pool/john
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
john/john.changes
Torsten Gruner 9c82ab456c Accepting request 925872 from home:AdaLovelace:branches:openSUSE:Factory:zSystems 
- Upstream patch for Big Endians in s390x-upstream.patch
- Include johnswap.h in opencl_7z_fmt_plug.c with s390x.patch

OBS-URL: https://build.opensuse.org/request/show/925872
OBS-URL: https://build.opensuse.org/package/show/security/john?expand=0&rev=74
2021-10-18 19:39:37 +00:00

578 lines
24 KiB
Plaintext
Raw Blame History

-------------------------------------------------------------------
Tue Oct 12 15:55:35 UTC 2021 - Sarah Kriesch <sarah.kriesch@opensuse.org>
- Upstream patch for Big Endians in s390x-upstream.patch
- Include johnswap.h in opencl_7z_fmt_plug.c with s390x.patch
-------------------------------------------------------------------
Tue Jun 8 11:46:18 UTC 2021 - simmphonie@opensuse.org
- add john-1.9.0-jumbo-gcc11.patch to fix alignment compile errors
on GCC 11 gh#4611
-------------------------------------------------------------------
Sat Mar 13 10:10:12 UTC 2021 - Dirk Müller <dmueller@suse.com>
- enable ztex support (fix usb dependency):
add john-1.9.0-jumbo-gcc10.patch to fix fcommon related build failures
-------------------------------------------------------------------
Tue Oct 6 18:02:51 UTC 2020 - simmphonie@opensuse.org
- Add cl-device.patch to handle systems that already defined
CL_DEVICE_TOPOLOGY_AMD gh#4331
-------------------------------------------------------------------
Fri Jun 12 08:06:37 UTC 2020 - Martin Pluskal <mpluskal@suse.com>
- Fix building with gcc10
- Small cleanup of spec file with spec-cleaner
-------------------------------------------------------------------
Sat Oct 12 21:47:09 UTC 2019 - simmphonie@opensuse.org
- Remove fdupes check (build fails with debug packages)
-------------------------------------------------------------------
Tue Sep 10 13:32:21 UTC 2019 - simmphonie@opensuse.org
- Fixed build for ARM and PPC. CPU with AVX support at least is
only available for x86_64 architecture now.
-------------------------------------------------------------------
Tue Sep 10 06:57:56 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
- Use noun phrase in summary. Reword description to avoid
unspecific "Unix password".
-------------------------------------------------------------------
Mon Sep 9 19:29:28 UTC 2019 - simmphonie@opensuse.org
- remove setBadness from rpmlintrc
-------------------------------------------------------------------
Mon Sep 2 06:23:15 UTC 2019 - Christophe Giboudeaux <christophe@krop.fr>
- Fix the sources URL. Use https.
-------------------------------------------------------------------
Thu Jun 6 12:34:28 UTC 2019 - simmphonie@opensuse.org
- spec-file changes
+ add jumbo scripts and remove "env" from shebang
+ remove patches. In upstream already:
+ john-1.7.9-powerpc_BE_need_rhash_u32_swap_copy.patch
+ ppc64le.patch
+ reproducible.patch
+ use configure to find dependenices and CPU architecture
+ openCL support
+ multicore support with fork option
+ require CPU with AVX support at least
+ root rights are no longer required
- update to 1.9.0
+ Increased the interleaving for bcrypt on x86-64 from 2x to 3x for a major
speedup on CPUs without SMT. Unfortunately, this sometimes results in a minor
performance regression when running multiple threads on CPUs with SMT.
+ Recognize the $2b$ bcrypt prefix.
+ In the generic crypt(3) format, detect descrypt with valid vs. invalid salts
as separate id's for our heuristics on supported hash types.
+ Introduced a number of optimizations for faster handling of large password
hash files, including loading, cracking, and "--show". Some of these use more
memory than before, yet in a more efficient manner.
+ Benchmark using all-different candidate passwords of length 7 by default.
