Revisions of shadow
Ana Guerrero (anag+factory)
accepted
request 1161093
from
Michael Vetter (jubalh)
(revision 67)
- Update to 4.15.1: * Fix a bug that caused spurious error messages about unknown login.defs configuration options #967 * Adding checks for fd omission #964 * Use temporary stat buffer #974 * Fix wrong french translation #975 - Drop shadow-4.15.0-fix-definition.patch
Ana Guerrero (anag+factory)
accepted
request 1159987
from
Michael Vetter (jubalh)
(revision 66)
- Add shadow-4.15.0-fix-definition.patch: Fix error messages about config options. See gh/shadow-maint/shadow#967 - Update to 4.15.0 * libshadow: + Use utmpx instead of utmp. This fixes a regression introduced in 4.14.0. + Fix build error (parameter name omitted). * Build system: + Link correctly with libdl. + Install pam configs for chpasswd(8) and newusers(8) when using ./configure --with-libpam --disable-account-tools-setuid. + Merge libshadow and libmisc into a single libshadow. This fixes problems in the linker, which were reported at least in Gentoo. + Fix build with musl libc. + Support out of tree builds * useradd(8): + Set proper SELinux labels for def_usrtemplate - Update Serge Hallyns GPG key - Update shadow-login_defs-unused-by-pam.patch
Ana Guerrero (anag+factory)
accepted
request 1154375
from
Michael Vetter (jubalh)
(revision 65)
- Update to 4.14.6: * login(1): + Fix off-by-one bugs. * passwd(1): + Don't silently truncate passwords of length >= 200 characters. Instead, accept a length of PASS_MAX, and reject longer ones. * libshadow: + Fix calculation in strtoday(), which caused a wrong half-day offset in some cases (bsc#1176006) + Fix parsing of dates in get_date() (bsc#1176006) + Use utmpx instead of utmp. This fixes a regression introduced in 4.14.0.
Ana Guerrero (anag+factory)
accepted
request 1146473
from
Michael Vetter (jubalh)
(revision 64)
- Update to 4.14.5: * Build system: + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had been deleted from a Makefile variable, but it should have been chpasswd. - Remove shadow-4.14.4-chgpasswd-typo.patch - Update to 4.14.4: * Build system: + Link correctly with libdl. + Install pam configs for chpasswd(8) and newusers(8) when using ./configure --with-libpam --disable-account-tools-setuid. * libshadow: + Fix build error (parameter name omitted). + Fix off-by-one bug. + Remove warning. - Add shadow-4.14.4-chgpasswd-typo.patch: to fix build. See #926 - Update patch macro `patchN` -> `patch -P N`
Ana Guerrero (anag+factory)
accepted
request 1139074
from
Michael Vetter (jubalh)
(revision 63)
- Update to 4.14.3: * libshadow: + Avoid null pointer dereference (#904)
Ana Guerrero (anag+factory)
accepted
request 1137739
from
Michael Vetter (jubalh)
(revision 62)
- bsc#1199026 bsc#1203823: Remove pam_keyinit from PAM configuration. This was introduced for bsc#1144060.
Ana Guerrero (anag+factory)
accepted
request 1121084
from
Michael Vetter (jubalh)
(revision 61)
- Update to 4.14.2: * libshadow: + Fix build with musl libc. + Avoid NULL dereference. + Update utmp at an initial login * useradd(8): + Set proper SELinux labels for def_usrtemplate * Manual: + Document --prefix in chage(1), chpasswd(8), and passwd(1) - Drop upstreamed shadow-4.14.0-selinux-labels.patch
Ana Guerrero (anag+factory)
accepted
request 1115994
from
Michael Vetter (jubalh)
(revision 60)
- Update to 4.14.1: Build system: Merge libshadow and libmisc into a single libshadow. This fixes problems in the linker, which were reported at least in Gentoo. #791 - Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring
Ana Guerrero (anag+factory)
accepted
request 1104351
from
Michael Vetter (jubalh)
(revision 58)
- Remove dependency on libbsd: On Tumbleweed we have glibc 2.38 already thus string functions like strlcpy will be present and won't be needed from libbsd. `readpassphrase()` is then the only function from libbsd not present. Upstream shadow has an in tree copy of it, that is used when the `--without-libbsd` flag is passed along. By relying on glibc 2.38 we don't need to add libbsd and libmd to our ring0 but can't easily upgrade on SLE. - Update to 4.14.0: * configure: add with-libbsd option * Code cleanup * Replace utmp interface #757 * new option enable-logind #674 * shadow userdel: add the adaptation to the busybox ps in 01-kill_user_procs.sh * chsh: warn if root sets a shell not listed in /etc/shells #535 * newgrp: fix potential string injection * lastlog: fix alignment of Latest header * Fix yescrypt support #748 * chgpasswd: Fix segfault in command-line options * gpasswd: Fix password leak * Add --prefix to passwd, chpasswd and chage #714 (bsc#1206627) * usermod: fix off-by-one issues #701 * ch(g)passwd: Check selinux permissions upon startup #675 * sub_[ug]id_{add,remove}: fix return values * chsh: Verify that login shell path is absolute #730 * process_prefix_flag: Drop privileges * run_parts for groupadd and groupdel #706 * newgrp/useradd: always set SIGCHLD to default * useradd/usermod: add --selinux-range argument #698
