File pam_ssh.changes of Package pam_ssh.import4422
-------------------------------------------------------------------
Mon Apr 18 13:53:35 UTC 2011 - vcizek@novell.com
- fix for bnc#688120 (pam_ssh double free)
-------------------------------------------------------------------
Mon Feb 1 12:21:21 UTC 2010 - jengelh@medozas.de
- package baselibs.conf
-------------------------------------------------------------------
Wed Jun 24 19:34:49 CEST 2009 - sbrabec@suse.cz
- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).
-------------------------------------------------------------------
Wed Jun 24 19:34:49 CEST 2009 - sbrabec@suse.cz
- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).
-------------------------------------------------------------------
Tue Apr 14 11:38:44 CEST 2009 - anicka@suse.cz
- update to 1.97
* pam_get_pass.c: CVE-2009-1273
pam_ssh used a certain prompt if a user found to exist to ask
for the SSH passphrase explicitely depending on whether the
username was valid or invalid, which made it easier for remote
attackers to enumerate usernames.
- remove last patch
-------------------------------------------------------------------
Fri Apr 10 15:26:23 CEST 2009 - anicka@suse.cz
- add fix for CVE-2009-1273 (bnc#492764) taken from Red Hat
bugzilla (#492153)
-------------------------------------------------------------------
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de
- added baselibs.conf file to build xxbit packages
for multilib support
-------------------------------------------------------------------
Mon Jan 14 13:25:03 CET 2008 - anicka@suse.cz
- update to 1.96
* pam_ssh.c (key_load_private_maybe): New wrapper for
key_load_private() that checks whether the private key's
passphrase is blank.
* pam_ssh.c: if PAM returns tty_raw = NULL we shouldn't fiddle
with a per-session file. That seems to happen if the session
module is used for background system services (like cron).
* pam_ssh.c: fixed double-free issue with file closing
- remove last two patches (fixed in upstream)
-------------------------------------------------------------------
Mon Mar 5 18:06:25 CET 2007 - anicka@suse.de
- fix crash in pam_sm_open_session [#251053]
-------------------------------------------------------------------
Fri Nov 24 12:40:51 CET 2006 - max@suse.de
- Fix crashes in in the session module (#223488).
-------------------------------------------------------------------
Tue Nov 7 13:44:18 CET 2006 - ro@suse.de
- fix manpage permissions
-------------------------------------------------------------------
Thu Aug 3 12:33:02 CEST 2006 - stark@suse.de
- update to version 1.94 (r23)
* improved logging
* more recover fixes
* root credentials weren't restored in some cases which caused
following pam session modules to fail
-------------------------------------------------------------------
Sat Jun 24 11:12:13 CEST 2006 - stark@suse.de
- update to version 1.93 (r18)
* debug option works for auth and session module (#177885)
* debug option is really available now for auth and session
module (#177885)
* recover better if close_session wasn't executed (#187560)
-------------------------------------------------------------------
Wed Jun 7 08:59:20 CEST 2006 - stark@suse.de
- logging fix is integrated now
- auth handler now accepts nullok option
-------------------------------------------------------------------
Wed May 31 23:28:20 CEST 2006 - stark@suse.de
- update to version 1.92
* allow working as session module without authentication
(workaround for #173803)
* incorporated include fixes
- fixed syslog logging (part of #177885)
-------------------------------------------------------------------
Wed Jan 25 21:39:15 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Fri Oct 14 02:19:49 CEST 2005 - ro@suse.de
- added include openssl/md5.h to cipher.c
-------------------------------------------------------------------
Mon Oct 10 15:50:31 CEST 2005 - schubi@suse.de
- added "include <syslog.h>"
-------------------------------------------------------------------
Tue Nov 9 14:40:36 CET 2004 - schubi@suse.de
- Bugfixes for other architectures
-------------------------------------------------------------------
Mon Nov 8 16:16:39 CET 2004 - schubi@suse.de
- first version