+ Dropped undocumented special handling of "Mc" in 'c' and 'C' rule commands.
+ Dropped undocumented limitation of the 'M' and 'Q' rule commands where they
would sometimes memorize/check only up to the current hash type's length limit
yet this optimization wouldn't necessarily be transparent (e.g., if a later
command would extract a substring from above the hash type's length limit and
bring it to within the limit).
+ Implemented special-case handling of repeated rule commands '$', '^', '[',
']', '{', and '}', as well as faster handling of the 'D' command.
+ When built with "--fork" support, disallow session names with all-digit
suffixes since these clash with those produced by "--fork".
+ Forward SIGTERM to --fork'ed children.
+ Set stdout to line buffered (rather than potentially fully buffered), except
for "--stdout", "--show", and auxiliary programs such as "unshadow".
+ On Windows, restore normal processing of Ctrl-C in case our parent (such as
Johnny the GUI) had disabled it.
+ Added linux-x86*-avx512 and linux-x86*-avx2 make targets, which use
respectively AVX-512 and AVX2 for bitslice DES.
+ Added linux-mic make target for Intel MIC (first generation Xeon Phi, aka
Knights Corner), which uses its 512-bit SIMD intrinsics for bitslice DES.
(For second generation Xeon Phi, aka Knights Landing, use linux-x86-64-avx512.)
+ Added linux-arm64le, linux-arm32le-neon, and linux-arm32le make targets.
(The first two of these make use of ASIMD or NEON for bitslice DES.)
+ Added linux-sparc64 make target.
+ Made a minor optimization to MMX and SSE2 assembly code for LM hash.
+ Dropped Ultrix and SCO support.
+ Don't probe for alternate config file names (like john.ini when on Unix).
+ "DokuWiki" external mode sample has been added to the default john.conf.
+ Fixed operator precedence in the external mode compiler to be the same as C.
+ Fixed an out of bounds write bug in the external mode virtual machine.
+ Fixed a bug introduced in version 1.7.4 in the wordlist rules engine, where
some sequences of rule commands could overflow a word buffer.
+ Fixed a bug where unaligned access SSE/AVX instructions would unnecessarily
be generated by GCC 4.6+ in the bitslice DES code in non-OpenMP builds.
+ Fixed a bug where "Warning: no OpenMP support for this hash type" could be
printed in "--stdout" mode.
+ Made assorted other bugfixes, portability and documentation enhancements.
- version 1.7.9.8
+ Revised the incremental mode to let the current character counts grow for
each character position independently, with the aim to improve efficiency in
terms of successful guesses per candidate passwords tested.
+ Revised the pre-defined incremental modes, as well as external mode filters
that are used to generate .chr files.
+ Added makechr, a script to (re-)generate .chr files.
+ Enhanced the status reporting to include four distinct speed metrics (g/s,
p/s, c/s, and C/s).
+ Added the "--fork=N" and "--node=MIN[-MAX]/TOTAL" options for trivial
parallel and distributed processing.
+ In the external mode compiler, treat character literals as unsigned.
+ Renamed many of the formats.
+ Updated the documentation.
+ Relaxed the license for many source files to cut-down BSD.
+ Relaxed the license for John the Ripper as a whole from GPLv2 (exact version)
to GPLv2 or newer with optional OpenSSL and unRAR exceptions.
+ Assorted other changes have been made.
-------------------------------------------------------------------
Tue Mar 27 11:10:16 UTC 2018 - dimstar@opensuse.org
- Build against openSSL 1.0 until upstream catches up
(boo#1078844).
-------------------------------------------------------------------
Sat May 27 15:44:54 UTC 2017 - bwiedemann@suse.com
- Add reproducible.patch to sort input files to make build reproducible
(boo#1041090)
-------------------------------------------------------------------
Thu Dec 8 13:15:18 UTC 2016 - meissner@suse.com
- remove incorrect too large john.keyring ...
The signature of these tarballs is currently with a key with MD5 hash,
which is rejected by default.
