SHA256
1
0
forked from pool/shadow
Commit Graph

179 Commits

Author SHA256 Message Date
Ana Guerrero
85fe6a4a20 Accepting request 1159987 from Base:System
- Add shadow-4.15.0-fix-definition.patch:
  Fix error messages about config options.
  See gh/shadow-maint/shadow#967

- Update to 4.15.0
  * libshadow:
    + Use utmpx instead of utmp. This fixes a regression introduced
      in 4.14.0.
    + Fix build error (parameter name omitted).
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
      ./configure --with-libpam --disable-account-tools-setuid.
    + Merge libshadow and libmisc into a single libshadow. This fixes
      problems in the linker, which were reported at least in Gentoo.
    + Fix build with musl libc.
    + Support out of tree builds
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
- Update Serge Hallyns GPG key
- Update shadow-login_defs-unused-by-pam.patch

OBS-URL: https://build.opensuse.org/request/show/1159987
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=66
2024-03-22 14:15:59 +00:00
Michael Vetter
0f42921987 - Add shadow-4.15.0-fix-definition.patch:
Fix error messages about config options.
  See gh/shadow-maint/shadow#967

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=172
2024-03-21 06:39:57 +00:00
Michael Vetter
413dcfbcf9 - Update to 4.15.0
* libshadow:
    + Use utmpx instead of utmp. This fixes a regression introduced
      in 4.14.0.
    + Fix build error (parameter name omitted).
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
      ./configure --with-libpam --disable-account-tools-setuid.
    + Merge libshadow and libmisc into a single libshadow. This fixes
      problems in the linker, which were reported at least in Gentoo.
    + Fix build with musl libc.
    + Support out of tree builds
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
- Update Serge Hallyns GPG key
- Update shadow-login_defs-unused-by-pam.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=171
2024-03-10 07:16:34 +00:00
Ana Guerrero
de9c0c0e13 Accepting request 1154375 from Base:System
- Update to 4.14.6:
  * login(1):
    + Fix off-by-one bugs.
  * passwd(1):
    + Don't silently truncate passwords of length >= 200 characters.
      Instead, accept a length of PASS_MAX, and reject longer ones.
  * libshadow:
    + Fix calculation in strtoday(), which caused a wrong half-day
      offset in some cases (bsc#1176006)
    + Fix parsing of dates in get_date() (bsc#1176006)
    + Use utmpx instead of utmp. This fixes a regression introduced in
      4.14.0.

OBS-URL: https://build.opensuse.org/request/show/1154375
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=65
2024-03-04 20:24:37 +00:00
Michael Vetter
a62399592e - Update to 4.14.6:
* login(1):
    + Fix off-by-one bugs.
  * passwd(1):
    + Don't silently truncate passwords of length >= 200 characters.
      Instead, accept a length of PASS_MAX, and reject longer ones.
  * libshadow:
    + Fix calculation in strtoday(), which caused a wrong half-day
      offset in some cases (bsc#1176006)
    + Fix parsing of dates in get_date() (bsc#1176006)
    + Use utmpx instead of utmp. This fixes a regression introduced in
      4.14.0.

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=169
2024-03-03 06:16:59 +00:00
Ana Guerrero
8122d2daff Accepting request 1146473 from Base:System
- Update to 4.14.5:
  * Build system:
     + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had
       been deleted from a Makefile variable, but it should have been
       chpasswd.
- Remove shadow-4.14.4-chgpasswd-typo.patch

- Update to 4.14.4:
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
      ./configure --with-libpam --disable-account-tools-setuid.
  * libshadow:
    + Fix build error (parameter name omitted).
    + Fix off-by-one bug.
    + Remove warning.
- Add shadow-4.14.4-chgpasswd-typo.patch: to fix build. See #926
- Update patch macro `patchN` -> `patch -P N`

OBS-URL: https://build.opensuse.org/request/show/1146473
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=64
2024-02-16 20:45:28 +00:00
Michael Vetter
504a5a8a2a - Update to 4.14.5:
* Build system:
     + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had
       been deleted from a Makefile variable, but it should have been
       chpasswd.
- Remove shadow-4.14.4-chgpasswd-typo.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=167
2024-02-13 18:46:23 +00:00
Michael Vetter
b61dc19e89 Accepting request 1146447 from home:jubalh:branches:Base:System
- Update to 4.14.4:
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
      ./configure --with-libpam --disable-account-tools-setuid.
  * libshadow:
    + Fix build error (parameter name omitted).
    + Fix off-by-one bug.
    + Remove warning.
- Add shadow-4.14.4-chgpasswd-typo.patch: to fix build. See #926
- Update patch macro `patchN` -> `patch -P N`

OBS-URL: https://build.opensuse.org/request/show/1146447
OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=166
2024-02-13 15:32:50 +00:00
Ana Guerrero
0703facd01 Accepting request 1139074 from Base:System
- Update to 4.14.3:
  * libshadow:
    + Avoid null pointer dereference (#904)

OBS-URL: https://build.opensuse.org/request/show/1139074
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=63
2024-01-17 21:14:09 +00:00
Michael Vetter
63a97837c7 - Update to 4.14.3:
* libshadow:
    + Avoid null pointer dereference (#904)

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=164
2024-01-16 07:04:58 +00:00
Ana Guerrero
42f26e4728 Accepting request 1137739 from Base:System
- bsc#1199026 bsc#1203823:
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.

