From 87279e85bbb0dc528c09dc576674e8e6bbdd7bc57e5d4c04b07d29302b8ae088 Mon Sep 17 00:00:00 2001 From: Michael Vetter Date: Thu, 17 Aug 2023 07:04:09 +0000 Subject: [PATCH] * configure: add with-libbsd option * Code cleanup * Replace utmp interface #757 * new option enable-logind #674 * shadow userdel: add the adaptation to the busybox ps in 01-kill_user_procs.sh * chsh: warn if root sets a shell not listed in /etc/shells #535 * newgrp: fix potential string injection * lastlog: fix alignment of Latest header * Fix yescrypt support #748 * chgpasswd: Fix segfault in command-line options * gpasswd: Fix password leak * Add --prefix to passwd, chpasswd and chage #714 (bsc#1206627) * usermod: fix off-by-one issues #701 * ch(g)passwd: Check selinux permissions upon startup #675 * sub_[ug]id_{add,remove}: fix return values * chsh: Verify that login shell path is absolute #730 * process_prefix_flag: Drop privileges * run_parts for groupadd and groupdel #706 * newgrp/useradd: always set SIGCHLD to default * useradd/usermod: add --selinux-range argument #698 * sssd: skip flushing if executable does not exist #699 * semanage: Do not set default SELinux range #676 * Add control character check #687 * usermod: respect --prefix for --gid option * Fix null dereference in basename * newuidmap and newgidmap: support passing pid as fd * Prevent out of boundary access #633 * Explicitly override only newlines #633 * Correctly handle illegal system file in tz #633 * Supporting vendor given -shells- configuration file #599 OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=151 --- shadow-4.14.0.tar.xz | 4 ++-- shadow-4.14.0.tar.xz.asc | 11 +++++++++++ shadow.changes | 36 +++++++++++++++++++++++++++++++++++- shadow.spec | 8 +++----- 4 files changed, 51 insertions(+), 8 deletions(-) create mode 100644 shadow-4.14.0.tar.xz.asc diff --git a/shadow-4.14.0.tar.xz b/shadow-4.14.0.tar.xz index 2437aaf..379d278 100644 --- a/shadow-4.14.0.tar.xz +++ b/shadow-4.14.0.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:b76d61c06f6ffea93a2585630c18cf5f6c6da7f2a4fb5979424f21fed5299b07 -size 1787272 +oid sha256:87e1c5cc10109536132f1b4e29b6df6edc99b70f36f71ff042c2783f2fa01d4f +size 1787892 diff --git a/shadow-4.14.0.tar.xz.asc b/shadow-4.14.0.tar.xz.asc new file mode 100644 index 0000000..a768a37 --- /dev/null +++ b/shadow-4.14.0.tar.xz.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- + +iQEzBAABCgAdFiEEqb0/8XByttt4D8+UNXDaFycKziQFAmTcOGUACgkQNXDaFycK +ziRQVwgAyUZhhaLuXEHU6D3OwiK7frZa1qYMFpmJw/+jDr4T25TDRqXz331qSjiQ +WkDxcLECImPmpL9zvLn+lIvfzXZRdxOAwBRV9wvOqma4gOgE5av+g7b4MvBVdoiT +1JmDxjg/N9wdXz8plvD8Kwv9IGLBpe2e0ZuIazIVtxkY9A0xUVuz4kqBEsznVCdn +C+x5iFpLahFg18U6DivTPvF7dMV30l1s+hkIDkiMxStmb6OtIezmu1GsTxJyIMnT ++PNQw5crHccfCfLQRH+eKHIGTqaibIawJWUS0lAzbQqq1J/kGo8aKg46JgEm7WtU +0T14PVza1VqVNXAK8f0GlrVL82+iow== +=blJ0 +-----END PGP SIGNATURE----- diff --git a/shadow.changes b/shadow.changes index 7b9b6d8..a37ff11 100644 --- a/shadow.changes +++ b/shadow.changes @@ -1,7 +1,41 @@ ------------------------------------------------------------------- -Thu Aug 3 17:09:55 UTC 2023 - Michael Vetter +Thu Aug 17 06:43:38 UTC 2023 - Michael Vetter - Update to 4.14.0: + * configure: add with-libbsd option + * Code cleanup + * Replace utmp interface #757 + * new option enable-logind #674 + * shadow userdel: add the adaptation to the busybox ps in 01-kill_user_procs.sh + * chsh: warn if root sets a shell not listed in /etc/shells #535 + * newgrp: fix potential string injection + * lastlog: fix alignment of Latest header + * Fix yescrypt support #748 + * chgpasswd: Fix segfault in command-line options + * gpasswd: Fix password leak + * Add --prefix to passwd, chpasswd and chage #714 (bsc#1206627) + * usermod: fix off-by-one issues #701 + * ch(g)passwd: Check selinux permissions upon startup #675 + * sub_[ug]id_{add,remove}: fix return values + * chsh: Verify that login shell path is absolute #730 + * process_prefix_flag: Drop privileges + * run_parts for groupadd and groupdel #706 + * newgrp/useradd: always set SIGCHLD to default + * useradd/usermod: add --selinux-range argument #698 + * sssd: skip flushing if executable does not exist #699 + * semanage: Do not set default SELinux range #676 + * Add control character check #687 + * usermod: respect --prefix for --gid option + * Fix null dereference in basename + * newuidmap and newgidmap: support passing pid as fd + * Prevent out of boundary access #633 + * Explicitly override only newlines #633 + * Correctly handle illegal system file in tz #633 + * Supporting vendor given -shells- configuration file #599 + * Warn if failed to read existing /etc/nsswitch.conf + * chfn: new_fields: fix wrong fields printed + * Allow supplementary groups to be added via config file #586 + * useradd: check if subid range exists for user #592 (rh#2012929) - Refresh useradd-default.patch - Remove upstreamed patches: * useradd-userkeleton.patch diff --git a/shadow.spec b/shadow.spec index d439664..fede1a6 100644 --- a/shadow.spec +++ b/shadow.spec @@ -28,11 +28,9 @@ Summary: Utilities to Manage User and Group Accounts License: BSD-3-Clause AND GPL-2.0-or-later Group: System/Base URL: https://github.com/shadow-maint/shadow -#Source0: https://github.com/shadow-maint/shadow/releases/download/%{version}/shadow-%{version}.tar.xz/ -#Source0: https://github.com/shadow-maint/shadow/releases/download/4.14.0-rc1/shadow-4.14.0-rc1.tar.xz#/shadow-%{version}.tar.xz -Source0: https://github.com/shadow-maint/shadow/releases/download/4.14.0-rc4/shadow-4.14.0-rc4.tar.xz#/shadow-%{version}.tar.xz +Source0: https://github.com/shadow-maint/shadow/releases/download/%{version}/shadow-%{version}.tar.xz Source1: pamd.tar.bz2 -#Source2: https://github.com/shadow-maint/shadow/releases/download/%{version}/shadow-%{version}.tar.xz.asc +Source2: https://github.com/shadow-maint/shadow/releases/download/%{version}/shadow-%{version}.tar.xz.asc Source3: %{name}.keyring Source4: shadow.service Source5: shadow.timer @@ -109,7 +107,7 @@ Requires: libsubid4 = %{version} Development files for libsubid4. %prep -%setup -q -a 1 -n shadow-4.14.0-rc4 +%setup -q -a 1 %patch0 %patch1 %patch2