-------------------------------------------------------------------
Wed Feb 17 11:17:04 UTC 2016 - normand@linux.vnet.ibm.com
- as follow on of previous "jumbo patch" need two powerpc changes:
new john-1.7.9-powerpc_BE_need_rhash_u32_swap_copy.patch
place ppc64le.patch after application of "jumbo patch" in spec
allow to solve partially boo #940498 for ppc64le
but still have 4 FAILED tests for ppc64 tracked upstream by
http://www.openwall.com/lists/john-dev/2016/02/16/1
-------------------------------------------------------------------
Thu Jun 25 14:12:06 UTC 2015 - astieger@suse.com
- fix SLE 11 SP3 build
-------------------------------------------------------------------
Mon Dec 15 23:41:30 UTC 2014 - lars@linux-schulserver.de
- include "jumbo patch" into the build - special thanks to
Mark Draheim for the specfile patch (closes bnc #839246)
-------------------------------------------------------------------
Fri Jan 10 11:41:09 UTC 2014 - dvaleev@suse.com
- Fix build on ppc64le
- added patches:
* ppc64le.patch
-------------------------------------------------------------------
Mon Oct 28 13:23:53 UTC 2013 - schwab@suse.de
- Use the generic target for m68k
-------------------------------------------------------------------
Wed Oct 9 16:00:16 UTC 2013 - lars@linux-schulserver.de
- update to 1.8.0:
+ Revised the incremental mode to let the current character counts
grow for each character position independently, with the aim to
improve efficiency in terms of successful guesses per candidate
passwords tested.
+ Revised the pre-defined incremental modes, as well as external
mode filters that are used to generate .chr files.
+ Added makechr, a script to (re-)generate .chr files.
+ Enhanced the status reporting to include four distinct speed
metrics (g/s, p/s, c/s, and C/s).
+ Added the "--fork=N" and "--node=MIN[-MAX]/TOTAL" options for
trivial parallel and distributed processing.
+ In the external mode compiler, treat character literals as unsigned.
+ Renamed many of the formats.
+ Updated the documentation.
+ Relaxed the license for many source files to cut-down BSD.
+ Relaxed the license for John the Ripper as a whole from GPLv2
(exact version) to GPLv2 or newer with optional OpenSSL and
unRAR exceptions.
+ Assorted other changes have been made.
- add simple man pages for relbench and mailer scripts
- disable jumbo patch for now until a version for 1.8.0 is out
-------------------------------------------------------------------
Sun Mar 17 20:20:13 UTC 2013 - schwab@suse.de
- Use the generic target for aarch64
-------------------------------------------------------------------
Sat Oct 20 09:18:02 UTC 2012 - lars@linux-schulserver.de
- updated jumbo patch to 1.7.9-jumbo-7
-------------------------------------------------------------------
Fri Jul 13 06:07:17 UTC 2012 - lars@linux-schulserver.de
- update to 1.7.9:
+ Added optional parallelization of the MD5-based crypt(3) code with OpenMP.
+ Added optional parallelization of the bitslice DES code with OpenMP.
+ Replaced the bitslice DES key setup algorithm with a faster one, which
significantly improves performance at LM hashes, as well as at DES-based
crypt(3) hashes when there's just one salt (or very few salts).
+ Optimized the DES S-box x86-64 (16-register SSE2) assembly code.
+ Added support for 10-character DES-based tripcodes (not optimized yet).
+ Added support for the "$2y$" prefix of bcrypt hashes.
+ Added two more hash table sizes (16M and 128M entries) for faster processing
of very large numbers of hashes per salt (over 1M).
+ Added two pre-defined external mode variables: "abort" and "status", which
let an external mode request the current cracking session to be aborted or the
status line to be displayed, respectively.
+ Made some minor optimizations to external mode function calls and virtual
machine implementation.
+ The "--make-charset" option now uses floating-point rather than 64-bit
integer operations, which allows for larger CHARSET_* settings in params.h.
