File shadow.changes of Package shadow.8444

Overview Repositories Revisions Requests Users Attributes Meta

File shadow.changes of Package shadow.8444

-------------------------------------------------------------------
Mon Jul  2 10:34:28 UTC 2018 - mvetter@suse.com

- bsc#1099310 (CVE-2016-6252):
  Fix incorrect integer handling results in LPE
- Add shadow-4.2.1-CVE-2016-6252.patch

-------------------------------------------------------------------
Fri Feb 16 14:44:02 UTC 2018 - kbabioch@suse.com

- Added CVE-2018-7169.patch: Fixed an privilege escalation in newgidmap,
  which allowed an unprivileged user to be placed in a user namespace where
  setgroups(2) is allowed. (CVE-2018-7169 bsc#1081294)

-------------------------------------------------------------------
Fri Sep  8 13:29:35 UTC 2017 - mvetter@suse.com

- bsc#1052261: shadow-4.2.1-CVE-2017-12424.patch
  Fix buffer overflow if NULL line is present in db

-------------------------------------------------------------------
Fri Sep  1 10:22:17 UTC 2017 - mvetter@suse.com

- bsc#1023895
  * man page contained invalid options because they depend
    on compile flags and we shipped pre built ones.
    New BuildRequires: docbook-xsl-stylesheets docbook_4 xml2po
    xsltproc
  * shadow-4.2.1-unknown-settings-if-pam.patch
    Additionally we need this patch, which is included from 4.3.0
    onward, so the tools don't complain about these options.

-------------------------------------------------------------------
Thu Aug 31 13:28:25 UTC 2017 - mvetter@suse.com

- bsc#980486: shadow-4.2.1-reset-tallylog.patch
  Reset user in /var/log/tallylog because we use
  pam_tally2 and not faillog anymore.

-------------------------------------------------------------------
Thu Apr  6 13:36:27 UTC 2017 - adam.majer@suse.de

- bsc#1031643: shadow-4.1.5.1-pam_group.patch
  dynamically added users via pam_group are not listed in groups
  databases but are still valid.

-------------------------------------------------------------------
Wed Nov 30 13:02:00 UTC 2016 - adam.majer@suse.de

- bsc#1003978: shadow-4.1.5.1-id-alloc.patch
  useradd and groupadd performance fix when using SSSD
  Previously the entire possible UID/GID is iterated to find
  an available UID/GID. This can take long time over a network
  device. Instead, find available UID/GID locally, and then check
  only those values over network.

-------------------------------------------------------------------
Wed Oct 19 10:13:38 UTC 2016 - mvetter@suse.com

- bsc#1002975: Use permissions according to permissions package
  and dont try to manipulate them in %files section.

-------------------------------------------------------------------
Wed Sep 14 10:13:20 UTC 2016 - mvetter@suse.com

- boo#994486: Include shadow.5 manpage
  Previously this was provided by man-pages package in
  the man-pages-addons tarball which got removed later on.

-------------------------------------------------------------------
Tue May 31 06:48:41 UTC 2016 - mvetter@suse.com

- Add package dependency for aaa_base, fixing bnc#899409
  (was done by tbehrens@suse.com but not submitted to Factory)

-------------------------------------------------------------------
Mon May 30 09:41:55 UTC 2016 - mvetter@suse.com

- shadow 4.2.1 requested by fate#320422
- bsc#979069: Dont include shadow-4.1.5.1-bug935203-manpage.patch
- Dont set SUID bit yet. Once bsc#979282 is through, which will adapt the permissions package, we can enable the SUID bits.
  Remove the files used to circumvent the check.
- Remove:
    * shadow-rpmlintrc
    * shadow-subids
    * shadow-subids.easy
    * shadow-subids.secure
    * shadow-subids.paranoid

-------------------------------------------------------------------
Thu May 19 12:28:47 UTC 2016 - christian.brauner@mailbox.org

