Accepting request 894632 from security

OBS-URL: https://build.opensuse.org/request/show/894632
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pam_u2f?expand=0&rev=8

pam_u2f-1.1.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0dc3bf96ebb69c6e398b5f8991493b37a8ce1af792948af71e694f695d5edc05
-size 415677

pam_u2f-1.1.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b7d62340c4f49e19cca93a0d0f398e48befd3eea8f1d70cebb7f8b71f3bce38a
+size 429822

pam_u2f.changes

@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Thu May 20 13:04:05 UTC 2021 - Torsten Gruner <t.gruner@katodev.de>
+
+- Update to version 1.1.1 (released 2021-05-19)
+  * Fix an issue where PIN authentication could be bypassed (CVE-2021-31924).
+  * Fix an issue with nodetect and non-resident credentials.
+  * Fix build issues with musl libc.
+  * Add support for self-attestation in pamu2fcfg.
+  * Fix minor bugs found by fuzzing.
+
 -------------------------------------------------------------------
 Thu Oct 15 17:59:59 UTC 2020 - Ismail Dönmez <idonmez@suse.com>
 

pam_u2f.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package pam_u2f
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           pam_u2f
-Version:        1.1.0
+Version:        1.1.1
 Release:        0
 Summary:        U2F authentication integration into PAM
 License:        BSD-2-Clause
@@ -29,7 +29,7 @@ Source2:        baselib.conf
 BuildRequires:  pam-devel
 BuildRequires:  pkgconfig
 BuildRequires:  pkgconfig(libcrypto)
-BuildRequires:  pkgconfig(libfido2)
+BuildRequires:  pkgconfig(libfido2) >= 1.3.0
 
 %description
 The PAM U2F module provides a way to integrate the Yubikey