Changelog for pam-manpages-1.7.0-2.3.noarch.rpm :

* Thu Dec 05 2024 Valentin Lefebvre - pam_access: rework resolving of tokens as hostname - separate resolving of IP addresses from hostnames. Don\'t resolve TTYs or display variables as hostname. - Add \"nodns\" option to disallow resolving of tokens as hostname. - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078, CVE-2024-10963]
* Thu Oct 24 2024 Thorsten Kukuk - Update to version 1.7.0 - build: changed build system from autotools to meson. - libpam_misc: use ECHOCTL in the terminal input - pam_access: support UID and GID in access.conf - pam_env: install environment file in vendordir if vendordir is enabled - pam_issue: only count class user if logind support is enabled - pam_limits: use systemd-logind instead of utmp if logind support is enabled - pam_unix: compare password hashes in constant time - Multiple minor bug fixes, build fixes, portability fixes, documentation improvements, and translation updates.- Drop upstream patches: - pam-bsc1194818-cursor-escape.patch - pam_limits-systemd.patch - pam_issue-systemd.patch
* Thu Sep 12 2024 Thorsten Kukuk - baselibs.conf: add pam-userdb
* Tue Sep 10 2024 Thorsten Kukuk - pam_limits-systemd.patch: update to final PR
* Fri Sep 06 2024 Thorsten Kukuk - Add systemd-logind support to pam_limits (pam_limits-systemd.patch)- Remove /usr/etc/pam.d, everything should be migrated- Remove pam_limits from default common-sessions
* files. pam_limits is now part of pam-extra and not in our default generated config.- pam_issue-systemd.patch: only count class user sessions
* Wed Aug 07 2024 Stanislav Brabec - Prevent cursor escape from the login prompt [bsc#1194818]
* Added: pam-bsc1194818-cursor-escape.patch
* Wed Apr 10 2024 Thorsten Kukuk - Update to version 1.6.1 - pam_env: fixed --disable-econf --enable-vendordir support. - pam_unix: do not warn if password aging is disabled. - pam_unix: try to set uid to 0 before unix_chkpwd invocation. - pam_unix: allow empty passwords with non-empty hashes. - Multiple minor bug fixes, build fixes, portability fixes, documentation improvements, and translation updates.- Remove backports: - pam_env-fix_vendordir.patch - pam_env-fix-enable-vendordir-fallback.patch - pam_env-remove-escaped-newlines.patch - pam_unix-fix-password-aging-disabled.patch
* Thu Feb 22 2024 Valentin Lefebvre - Use autosetup to prepare for RPM 4.20.
* Wed Feb 07 2024 Thorsten Kukuk - pam.tmpfiles: Make sure the content of the /run directories get removed in case of a soft-reboot
* Tue Jan 30 2024 Thorsten Kukuk - Enable pam_canonicalize_user.so
* Fri Jan 19 2024 Thorsten Kukuk - Add post 1.6.0 release fixes for pam_env and pam_unix: - pam_env-fix-enable-vendordir-fallback.patch - pam_env-fix_vendordir.patch - pam_env-remove-escaped-newlines.patch - pam_unix-fix-password-aging-disabled.patch- Update to version 1.6.0 - Added support of configuration files with arbitrarily long lines. - build: fixed build outside of the source tree. - libpam: added use of getrandom(2) as a source of randomness if available. - libpam: fixed calculation of fail delay with very long delays. - libpam: fixed potential infinite recursion with includes. - libpam: implemented string to number conversions validation when parsing controls in configuration. - pam_access: added quiet_log option. - pam_access: fixed truncation of very long group names. - pam_canonicalize_user: new module to canonicalize user name. - pam_echo: fixed file handling to prevent overflows and short reads. - pam_env: added support of \'\\\' character in environment variable values. - pam_exec: allowed expose_authtok for password PAM_TYPE. - pam_exec: fixed stack overflow with binary output of programs. - pam_faildelay: implemented parameter ranges validation. - pam_listfile: changed to treat \\r and \
exactly the same in configuration. - pam_mkhomedir: hardened directory creation against timing attacks. - Please note that using
*at functions leads to more open file handles during creation. - pam_namespace: fixed potential local DoS (CVE-2024-22365). - pam_nologin: fixed file handling to prevent short reads. - pam_pwhistory: helper binary is now built only if SELinux support is enabled. - pam_pwhistory: implemented reliable usernames handling when remembering passwords. - pam_shells: changed to allow shell entries with absolute paths only. - pam_succeed_if: fixed treating empty strings as numerical value 0. - pam_unix: added support of disabled password aging. - pam_unix: synchronized password aging with shadow. - pam_unix: implemented string to number conversions validation. - pam_unix: fixed truncation of very long user names. - pam_unix: corrected rounds retrieval for configured encryption method. - pam_unix: implemented reliable usernames handling when remembering passwords. - pam_unix: changed to always run the helper to obtain shadow password entries. - pam_unix: unix_update helper binary is now built only if SELinux support is enabled. - pam_unix: added audit support to unix_update helper. - pam_userdb: added gdbm support. - Multiple minor bug fixes, portability fixes, documentation improvements, and translation updates.- The following patches are obsolete with the update: - pam_access-doc-IPv6-link-local.patch - pam_access-hostname-debug.patch - pam_shells-fix-econf-memory-leak.patch - pam_shells-fix-econf-memory-leak.patch - disable-examples.patch- pam-login_defs-check.sh: adjust checksum, SHA_CRYPT_MAX_ROUNDS is no longer used.
