[arch-dev-public] News draft: sorting old password hashes

2021-06-06 Thread Christian Hesse via arch-dev-public
Hello everybody, old password hashes like MD5 are no longer accepted by recent libxcrypt. On next login user may be enforced to update password. To make sure nobody is worried I would like to add install message and news post: --- >8 --- Starting with libxcrypt 4.4.21 weak password hashes are no

Re: [arch-dev-public] News draft: sorting old password hashes

2021-06-06 Thread Jan Alexander Steffens via arch-dev-public
On Sun, Jun 6, 2021 at 9:38 PM Christian Hesse via arch-dev-public < arch-dev-public@lists.archlinux.org> wrote: > Hello everybody, > > old password hashes like MD5 are no longer accepted by recent libxcrypt. On > next login user may be enforced to update password. To make sure nobody is > worried

Re: [arch-dev-public] retracting libxcrypt 4.4.22-1 from [testing]

2021-06-06 Thread Christian Hesse via arch-dev-public
Christian Hesse via arch-dev-public on Fri, 2021/05/28 17:48: > Hello everybody, > > the testing package libxcrypt 4.4.22-1 was reported to be bad... Andreas was > forced to change his password on login, which resulted in him being locked > out of his system. We are trying to clarify... > > So I

Re: [arch-dev-public] News draft: sorting old password hashes

2021-06-06 Thread Christian Hesse via arch-dev-public
Jan Alexander Steffens via arch-dev-public on Sun, 2021/06/06 21:49: > On Sun, Jun 6, 2021 at 9:38 PM Christian Hesse via arch-dev-public < > arch-dev-public@lists.archlinux.org> wrote: > > > Hello everybody, > > > > old password hashes like MD5 are no longer accepted by recent libxcrypt. > > On

Re: [arch-dev-public] Transitioning out my master key

2021-06-06 Thread Jelle van der Waa via arch-dev-public
On 01/06/2021 16:24, Giancarlo Razzolini via arch-dev-public wrote: Em junho 1, 2021 10:54 Allan McRae via arch-dev-public escreveu: It is time for my master key to be retired.  That can not happen any time soon, as revoking my key means ~25% of packagers will not be able to validly sign package

Re: [arch-dev-public] News draft: sorting old password hashes

2021-06-06 Thread Brett Cornwall via arch-dev-public
On 2021-06-06 22:08, Christian Hesse via arch-dev-public wrote: Jan Alexander Steffens via arch-dev-public on Sun, 2021/06/06 21:49: On Sun, Jun 6, 2021 at 9:38 PM Christian Hesse via arch-dev-public < arch-dev-public@lists.archlinux.org> wrote: > Hello everybody, > > old password hashes like