Fedora 9 PAM Security Update 2009-3231 Moderate: Minor Issues Resolved

PAM (Pluggable Authentication Modules) is a system security tool that

allows system administrators to set authentication policy without

having to recompile programs that handle authentication.

Update to new minor upstream release. Minor security issue fixes and bug fixes.

* Mon Mar 30 2009 Tomas Mraz 1.0.4-4

- replace libtool to drop unneeded /lib64 rpath

* Thu Mar 26 2009 Tomas Mraz 1.0.4-3

- replace all std descriptors when calling helpers (#491471)

* Tue Mar 17 2009 Tomas Mraz 1.0.4-2

- update to new upstream minor release (bugfixes and

minor security fixes)

- drop tests for not pulling in libpthread (as NPTL should

be safe)

* Tue Sep 23 2008 Tomas Mraz 1.0.2-2

- new password quality checks in pam_cracklib

- report failed logins from btmp in pam_lastlog

- allow larger groups in modutil functions

- fix leaked file descriptor in pam_tally

* Wed May 21 2008 Tomas Mraz 1.0.1-4

- pam_namespace: allow safe creation of directories owned by user (#437116)

- pam_unix: fix multiple error prompts on password change (#443872)

* Tue May 20 2008 Tomas Mraz 1.0.1-3

- pam_selinux: add env_params option which will be used by OpenSSH

- fix build with new autoconf

[ 1 ] Bug #489932 - CVE-2009-0887 pam: integer signedness error in _pam_StrTok()

https://bugzilla.redhat.com/show_bug.cgi?id=489932

[ 2 ] Bug #487216 - CVE-2009:0579 pam: MINDAYS not respected by pam for password changing

https://bugzilla.redhat.com/show_bug.cgi?id=487216

su -c 'yum update pam' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/