- Update to 4.15.1:
  * Fix a bug that caused spurious error messages about unknown
    login.defs configuration options #967
  * Adding checks for fd omission #964
  * Use temporary stat buffer #974
  * Fix wrong french translation #975
- Drop shadow-4.15.0-fix-definition.patch

• Files Changed
• Browse Source

- Add shadow-4.15.0-fix-definition.patch:
  Fix error messages about config options.
  See gh/shadow-maint/shadow#967

- Update to 4.15.0
  * libshadow:
    + Use utmpx instead of utmp. This fixes a regression introduced
      in 4.14.0.
    + Fix build error (parameter name omitted).
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
      ./configure --with-libpam --disable-account-tools-setuid.
    + Merge libshadow and libmisc into a single libshadow. This fixes
      problems in the linker, which were reported at least in Gentoo.
    + Fix build with musl libc.
    + Support out of tree builds
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
- Update Serge Hallyns GPG key
- Update shadow-login_defs-unused-by-pam.patch

• Files Changed
• Browse Source

- Update to 4.14.6:
  * login(1):
    + Fix off-by-one bugs.
  * passwd(1):
    + Don't silently truncate passwords of length >= 200 characters.
      Instead, accept a length of PASS_MAX, and reject longer ones.
  * libshadow:
    + Fix calculation in strtoday(), which caused a wrong half-day
      offset in some cases (bsc#1176006)
    + Fix parsing of dates in get_date() (bsc#1176006)
    + Use utmpx instead of utmp. This fixes a regression introduced in
      4.14.0.

• Files Changed
• Browse Source

- Update to 4.14.5:
  * Build system:
     + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had
       been deleted from a Makefile variable, but it should have been
       chpasswd.
- Remove shadow-4.14.4-chgpasswd-typo.patch

- Update to 4.14.4:
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
      ./configure --with-libpam --disable-account-tools-setuid.
  * libshadow:
    + Fix build error (parameter name omitted).
    + Fix off-by-one bug.
    + Remove warning.
- Add shadow-4.14.4-chgpasswd-typo.patch: to fix build. See #926
- Update patch macro `patchN` -> `patch -P N`

• Files Changed
• Browse Source

- Update to 4.14.3:
  * libshadow:
    + Avoid null pointer dereference (#904)

• Files Changed
• Browse Source

- bsc#1199026 bsc#1203823:
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.

• Files Changed
• Browse Source

- Update to 4.14.2:
  * libshadow:
    + Fix build with musl libc.
    + Avoid NULL dereference.
    + Update utmp at an initial login
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
  * Manual:
    + Document --prefix in chage(1), chpasswd(8), and passwd(1)
- Drop upstreamed shadow-4.14.0-selinux-labels.patch

• Files Changed
• Browse Source

- Update to 4.14.1:
  Build system: Merge libshadow and libmisc into a single libshadow.
  This fixes problems in the linker, which were reported at least
  in Gentoo. #791
- Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Remove dependency on libbsd:
  On Tumbleweed we have glibc 2.38 already thus string functions
  like strlcpy will be present and won't be needed from libbsd.
  `readpassphrase()` is then the only function from libbsd not present.
  Upstream shadow has an in tree copy of it, that is used when the
  `--without-libbsd` flag is passed along.
  By relying on glibc 2.38 we don't need to add libbsd and libmd
  to our ring0 but can't easily upgrade on SLE.

- Update to 4.14.0:
  * configure: add with-libbsd option
  * Code cleanup
  * Replace utmp interface #757 
  * new option enable-logind #674
  * shadow userdel: add the adaptation to the busybox ps in 01-kill_user_procs.sh
  * chsh: warn if root sets a shell not listed in /etc/shells #535
  * newgrp: fix potential string injection
  * lastlog: fix alignment of Latest header
  * Fix yescrypt support #748
  * chgpasswd: Fix segfault in command-line options
  * gpasswd: Fix password leak
  * Add --prefix to passwd, chpasswd and chage #714 (bsc#1206627)
  * usermod: fix off-by-one issues #701
  * ch(g)passwd: Check selinux permissions upon startup #675
  * sub_[ug]id_{add,remove}: fix return values
  * chsh: Verify that login shell path is absolute #730
  * process_prefix_flag: Drop privileges
  * run_parts for groupadd and groupdel #706
  * newgrp/useradd: always set SIGCHLD to default
  * useradd/usermod: add --selinux-range argument #698

