Fedora 9 Update: pam-1.0.4-4.fc9
Summary
PAM (Pluggable Authentication Modules) is a system security tool that
allows system administrators to set authentication policy without
having to recompile programs that handle authentication.
Update to new minor upstream release. Minor security issue fixes and bug fixes.
* Mon Mar 30 2009 Tomas Mraz
- replace libtool to drop unneeded /lib64 rpath
* Thu Mar 26 2009 Tomas Mraz
- replace all std descriptors when calling helpers (#491471)
* Tue Mar 17 2009 Tomas Mraz
- update to new upstream minor release (bugfixes and
minor security fixes)
- drop tests for not pulling in libpthread (as NPTL should
be safe)
* Tue Sep 23 2008 Tomas Mraz
- new password quality checks in pam_cracklib
- report failed logins from btmp in pam_lastlog
- allow larger groups in modutil functions
- fix leaked file descriptor in pam_tally
* Wed May 21 2008 Tomas Mraz
- pam_namespace: allow safe creation of directories owned by user (#437116)
- pam_unix: fix multiple error prompts on password change (#443872)
* Tue May 20 2008 Tomas Mraz
- pam_selinux: add env_params option which will be used by OpenSSH
- fix build with new autoconf
[ 1 ] Bug #489932 - CVE-2009-0887 pam: integer signedness error in _pam_StrTok()
https://bugzilla.redhat.com/show_bug.cgi?id=489932
[ 2 ] Bug #487216 - CVE-2009:0579 pam: MINDAYS not respected by pam for password changing
https://bugzilla.redhat.com/show_bug.cgi?id=487216
su -c 'yum update pam' at the command line.
For more information, refer to "Managing Software with yum",
available at .
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-announce
FEDORA-2009-3231 2009-04-02 16:29:22 Product : Fedora 9 Version : 1.0.4 Release : 4.fc9 URL : Summary : A security tool which provides authentication for applications Description : PAM (Pluggable Authentication Modules) is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication. Update to new minor upstream release. Minor security issue fixes and bug fixes. * Mon Mar 30 2009 Tomas Mraz 1.0.4-4 - replace libtool to drop unneeded /lib64 rpath * Thu Mar 26 2009 Tomas Mraz 1.0.4-3 - replace all std descriptors when calling helpers (#491471) * Tue Mar 17 2009 Tomas Mraz 1.0.4-2 - update to new upstream minor release (bugfixes and minor security fixes) - drop tests for not pulling in libpthread (as NPTL should be safe) * Tue Sep 23 2008 Tomas Mraz 1.0.2-2 - new password quality checks in pam_cracklib - report failed logins from btmp in pam_lastlog - allow larger groups in modutil functions - fix leaked file descriptor in pam_tally * Wed May 21 2008 Tomas Mraz 1.0.1-4 - pam_namespace: allow safe creation of directories owned by user (#437116) - pam_unix: fix multiple error prompts on password change (#443872) * Tue May 20 2008 Tomas Mraz 1.0.1-3 - pam_selinux: add env_params option which will be used by OpenSSH - fix build with new autoconf [ 1 ] Bug #489932 - CVE-2009-0887 pam: integer signedness error in _pam_StrTok() https://bugzilla.redhat.com/show_bug.cgi?id=489932 [ 2 ] Bug #487216 - CVE-2009:0579 pam: MINDAYS not respected by pam for password changing https://bugzilla.redhat.com/show_bug.cgi?id=487216 su -c 'yum update pam' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-announce
Change Log
References