Accepting request 352574 from security

1

OBS-URL: https://build.opensuse.org/request/show/352574
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pam_u2f?expand=0&rev=3

pam_u2f-1.0.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:fed38c26c2bec86d49dbe9046d5a34906396e97799ebb1f64f5354d7f0490b37
-size 347975

pam_u2f-1.0.4.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:71542e4568e6d2acaa50810a93c67297ba402f960da1ebb621413bd31f0732a1
+size 349114

pam_u2f.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Jan  7 21:34:49 UTC 2016 - t.gruner@katodev.de
+
+- Version 1.0.4 (released 2016-01-07)
+  - Fixed possible permission escalation when using XDG_CONFIG_HOME.
+
 -------------------------------------------------------------------
 Fri Nov  6 22:00:05 UTC 2015 - t.gruner@katodev.de
 

pam_u2f.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package pam_u2f
 #
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           pam_u2f
-Version:        1.0.3
+Version:        1.0.4
 Release:        0
 Summary:        Allows you to use U2F to authenticate against PAM
 License:        BSD-2-Clause