• Files Changed
• Browse Source

- bsc#1210507 (CVE-2023-29383):
  Check for control characters
- Add shadow-CVE-2023-29383.patch

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Update shadow-fix-print-login-timeout.patch
- Reorder source files and patches

- Remove scripts that claim to be config but are in /usr (boo#1191578)
  * userdel-script.patch
  * useradd-script.patch
  * useradd.local
  * userdel-post.local
  * userdel-pre.local

• Files Changed
• Browse Source

- Add shadow-fix-print-login-timeout.patch:
  Fix printing full login timeout message
  See gh/shadow-maint/shadow#621

  See gh/shadow-maint/shadow#606

• Files Changed
• Browse Source

- bsc#1205502: Fix useradd audit event logging of ID field
  * Add shadow-audit-no-id.patch

• Files Changed
• Browse Source

- Update to 4.13:
  * useradd.8: fix default group ID
  * Revert drop of subid_init()
  * Georgian translation
  * useradd: Avoid taking unneeded space: do not reset non-existent data
    in lastlog
  * relax username restrictions
  * selinux: check MLS enabled before setting serange
  * copy_tree: use fchmodat instead of chmod
  * copy_tree: don't block on FIFOs
  * add shell linter
  * copy_tree: carefully treat permissions
  * lib/commonio: make lock failures more detailed
  * lib: use strzero and memzero where applicable
  * Update Dutch translation
  * Don't test for NULL before calling free
  * Use libc MAX() and MIN()
  * chage: Fix regression in print_date
  * usermod: report error if homedir does not exist
  * libmisc: minimum id check for system accounts
  * fix usermod -rG x y wrongly adding a group
  * man: add missing space in useradd.8.xml
  * lastlog: check for localtime() return value
  * Raise limit for passwd and shadow entry length
  * Remove adduser-old.c
  * useradd: Fix buffer overflow when using a prefix
  * Don't warn when failed to open /etc/nsswitch.conf
- Remove patches we took from upstream pre-release:
  * shadow-copytree-usermod-fifo.patch
  * shadow-chage-format.patch

• Files Changed
• Browse Source

- Add shadow-copytree-usermod-fifo.patch:
  Fix regression that prevented `usermod -m` to work when their
  home directory contained at least one fifo
  See https://github.com/shadow-maint/shadow/pull/565

• Files Changed
• Browse Source

- bsc#1204811: Fix chage date format string regression
  * Add shadow-chage-format.patch

• Files Changed
• Browse Source

- Add shadow-prefix-overflow.patch:
  Fix buffer overflow when calling useradd with --prefix
  See https://github.com/shadow-maint/shadow/pull/588

• Files Changed
• Browse Source

- Update to 4.12.3:
  Revert removal of subid_init, which should have bumped soname.
  So note that 4.12 through 4.12.2 were broken for subid users.

- Update to 4.12.2:
  * Address CVE-2013-4235 (TOCTTOU when copying directories) [bsc#916845]
- Refresh useradd-userkeleton.patch:
  LSTAT() was removed with https://github.com/shadow-maint/shadow/pull/545
  Let's use fstatat() now.

- Update to 4.12.1:
  * Fix uk manpages
- Remove shadow-4.12-remove-uk.patch: fixed upstream

- Update to 4.12:
  * Add absolute path hint to --root
  * Various cleanups
  * Fix Ubuntu release used in CI tests
  * add -F options to userad
  * useradd manpage updates
  * Check for ownerid (not just username) in subid ranges
  * Declare file local functions static
  * Use strict prototypes
  * Do not drop const qualifier for Basename
  * Constify various pointers
  * Don't return uninitialized memory
  * Don't let compiler optimize away memory cleaning
  * Remove many obsolete compatibility checks  and defines
  * Modify ID range check in useradd
  * Use "extern "C"" to make libsubid easier to use from C++

• Files Changed
• Browse Source