Dominique Leuenberger (dimstar_suse)
accepted
request 1080172
from
Michael Vetter (jubalh)
(revision 57)
- bsc#1210507 (CVE-2023-29383): Check for control characters - Add shadow-CVE-2023-29383.patch
Dominique Leuenberger (dimstar_suse)
accepted
request 1079091
from
Michael Vetter (jubalh)
(revision 56)
Dominique Leuenberger (dimstar_suse)
accepted
request 1066319
from
Michael Vetter (jubalh)
(revision 55)
- Update shadow-fix-print-login-timeout.patch - Reorder source files and patches - Remove scripts that claim to be config but are in /usr (boo#1191578) * userdel-script.patch * useradd-script.patch * useradd.local * userdel-post.local * userdel-pre.local
Dominique Leuenberger (dimstar_suse)
accepted
request 1058151
from
Michael Vetter (jubalh)
(revision 54)
- Add shadow-fix-print-login-timeout.patch: Fix printing full login timeout message See gh/shadow-maint/shadow#621 See gh/shadow-maint/shadow#606
Dominique Leuenberger (dimstar_suse)
accepted
request 1043310
from
Michael Vetter (jubalh)
(revision 53)
- bsc#1205502: Fix useradd audit event logging of ID field * Add shadow-audit-no-id.patch
Dominique Leuenberger (dimstar_suse)
accepted
request 1034857
from
Michael Vetter (jubalh)
(revision 52)
- Update to 4.13: * useradd.8: fix default group ID * Revert drop of subid_init() * Georgian translation * useradd: Avoid taking unneeded space: do not reset non-existent data in lastlog * relax username restrictions * selinux: check MLS enabled before setting serange * copy_tree: use fchmodat instead of chmod * copy_tree: don't block on FIFOs * add shell linter * copy_tree: carefully treat permissions * lib/commonio: make lock failures more detailed * lib: use strzero and memzero where applicable * Update Dutch translation * Don't test for NULL before calling free * Use libc MAX() and MIN() * chage: Fix regression in print_date * usermod: report error if homedir does not exist * libmisc: minimum id check for system accounts * fix usermod -rG x y wrongly adding a group * man: add missing space in useradd.8.xml * lastlog: check for localtime() return value * Raise limit for passwd and shadow entry length * Remove adduser-old.c * useradd: Fix buffer overflow when using a prefix * Don't warn when failed to open /etc/nsswitch.conf - Remove patches we took from upstream pre-release: * shadow-copytree-usermod-fifo.patch * shadow-chage-format.patch
Dominique Leuenberger (dimstar_suse)
accepted
request 1034152
from
Michael Vetter (jubalh)
(revision 51)
- Add shadow-copytree-usermod-fifo.patch: Fix regression that prevented `usermod -m` to work when their home directory contained at least one fifo See https://github.com/shadow-maint/shadow/pull/565
Dominique Leuenberger (dimstar_suse)
accepted
request 1032849
from
Michael Vetter (jubalh)
(revision 50)
- bsc#1204811: Fix chage date format string regression * Add shadow-chage-format.patch
Dominique Leuenberger (dimstar_suse)
accepted
request 1030965
from
Michael Vetter (jubalh)
(revision 49)
- Add shadow-prefix-overflow.patch: Fix buffer overflow when calling useradd with --prefix See https://github.com/shadow-maint/shadow/pull/588
Dominique Leuenberger (dimstar_suse)
accepted
request 999092
from
Michael Vetter (jubalh)
(revision 48)
- Update to 4.12.3: Revert removal of subid_init, which should have bumped soname. So note that 4.12 through 4.12.2 were broken for subid users. - Update to 4.12.2: * Address CVE-2013-4235 (TOCTTOU when copying directories) [bsc#916845] - Refresh useradd-userkeleton.patch: LSTAT() was removed with https://github.com/shadow-maint/shadow/pull/545 Let's use fstatat() now. - Update to 4.12.1: * Fix uk manpages - Remove shadow-4.12-remove-uk.patch: fixed upstream - Update to 4.12: * Add absolute path hint to --root * Various cleanups * Fix Ubuntu release used in CI tests * add -F options to userad * useradd manpage updates * Check for ownerid (not just username) in subid ranges * Declare file local functions static * Use strict prototypes * Do not drop const qualifier for Basename * Constify various pointers * Don't return uninitialized memory * Don't let compiler optimize away memory cleaning * Remove many obsolete compatibility checks and defines * Modify ID range check in useradd * Use "extern "C"" to make libsubid easier to use from C++
Displaying revisions 1 - 20 of 67