Fedora 10 Update: pam-1.0.4-4.fc10

April 14, 2009

Update to new minor upstream release

Summary

PAM (Pluggable Authentication Modules) is a system security tool that

allows system administrators to set authentication policy without

having to recompile programs that handle authentication.

Update to new minor upstream release. Minor security issue fixes and bug fixes.

* Mon Mar 30 2009 Tomas Mraz 1.0.4-4

- replace libtool to drop unneeded /lib64 rpath

* Thu Mar 26 2009 Tomas Mraz 1.0.4-3

- replace all std descriptors when calling helpers (#491471)

* Tue Mar 17 2009 Tomas Mraz 1.0.4-2

- update to new upstream minor release (bugfixes and

minor security fixes)

[ 1 ] Bug #489932 - CVE-2009-0887 pam: integer signedness error in _pam_StrTok()

https://bugzilla.redhat.com/show_bug.cgi?id=489932

[ 2 ] Bug #487216 - CVE-2009:0579 pam: MINDAYS not respected by pam for password changing

https://bugzilla.redhat.com/show_bug.cgi?id=487216

su -c 'yum update pam' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

http://www.redhat.com/mailman/listinfo/fedora-package-announce

FEDORA-2009-3204 2009-04-02 16:28:52 Product : Fedora 10 Version : 1.0.4 Release : 4.fc10 URL : Summary : A security tool which provides authentication for applications Description : PAM (Pluggable Authentication Modules) is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication. Update to new minor upstream release. Minor security issue fixes and bug fixes. * Mon Mar 30 2009 Tomas Mraz 1.0.4-4 - replace libtool to drop unneeded /lib64 rpath * Thu Mar 26 2009 Tomas Mraz 1.0.4-3 - replace all std descriptors when calling helpers (#491471) * Tue Mar 17 2009 Tomas Mraz 1.0.4-2 - update to new upstream minor release (bugfixes and minor security fixes) [ 1 ] Bug #489932 - CVE-2009-0887 pam: integer signedness error in _pam_StrTok() https://bugzilla.redhat.com/show_bug.cgi?id=489932 [ 2 ] Bug #487216 - CVE-2009:0579 pam: MINDAYS not respected by pam for password changing https://bugzilla.redhat.com/show_bug.cgi?id=487216 su -c 'yum update pam' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-announce