- Update to shadow-4.2.1:
  - add support for subuids/subgids via newuidmap/newgidmap
- Rename chkname-regex.diff to chkname-regex.patch
- Rename encryption_method_nis.diff to encryption_method_nis.patch
- Rename getdef-new-defs.diff to getdef-new-defs.patch
- Rename shadow-login_defs.diff to shadow-login_defs.patch
- Rename userdel-scripts.diff to userdel-script.patch
- Rename useradd-script.diff to useradd-script.patch
- Rename useradd-default.diff to useradd-default.patch
- Rename useradd-mkdirs.diff to useradd-mkdirs.patch
- Add fixes from Red Hat/Fedora:
  - shadow-4.1.5.1-audit-owner.patch.patch:
    - log owner changes for home directory
  - shadow-4.1.5.1-userdel-helpfix.patch.patch:
    - give a hint about what happens when you force the removal of a user
  - shadow-4.2.1-defs-chroot.patch.patch:
    - initialize uid_t uid_min and uid_t uid_max not before we need them
  - shadow-4.2.1-merge-group.patch.patch:
    - simplify by using a single call to snprintf()
- Add upstream fix
  - Fix-user-busy-errors-at-userdel.patch:
    - call sub_uid_close()

-------------------------------------------------------------------
Fri Jan 15 11:08:29 UTC 2016 - fvogt@suse.com

- Moved call from %verifyscript into %post:
  * Caused call to %service_add_post shadow.service shadow.timer
    during rpm -qV shadow

-------------------------------------------------------------------
Wed Jul 15 13:25:11 UTC 2015 - jkeil@suse.de

- Add systemd unit files to continuously check password & groupfile integrity
  * Idea from Arch Linux
  * pending request to systemd-presets-branding-openSUSE to enable by default

-------------------------------------------------------------------
Mon Mar 31 22:00:00 UTC 2014 - tbehrens@suse.com

- Add patch useradd-mkdirs.diff: fix for bnc#865563, create all parts
  of the path

-------------------------------------------------------------------
Fri Nov 22 10:15:25 UTC 2013 - werner@suse.de

- Stop any systemd user manager instance in case a user entry will
  be deleted (bnc#849870).  Nevertheless a running process requires
  the option --force for the userdel command.

-------------------------------------------------------------------
Tue Nov 12 14:47:30 CET 2013 - kukuk@suse.de

- Add ENCRYPT_METHOD_NIS for pam_unix.so (encryption_method_nis.diff)

-------------------------------------------------------------------
Tue Sep 17 14:56:44 CEST 2013 - kukuk@suse.de

- Add some fixes from Fedora:
  - shadow-4.1.5.1-backup-mode.patch: open backup file with correct
    permissions.
  - shadow-4.1.5.1-logmsg.patch: fix error message
  - shadow-4.1.5.1-errmsg.patch: print error reason
  - shadow-4.1.5.1-manfix.patch: fix manual page

-------------------------------------------------------------------
Tue Feb  5 13:19:46 CET 2013 - kukuk@suse.de

- Cleanup login.defs and enable ENCRYPT_METHOD [bnc#802006]

-------------------------------------------------------------------
Tue Nov 13 17:31:50 CET 2012 - kukuk@suse.de

- Fix getdef default variables (getdef-new-defs.diff)

-------------------------------------------------------------------
Tue Nov 13 10:36:28 CET 2012 - kukuk@suse.de

- Fix default group value in /etc/default/useradd 
  (useradd-default.diff)

-------------------------------------------------------------------
Thu Sep 27 15:20:44 CEST 2012 - kukuk@suse.de

- Implement CHARACTER_CLASS support
  (chkname-regex.diff)

-------------------------------------------------------------------
Wed Sep 26 15:20:06 CEST 2012 - kukuk@suse.de

- Add support for useradd.local
  (useradd-script.diff)

-------------------------------------------------------------------
Tue Sep 25 16:22:18 CEST 2012 - kukuk@suse.de

- Fix spec file
- Adjust login.defs
  (shadow-login_defs.diff)
- Add userdel*.local script support and scrips
  (userdel-scripts.diff)

-------------------------------------------------------------------
Mon Sep 24 16:04:03 CEST 2012 - kukuk@suse.de

- Initial package [FATE#314473]

Places

File shadow.changes of Package shadow.8444

Places