name        : credcheck
Product     : Fedora EPEL 9
Version     : 3.0
Release     : 8.el9
URL         : https://github.com/HexaCluster/credcheck
Summary     : PostgreSQL extension for credential checking
Description :
The credcheck PostgreSQL extension provides few general credential checks,
which will be evaluated during the user creation, during the password change
and user renaming. By using this extension, we can define a set of rules:

    allow a specific set of credentials
    reject a certain type of credentials
    deny password that can be easily cracked
    enforce use of an expiration date with a minimum of day for a password
    define a password reuse policy
    define the number of authentication failure allowed before a user is banned

This extension provides all the checks as configurable parameters.
The default configuration settings, will not enforce any complex checks
and will try to allow most of the credentials.
By using SET credcheck.<check-name> TO <some value>; command, enforce new
settings for the credential checks. The settings can only be changed
by a superuser.

--------------------------------------------------------------------------------
Update Information:

Created an epel9 build witht ghe fix to the requires of postgresql-server
already included.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Sep 10 2025 Pavol Sloboda <[email protected]> - 3.0-8
- [bugfix] Updated the Requires of postgresql-server to only postgresql16
  The Requires of postgresql-server > 15 did not work as expected and
  allowed this package to be installed with postgresql-server 15 as well.
  This caused the package not to work as it was built with postgresql16 and
  postgresql15 is incompatible with it.
* Thu May 22 2025 Pavol Sloboda <[email protected]> - 3.0-7
- Updated the Requires and recommends between the main package and the
  selinux subpackage to reflect the rename
* Thu May 22 2025 Pavol Sloboda <[email protected]> - 3.0-6
- This is a commit message for the previous commit I have unfortunately
  pushed a commit with an inclomplete commit message into the epel8 branch
  which does not allow force pushing, therefore a rebase is not possible so
  this empty commit only exists to amend that commit message: I have
  renamed the base package back to credcheck to keep the srpms called
  credcheck as well to work around the automatisation used in koji and mock
  builds, I have created a subpackage named
  postgresql%{postgres_major_version}-credcheck to be able to produce the
  correct output rpms and also renamed the selinux subpackage to
  postgresql%{postgresq_major_version}-credcheck-selinux to keep the
  naming consistent. This now allows me to build the package using koji
  without raising the "epel8 branch not requested for
  postgresql16-credcheck" error during the builds.
* Wed May 21 2025 Pavol Sloboda <[email protected]> - 3.0-5
- Rename fix
* Fri May 16 2025 Pavol Sloboda <[email protected]> - 3.0-4
- Renamed the package to postgresql16-credcheck to make handling building
  for other versions of postgresql in the future easier.
* Fri May 16 2025 Pavol Sloboda <[email protected]> - 3.0-3
- Added the necessary build for postgresql to acommodate the modularity of
  epel8 This means: * a minimal build of postgresql16 inside the build
  phase * "installation" of said builds files into a temporary dir
  (/tmp/pgsql) to ease it's deletion later * passing the pg_config files
  location as an rgument to the %make_build and %make_install of
  credcheck * creation of all the necessary directories since ppostgresql
  is located in a weird spot so they won't be created by it * moving all
  the necessary files of credcheck: - credcheck.control - credcheck.so -
  credcheck--%{version}.0.sql - credcheck--*--*.sql (the "update" files)
  to their proper place as they will be installed inside the dir that
  postgresql is in, this cannot be overriden using destdir or any other
  means known to me and is caused by the call of pgxs.mk provided by
  postgresql-server-devel inside the makefile of credcheck (the location of
  pgxs.mk can be found using: /usr/bin/pg_config --pgxs) * removing the
  installed files of postgresql16 (as mentioned above they are all in
  /tmp/pgsql)
* Thu May 15 2025 Pavol Sloboda <[email protected]> - 3.0-2
- Changed the filepath inside the lto_optimization patch since the target
  file cannot be found without using autosetup inside the spec file.
* Tue May 13 2025 Pavol Sloboda <[email protected]> - 3.0-1
- Initial commit conatining the clone of the rwarhide branch with a new
  source of postgresql 16.8 and the removal of Requires and BuildRequires
  of postgresql-server and postgresql-server-devel to get around the
  modularity of epel8 during build
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2393149 - Allows installation with postgresql15 but is 
incompatible with it
        https://bugzilla.redhat.com/show_bug.cgi?id=2393149
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update credcheck' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

-- 
_______________________________________________
epel-package-announce mailing list -- 
[email protected]
To unsubscribe send an email to 
[email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to