Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Restrict password length when changing password | Florian Best | 2019-06-27 |
| | |||
* | Release version 1.3.1 | Thorsten Kukuk | 2018-05-18 |
| | |||
* | Updated translations from Zanata. | Tomas Mraz | 2016-04-28 |
| | | | | * po/*.po: Updated translations from Zanata. | ||
* | Project registered at Zanata (fedora.zanata.org) for translations. | Tomas Mraz | 2016-04-14 |
| | | | | | | | * zanata.xml: Configuration file for zanata client. * po/LINGUAS: Update languages as supported by Zanata. * po/Linux-PAM.pot: Updated from sources. * po/*.po: Updated from sources. | ||
* | Release version 1.2.1 | Thorsten Kukuk | 2015-06-22 |
| | | | | | | | | | | | | | | | | | | | | | | | | Security fix: CVE-2015-3238 If the process executing pam_sm_authenticate or pam_sm_chauthtok method of pam_unix is not privileged enough to check the password, e.g. if selinux is enabled, the _unix_run_helper_binary function is called. When a long enough password is supplied (16 pages or more, i.e. 65536+ bytes on a system with 4K pages), this helper function hangs indefinitely, blocked in the write(2) call while writing to a blocking pipe that has a limited capacity. With this fix, the verifiable password length will be limited to PAM_MAX_RESP_SIZE bytes (i.e. 512 bytes) for pam_exec and pam_unix. * NEWS: Update * configure.ac: Bump version * modules/pam_exec/pam_exec.8.xml: document limitation of password length * modules/pam_exec/pam_exec.c: limit password length to PAM_MAX_RESP_SIZE * modules/pam_unix/pam_unix.8.xml: document limitation of password length * modules/pam_unix/pam_unix_passwd.c: limit password length * modules/pam_unix/passverify.c: Likewise * modules/pam_unix/passverify.h: Likewise * modules/pam_unix/support.c: Likewise | ||
* | Release version 1.2.0 | Thorsten Kukuk | 2015-04-27 |
| | | | | | | | | * NEWS: Update * configure.ac: Bump version * libpam/Makefile.am: Bump version of libpam * libpam_misc/Makefile.am: Bump version of libpam_misc * po/*: Regenerate po files | ||
* | Release version 1.1.8 | Thorsten Kukuk | 2013-09-19 |
| | |||
* | Release version 1.1.7 | Thorsten Kukuk | 2013-09-11 |
| | |||
* | Updated translations from Transifex, added new languages. | Tomas Mraz | 2012-12-12 |
po/LINGUAS: Added new languages. po/*.po: Updated translations from Transifex including new languages. |