+ Added runtime detection of Intel AVX and AMD XOP instruction set extensions,
with optional fallback to an alternate program binary.
+ Added relbench, a Perl script to compare two "john --test" benchmark runs,
such as for different machines, "make" targets, C compilers, optimization
options, or/and versions of John the Ripper.
+ Additional public lists of "top N passwords" have been merged into the
bundled common passwords list, and some insufficiently common passwords were
removed from the list.
+ Many minor enhancements and a few bug fixes were made.
- updated jumbo patch to 1.7.9-jumbo-6
- specfile cleanup (using spec-cleaner)
-------------------------------------------------------------------
Fri Sep 30 09:40:39 UTC 2011 - joop.boonen@boonen.org
- Added a fix for the arm architecture, TARGET generic
-------------------------------------------------------------------
Fri Jul 8 08:56:40 UTC 2011 - lars@linux-schulserver.de
- update to 1.7.8:
+ many changes, please see /usr/share/doc/packages/john/CHANGES
+ The bitslice DES S-box expressions have been replaced with those
generated by Roman Rusakov specifically for John the Ripper
+ Added Intel AVX and AMD XOP instruction sets support for bitslice DES
+ Apache "$apr1$" MD5-based password hashes are now supported.
+ the loader now includes logic to warn the user of ambiguous
hash encodings
+ "DateTime", "Repeats", "Subsets", "AtLeast1-Simple",
"AtLeast1-Generic", and "Policy" external mode samples have been
added to the default john.conf
+ A few minor bug fixes and enhancements were made
+ Corrected a logic error introduced in JtR 1.7.4.2: in
"single crack" mode
- added and updated jumbo patch
-------------------------------------------------------------------
Tue Mar 15 06:42:36 CET 2011 - draht@suse.de
- go from jumbo patch 7 to 12
- needs -lm to link, via LDFLAGS from make command in spec
-------------------------------------------------------------------
Thu Sep 9 16:39:40 UTC 2010 - lars@linux-schulserver.de
- update to 1.7.6:
+ Generic crypt(3) support (enabled with "--format=crypt") has been
added for auditing password hash types supported by the system but
not yet supported by John's own optimized cryptographic routines
(such as "SHA-crypt" and SunMD5).
+ Optional parallelization of the above has been implemented by
means of OpenMP along with glibc's crypt_r(3)
+ Optional parallelization of John's own optimized code for the
OpenBSD-style Blowfish-based crypt(3) (bcrypt) hashes with OpenMP
has been added
+ A more suitable version of 32-bit x86 assembly code for Blowfish
is now chosen on Core i7 and similar CPUs (in 32 bit mode)
+ More optimal DES S-box expressions for PowerPC with AltiVec
+ The bitslice DES C source code has been reworked to allow for
the use of arbitrary SIMD intrinsics, which was previously only
implemented for AltiVec as a special case
+ Support for SSE2 and MMX intrinsics with bitslice DES (as an
alternative to the supplied assembly code) has been added
(currently only enabled for SSE2 on x86-64)
+ Support for mixed-type longer virtual vectors (such as SSE2+MMX,
SSE2+ALU, AltiVec+ALU, and other combinations) with bitslice
DES has been added
+ The loader will now detect password hashes specified on a line
on their own, not only as part of an /etc/passwd or PWDUMP
format file
+ When run in "--stdin" mode and reading candidate passwords from
a terminal (to be typed by the user), John will no longer mess
with the terminal settings
+ John will now restore terminal settings not only on normal
termination or interrupt, but also when forcibly interrupted
with two Ctrl-C keypresses
+ A new numeric variable has been added to the word mangling rules
engine: "p" for position of the character last found with the
"/" or "%" commands
+ Support for the use of "--format" along with "--show" or
"--make-charset" has been added
+ The choice of .rec and .log filenames for custom session names
has been made more intuitive
+ Support for "\r" (character lists with repeats) and "\p0"
(reference to the immediately preceding character list/range)
has been added to the word mangling rules preprocessor
+ The undefined and undocumented behavior of some subtle word
mangling rules preprocessor constructs has been changed to
arguably be more sensible
-------------------------------------------------------------------
Thu Feb 11 21:53:39 CET 2010 - lrupp@suse.de
- update to 1.7.4.2:
+ Major performance improvements
+ John will now tend to use more memory to achieve better speed
+ Some previously missed common website passwords found on public
lists of "top N passwords" have been added to the bundled common
passwords list.
