diff --git a/pam_u2f-1.3.0.tar.gz b/pam_u2f-1.3.0.tar.gz deleted file mode 100644 index ee4b5ed..0000000 --- a/pam_u2f-1.3.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:72360c6875485eb4df409da8f8f52b17893f05e4d998529c238814480e115220 -size 456281 diff --git a/pam_u2f-1.3.0.tar.gz.sig b/pam_u2f-1.3.0.tar.gz.sig deleted file mode 100644 index ac26fa1..0000000 Binary files a/pam_u2f-1.3.0.tar.gz.sig and /dev/null differ diff --git a/pam_u2f-1.3.1.tar.gz b/pam_u2f-1.3.1.tar.gz new file mode 100644 index 0000000..cc5e3dd --- /dev/null +++ b/pam_u2f-1.3.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:9a13549947f844f6b3ab691d71afb4f6f00a45d165fed27b01c66c07750a9387 +size 475244 diff --git a/pam_u2f-1.3.1.tar.gz.sig b/pam_u2f-1.3.1.tar.gz.sig new file mode 100644 index 0000000..b3d4439 Binary files /dev/null and b/pam_u2f-1.3.1.tar.gz.sig differ diff --git a/pam_u2f.changes b/pam_u2f.changes index dbf8bdd..944088a 100644 --- a/pam_u2f.changes +++ b/pam_u2f.changes @@ -1,3 +1,15 @@ +------------------------------------------------------------------- +Wed Jan 15 10:02:56 UTC 2025 - Paolo Perego + +- update to 1.3.1: + * Fix incorrect usage of PAM_IGNORE (YSA-2025-01, CVE-2025-23013). + * Changed return value when nouserok is enabled and the user has no + credentials, PAM_IGNORE is used instead of PAM_SUCCESS. + * Hardened checks of authfile permissions. + * Hardened checks for nouserok. + * Improved debug messages. + * Improved documentation. + ------------------------------------------------------------------- Sat Apr 15 12:01:02 UTC 2023 - Dirk Müller diff --git a/pam_u2f.spec b/pam_u2f.spec index 0bfae36..3c5d78b 100644 --- a/pam_u2f.spec +++ b/pam_u2f.spec @@ -1,7 +1,7 @@ # # spec file for package pam_u2f # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2025 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,7 +19,7 @@ %{!?_pam_moduledir: %define _pam_moduledir /%{_lib}/security} Name: pam_u2f -Version: 1.3.0 +Version: 1.3.1 Release: 0 Summary: U2F authentication integration into PAM License: BSD-2-Clause