Changelog for
shadow-4.2.1-20.1.x86_64.rpm :
Tue Sep 4 14:00:00 2018 mvetterAATTsuse.com
- bsc#1106914 useradd:
create intermediate directories with 0755 instead of 0777
- Adapted useradd-mkdirs.patch
Mon Jul 2 14:00:00 2018 mvetterAATTsuse.com
- bsc#1099310 (CVE-2016-6252):
Fix incorrect integer handling results in LPE
- Add shadow-4.2.1-CVE-2016-6252.patch
Fri Feb 16 13:00:00 2018 kbabiochAATTsuse.com
- Added CVE-2018-7169.patch: Fixed an privilege escalation in newgidmap,
which allowed an unprivileged user to be placed in a user namespace where
setgroups(2) is allowed. (CVE-2018-7169 bsc#1081294)
Fri Sep 8 14:00:00 2017 mvetterAATTsuse.com
- bsc#1052261: shadow-4.2.1-CVE-2017-12424.patch
Fix buffer overflow if NULL line is present in db
Fri Sep 1 14:00:00 2017 mvetterAATTsuse.com
- bsc#1023895
* man page contained invalid options because they depend
on compile flags and we shipped pre built ones.
New BuildRequires: docbook-xsl-stylesheets docbook_4 xml2po
xsltproc
* shadow-4.2.1-unknown-settings-if-pam.patch
Additionally we need this patch, which is included from 4.3.0
onward, so the tools don\'t complain about these options.
Thu Aug 31 14:00:00 2017 mvetterAATTsuse.com
- bsc#980486: shadow-4.2.1-reset-tallylog.patch
Reset user in /var/log/tallylog because we use
pam_tally2 and not faillog anymore.
Thu Apr 6 14:00:00 2017 adam.majerAATTsuse.de
- bsc#1031643: shadow-4.1.5.1-pam_group.patch
dynamically added users via pam_group are not listed in groups
databases but are still valid.
Wed Nov 30 13:00:00 2016 adam.majerAATTsuse.de
- bsc#1003978: shadow-4.1.5.1-id-alloc.patch
useradd and groupadd performance fix when using SSSD
Previously the entire possible UID/GID is iterated to find
an available UID/GID. This can take long time over a network
device. Instead, find available UID/GID locally, and then check
only those values over network.
Wed Oct 19 14:00:00 2016 mvetterAATTsuse.com
- bsc#1002975: Use permissions according to permissions package
and dont try to manipulate them in %files section.
Wed Sep 14 14:00:00 2016 mvetterAATTsuse.com
- boo#994486: Include shadow.5 manpage
Previously this was provided by man-pages package in
the man-pages-addons tarball which got removed later on.
Tue May 31 14:00:00 2016 mvetterAATTsuse.com
- Add package dependency for aaa_base, fixing bnc#899409
(was done by tbehrensAATTsuse.com but not submitted to Factory)
Mon May 30 14:00:00 2016 mvetterAATTsuse.com
- shadow 4.2.1 requested by fate#320422
- bsc#979069: Dont include shadow-4.1.5.1-bug935203-manpage.patch
- Dont set SUID bit yet. Once bsc#979282 is through, which will adapt the permissions package, we can enable the SUID bits.
Remove the files used to circumvent the check.
- Remove:
* shadow-rpmlintrc
* shadow-subids
* shadow-subids.easy
* shadow-subids.secure
* shadow-subids.paranoid
Thu May 19 14:00:00 2016 christian.braunerAATTmailbox.org
- Update to shadow-4.2.1:
- add support for subuids/subgids via newuidmap/newgidmap
- Rename chkname-regex.diff to chkname-regex.patch
- Rename encryption_method_nis.diff to encryption_method_nis.patch
- Rename getdef-new-defs.diff to getdef-new-defs.patch
- Rename shadow-login_defs.diff to shadow-login_defs.patch
- Rename userdel-scripts.diff to userdel-script.patch
- Rename useradd-script.diff to useradd-script.patch
- Rename useradd-default.diff to useradd-default.patch
- Rename useradd-mkdirs.diff to useradd-mkdirs.patch
- Add fixes from Red Hat/Fedora:
- shadow-4.1.5.1-audit-owner.patch.patch:
- log owner changes for home directory
- shadow-4.1.5.1-userdel-helpfix.patch.patch:
- give a hint about what happens when you force the removal of a user
- shadow-4.2.1-defs-chroot.patch.patch:
- initialize uid_t uid_min and uid_t uid_max not before we need them
- shadow-4.2.1-merge-group.patch.patch:
- simplify by using a single call to snprintf()
- Add upstream fix
- Fix-user-busy-errors-at-userdel.patch:
- call sub_uid_close()
Fri Jan 15 13:00:00 2016 fvogtAATTsuse.com
- Moved call from %verifyscript into %post:
* Caused call to %service_add_post shadow.service shadow.timer
during rpm -qV shadow
Wed Jul 15 14:00:00 2015 jkeilAATTsuse.de
- Add systemd unit files to continuously check password & groupfile integrity
* Idea from Arch Linux
* pending request to systemd-presets-branding-openSUSE to enable by default
Mon Mar 31 14:00:00 2014 tbehrensAATTsuse.com
- Add patch useradd-mkdirs.diff: fix for bnc#865563, create all parts
of the path
Fri Nov 22 13:00:00 2013 wernerAATTsuse.de
- Stop any systemd user manager instance in case a user entry will
be deleted (bnc#849870). Nevertheless a running process requires
the option --force for the userdel command.
Tue Nov 12 13:00:00 2013 kukukAATTsuse.de
- Add ENCRYPT_METHOD_NIS for pam_unix.so (encryption_method_nis.diff)
Tue Sep 17 14:00:00 2013 kukukAATTsuse.de
- Add some fixes from Fedora:
- shadow-4.1.5.1-backup-mode.patch: open backup file with correct
permissions.
- shadow-4.1.5.1-logmsg.patch: fix error message
- shadow-4.1.5.1-errmsg.patch: print error reason
- shadow-4.1.5.1-manfix.patch: fix manual page
Tue Feb 5 13:00:00 2013 kukukAATTsuse.de
- Cleanup login.defs and enable ENCRYPT_METHOD [bnc#802006]
Tue Nov 13 13:00:00 2012 kukukAATTsuse.de
- Fix getdef default variables (getdef-new-defs.diff)
Tue Nov 13 13:00:00 2012 kukukAATTsuse.de
- Fix default group value in /etc/default/useradd
(useradd-default.diff)
Thu Sep 27 14:00:00 2012 kukukAATTsuse.de
- Implement CHARACTER_CLASS support
(chkname-regex.diff)
Wed Sep 26 14:00:00 2012 kukukAATTsuse.de
- Add support for useradd.local
(useradd-script.diff)
Tue Sep 25 14:00:00 2012 kukukAATTsuse.de
- Fix spec file
- Adjust login.defs
(shadow-login_defs.diff)
- Add userdel
*.local script support and scrips
(userdel-scripts.diff)
Mon Sep 24 14:00:00 2012 kukukAATTsuse.de
- Initial package [FATE#314473]