+ Support for back-references and "parallel" ranges has been
added to the word mangling rules preprocessor.
+ The notion of numeric variables has been introduced into the
rules engine.
+ New rule commands have been added
+ New rule reject flags have been added
+ The default rulesets for "single crack" and wordlist modes have
been revised to make use of the new features, for speed, to
produce fewer duplicates, and to attempt additional kinds of
candidate passwords.
+ The default for the Idle setting has been changed from N to Y.
-------------------------------------------------------------------
Mon Feb 8 22:44:32 UTC 2010 - jengelh@medozas.de
- only build MMX variant on >= i586
- guard TARGET=linux-x86-any with %ix86
- enable building on sparcv9
-------------------------------------------------------------------
Mon Sep 28 23:59:28 CEST 2009 - lrupp@suse.de
- update to 1.7.3.4:
+ "make check" has been implemented
+ The "--test" option will now take an optional argument - the
duration of each benchmark in seconds
+ Some very minor bugs that did not affect normal operation have
been fixed.
+ Some unimportant compiler warnings have been fixed, a source code
comment has been made more verbose and more complete.
-------------------------------------------------------------------
Tue Sep 9 19:48:06 CEST 2008 - lrupp@suse.de
- update to 1.7.3.1:
+ Two Blowfish-based crypt(3) hashes may now be computed in
parallel for much better performance on modern multi-issue CPUs
with a sufficient number of registers (e.g., x86_64).
+ New make targets: macosx-universal, macosx-x86-64, solaris-x86-64-cc,
solaris-x86-64-gcc, solaris-x86-sse2-cc, solaris-x86-sse2-gcc,
solaris-x86-mmx-cc, solaris-x86-mmx-gcc, solaris-x86-any-cc,
linux-ia64;
+ Minor bug fixes.
+ "DumbForce" and "KnownForce" external mode samples have been
added to the default john.conf.
- removed the outdated patchset (needs to be re-integrated)
-------------------------------------------------------------------
Mon Sep 25 14:48:20 CEST 2006 - lrupp@suse.de
- remove double cflags definition
-------------------------------------------------------------------
Thu Jun 8 23:27:39 CEST 2006 - lrupp@suse.de
- new version 1.7.2
- moved john.conf to /etc
- moved john binary to /usr/bin
- enabled some opt flags (must be tested)
-------------------------------------------------------------------
Wed May 17 14:23:08 CEST 2006 - schwab@suse.de
- Use RPM_OPT_FLAGS.
- Don't strip binaries.
- Fix last change.
-------------------------------------------------------------------
Mon Mar 27 13:36:31 CEST 2006 - lrupp@suse.de
- use CFLAGS instead of params.h.patch
-------------------------------------------------------------------
Fri Mar 24 10:06:36 CET 2006 - lrupp@suse.de
- charset.tar.bz2 is included upstream
- reduce build requires
- new version 1.7.0.2
-------------------------------------------------------------------
Mon Mar 13 22:12:21 CET 2006 - lrupp@suse.de
- new version 1.7.0.1
- adapt patches to new version
- disabled some compiler fixes
- removed RPM_OPT_FLAGS => performance issue atm
-------------------------------------------------------------------
Mon Mar 13 21:33:53 CET 2006 - lrupp@suse.de
- split off worlists to an extra package
-------------------------------------------------------------------
Wed Jan 25 21:37:03 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Sun Jan 15 00:39:20 CET 2006 - schwab@suse.de
- Don't strip binaries.