* Wed Aug 23 2023 Thorsten Kukuk - Fix building without SELinux
* Mon Aug 07 2023 Thorsten Kukuk - pam_access backports from upstream: - pam_access-doc-IPv6-link-local.patch: Document only partial supported IPv6 link local addresses - pam_access-hostname-debug.patch: Don\'t print error if we cannot resolve a hostname, does not need to be a hostname - pam_shells-fix-econf-memory-leak.patch: Free econf keys variable - disable-examples.patch: Don\'t build examples
* Tue May 09 2023 Thorsten Kukuk - Update to final 1.5.3 release: - configure: added --enable-logind option to use logind instead of utmp in pam_issue and pam_timestamp. - pam_modutil_getlogin: changed to use getlogin() from libc instead of parsing utmp. - Added libeconf support to pam_env and pam_shells. - Added vendor directory support to pam_access, pam_env, pam_group, pam_faillock, pam_limits, pam_namespace, pam_pwhistory, pam_sepermit, pam_shells, and pam_time. - pam_limits: changed to not fail on missing config files. - pam_pwhistory: added conf= option to specify config file location. - pam_pwhistory: added file= option to specify password history file location. - pam_shells: added shells.d support when libeconf and vendordir are enabled. - Deprecated pam_lastlog: this module is no longer built by default because it uses utmp, wtmp, btmp and lastlog, but none of them are Y2038 safe, even on 64bit architectures. pam_lastlog will be removed in one of the next releases, consider using pam_lastlog2 (from https://github.com/thkukuk/lastlog2) and/or pam_wtmpdb (from https://github.com/thkukuk/wtmpdb) instead. - Deprecated _pam_overwrite(), _pam_overwrite_n(), and _pam_drop_reply() macros provided by _pam_macros.h; the memory override performed by these macros can be optimized out by the compiler and therefore can no longer be relied upon.
* Thu Apr 20 2023 Thorsten Kukuk - pam-extra: add split provide
* Wed Apr 12 2023 Thorsten Kukuk - pam-userdb: add split provide
* Tue Apr 11 2023 Thorsten Kukuk - Drop pam-xauth_ownership.patch, got fixed in sudo itself- Drop pam-bsc1177858-dont-free-environment-string.patch, was a fix for above patch
* Thu Apr 06 2023 Thorsten Kukuk - Use bcond selinux to disable SELinux- Remove old pam_unix_
* compat symlinks- Move pam_userdb to own pam-userdb sub-package- pam-extra contains now modules having extended dependencies like libsystemd- Update to 1.5.3.90 git snapshot- Drop merged patches: - pam-git.diff - docbook5.patch - pam_pwhistory-docu.patch - pam_xauth_data.3.xml.patch- Drop Linux-PAM-1.5.2.90.tar.xz as we have to rebuild all documentation anyways and don\'t use the prebuild versions- Move all devel manual pages to pam-manpages, too. Fixes the problem that adjusted defaults not shown correct.
* Mon Mar 20 2023 Thorsten Kukuk - Add common-session-nonlogin and postlogin-
* pam.d config files for https://github.com/SUSE/pam-config/pull/16, pam_lastlog2 and upcoming pam_wtmpdb.
* Fri Mar 10 2023 Giuliano Belinassi - Enable livepatching support on x86_64.
* Tue Jan 24 2023 Valentin Lefebvre - Use rpm macros for pam dist conf dir (/usr/etc/security)
* Wed Jan 18 2023 Stefan Schubert - Moved following files/dirs in /etc/security to vendor directory: access.conf, limits.d, sepermit.conf, time.conf, namespace.conf, namespace.d, namespace.init
* Sat Dec 24 2022 Dominique Leuenberger - Also obsolete pam_unix-32bit to have clean upgrade path.
* Fri Dec 16 2022 Thorsten Kukuk - Merge pam_unix back into pam, seperate package not needed anymore
* Thu Dec 15 2022 Thorsten Kukuk - Update pam-git.diff to current upstream - pam_env: Use vendor specific pam_env.conf and environment as fallback - pam_shells: Use the vendor directory obsoletes pam_env_econf.patch- Refresh docbook5.patch
* Tue Dec 06 2022 Thorsten Kukuk - pam_pwhistory-docu.patch, docbook5.patch: convert docu to docbook5
* Thu Dec 01 2022 Thorsten Kukuk - pam-git.diff: update to current git - obsoletes pam-hostnames-in-access_conf.patch - obsoletes tst-pam_env-retval.c- pam_env_econf.patch refresh
* Tue Nov 22 2022 Thorsten Kukuk - Move pam_env config files below /usr/etc
* Tue Oct 11 2022 Stefan Schubert - pam_env: Using libeconf for reading configuration and environment files. (Patch: pam_env_econf.patch; Testcase: tst-pam_env-retval.c)
* Fri Jun 17 2022 Thorsten Kukuk - Keep old directory in filelist for migration
* Wed Jun 01 2022 Thorsten Kukuk - Move PAM config files from /usr/etc/pam.d to /usr/lib/pam.d
* Fri Mar 11 2022 Thorsten Kukuk - pam-hostnames-in-access_conf.patch: update with upstream submission. Fixes several bugs including memory leaks.
* Wed Feb 09 2022 Thorsten Kukuk - Move group.conf and faillock.conf to /usr/etc/security
* Mon Feb 07 2022 Thorsten Kukuk - Update to current git for enhanced vendordir support (pam-git.diff) Obsoletes: - 0001-Include-pam_xauth_data.3.xml-in-source-archive-400.patch - 0002-Only-include-vendordir-in-manual-page-if-set-401.patch - 0003-Use-vendor-specific-limits.conf-as-fallback-402.patch