- Fix ia64 configuration.
-------------------------------------------------------------------
Mon Dec 19 18:58:36 CET 2005 - aosthof@suse.de
- Fixed .spec file for all architectures besides x86
- Added targets for ia64 / s390 / s390x
-------------------------------------------------------------------
Fri Nov 11 10:23:55 CET 2005 - kukuk@suse.de
- Fix compiling with glibc 2.4 snapshot
-------------------------------------------------------------------
Wed Sep 14 13:29:31 CEST 2005 - lrupp@suse.de
- new version 1.6.39
- use noreplace for config
-------------------------------------------------------------------
Wed Jun 15 14:59:28 CEST 2005 - meissner@suse.de
- use RPM_OPT_FLAGS.
-------------------------------------------------------------------
Mon Jun 6 01:29:49 CEST 2005 - ro@suse.de
- added directory to filelist
-------------------------------------------------------------------
Fri Jun 3 18:32:29 CEST 2005 - lrupp@suse.de
- changed manpage
- added patches from ftp.openwall.com again:
+ blowfish (Eggdrop blowfish)
+ md5 (work with md5 hash of apache; faster)
+ rawMD5
+ MySQL (about 75% faster than mysqlpassword.c)
- enabled global mode in params.g again
-------------------------------------------------------------------
Mon May 30 16:23:28 CEST 2005 - lrupp@suse.de
- added "all" wordlist from openwall
- enabled arch-support for sparc and ppc
- added old doc-files from 1.6
-------------------------------------------------------------------
Wed May 25 17:44:09 CEST 2005 - lrupp@suse.de
- new package, version 1.6.38
-------------------------------------------------------------------
Tue Jan 25 20:05:46 CET 2005 - lrupp@suse.de
- added some wordlists to get more options ;-)
- added patches from ftp.openwall.com to provide support for
additiional password formats:
+ blowfish
+ md5
+ rawMD5
-------------------------------------------------------------------
Mon Aug 2 17:24:23 CEST 2004 - lrupp@suse.de
- - fixed BugTraq-ID: 43287
- enabled global-mode in params.h
- fix misspelling in manpage
-------------------------------------------------------------------
Fri Feb 27 15:01:19 CET 2004 - lrupp@suse.de
- use devel version: no segfault on x86-64
- included documentation and charsets from old version
- renamed new john.conf in john.ini
- created a short manpage for john
- created symlink /var/lib/john/john
-------------------------------------------------------------------
Mon Nov 10 17:25:12 CET 2003 - ro@suse.de
- use defattr
-------------------------------------------------------------------
Fri Nov 7 16:44:12 CET 2003 - lrupp@suse.de
- added '# norootforbuild' in the spec-file
-------------------------------------------------------------------
Thu Jun 12 17:36:58 CEST 2003 - poeml@suse.de
- add /var/lib/john to the filelist
-------------------------------------------------------------------
Fri May 23 10:31:10 CEST 2003 - coolo@suse.de
- use BuildRoot
-------------------------------------------------------------------
Tue Sep 17 17:34:28 CEST 2002 - ro@suse.de
- removed bogus self-provides
-------------------------------------------------------------------
Fri Jul 5 12:50:10 CEST 2002 - kukuk@suse.de
- use %ix86
-------------------------------------------------------------------
Thu Mar 29 15:17:43 CEST 2001 - uli@suse.de
- fixed for gcc >2.95
- replaced config.guess stuff with %ifarch
-------------------------------------------------------------------
Wed Mar 1 18:27:26 CET 2000 - werner@suse.de
- Fix config.guess selection
-------------------------------------------------------------------
Mon Sep 13 17:23:57 CEST 1999 - bs@suse.de
- ran old prepare_spec on spec file to switch to new prepare_spec.
-------------------------------------------------------------------
Thu Mar 18 18:58:26 MET 1999 - uli@suse.de
- new package, version 1.6
Reference in New Issue View Git Blame Copy Permalink