OBS-URL: https://build.opensuse.org/request/show/1137739
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=62
2024-01-11 20:04:31 +00:00
Michael Vetter
ad60077eda - bsc#1199026 bsc#1203823:
Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=162
2024-01-09 14:17:29 +00:00
Ana Guerrero
ed667551d3 Accepting request 1121084 from Base:System
- Update to 4.14.2:
  * libshadow:
    + Fix build with musl libc.
    + Avoid NULL dereference.
    + Update utmp at an initial login
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
  * Manual:
    + Document --prefix in chage(1), chpasswd(8), and passwd(1)
- Drop upstreamed shadow-4.14.0-selinux-labels.patch

OBS-URL: https://build.opensuse.org/request/show/1121084
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=61
2023-10-31 19:24:26 +00:00
Michael Vetter
f19bcfd712 - Update to 4.14.2:
* libshadow:
    + Fix build with musl libc.
    + Avoid NULL dereference.
    + Update utmp at an initial login
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
  * Manual:
    + Document --prefix in chage(1), chpasswd(8), and passwd(1)
- Drop upstreamed shadow-4.14.0-selinux-labels.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=160
2023-10-30 07:27:10 +00:00
Ana Guerrero
8cdab85ffc Accepting request 1115994 from Base:System
- Update to 4.14.1:
  Build system: Merge libshadow and libmisc into a single libshadow.
  This fixes problems in the linker, which were reported at least
  in Gentoo. #791
- Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring

OBS-URL: https://build.opensuse.org/request/show/1115994
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=60
2023-10-06 19:11:40 +00:00
Michael Vetter
c317274c66 - Update to 4.14.1:
Build system: Merge libshadow and libmisc into a single libshadow.
  This fixes problems in the linker, which were reported at least
  in Gentoo. #791
- Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=158
2023-10-06 08:44:42 +00:00
Ana Guerrero
d61b4112dd Accepting request 1114284 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1114284
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=59
2023-10-02 18:04:17 +00:00
Michael Vetter
8a856d91ac Accepting request 1114040 from home:jsegitz:branches:Base:System
- Add shadow-4.14.0-selinux-labels.patch:
  Set proper SELinux labels for new homedirs.
  See gh/shadow-maint/shadow#812.

OBS-URL: https://build.opensuse.org/request/show/1114040
OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=156
2023-09-29 08:42:12 +00:00
Ana Guerrero
89460a18ea Accepting request 1104351 from Base:System
- Remove dependency on libbsd:
  On Tumbleweed we have glibc 2.38 already thus string functions
  like strlcpy will be present and won't be needed from libbsd.
  `readpassphrase()` is then the only function from libbsd not present.
  Upstream shadow has an in tree copy of it, that is used when the
  `--without-libbsd` flag is passed along.
  By relying on glibc 2.38 we don't need to add libbsd and libmd
  to our ring0 but can't easily upgrade on SLE.

- Update to 4.14.0:
  * configure: add with-libbsd option
  * Code cleanup
  * Replace utmp interface #757 
  * new option enable-logind #674
  * shadow userdel: add the adaptation to the busybox ps in 01-kill_user_procs.sh
  * chsh: warn if root sets a shell not listed in /etc/shells #535
  * newgrp: fix potential string injection
  * lastlog: fix alignment of Latest header
  * Fix yescrypt support #748
  * chgpasswd: Fix segfault in command-line options
  * gpasswd: Fix password leak
  * Add --prefix to passwd, chpasswd and chage #714 (bsc#1206627)
  * usermod: fix off-by-one issues #701
  * ch(g)passwd: Check selinux permissions upon startup #675
  * sub_[ug]id_{add,remove}: fix return values
  * chsh: Verify that login shell path is absolute #730
  * process_prefix_flag: Drop privileges
  * run_parts for groupadd and groupdel #706
  * newgrp/useradd: always set SIGCHLD to default
  * useradd/usermod: add --selinux-range argument #698

OBS-URL: https://build.opensuse.org/request/show/1104351
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=58
2023-08-18 17:26:58 +00:00
Michael Vetter
89d6ca85a0 OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=154 2023-08-17 10:24:51 +00:00
Michael Vetter
2745f98eaf - Remove dependency on libbsd:
On Tumbleweed we have glibc 2.38 already thus string functions
  like strlcpy will be present and won't be needed from libbsd.
  `readpassphrase()` is then the only function from libbsd not present.
  Upstream shadow has an in tree copy of it, that is used when the
  `--without-libbsd` flag is passed along.
  By relying on glibc 2.38 we don't need to add libbsd and libmd
  to our ring0 but can't easily upgrade on SLE.

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=153
2023-08-17 10:17:53 +00:00
Michael Vetter
1108d9a8b3 - This release depends either on libbsd or on glibc >= 2.38
which only recently got released. libbsd (and libmd) would be
  new packages in our ring0

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=152
2023-08-17 07:07:20 +00:00
Michael Vetter
87279e85bb * configure: add with-libbsd option
* Code cleanup
  * Replace utmp interface #757 
  * new option enable-logind #674
  * shadow userdel: add the adaptation to the busybox ps in 01-kill_user_procs.sh
  * chsh: warn if root sets a shell not listed in /etc/shells #535
  * newgrp: fix potential string injection
  * lastlog: fix alignment of Latest header
  * Fix yescrypt support #748
  * chgpasswd: Fix segfault in command-line options
  * gpasswd: Fix password leak
  * Add --prefix to passwd, chpasswd and chage #714 (bsc#1206627)
  * usermod: fix off-by-one issues #701
  * ch(g)passwd: Check selinux permissions upon startup #675
  * sub_[ug]id_{add,remove}: fix return values
  * chsh: Verify that login shell path is absolute #730
  * process_prefix_flag: Drop privileges
  * run_parts for groupadd and groupdel #706
  * newgrp/useradd: always set SIGCHLD to default
  * useradd/usermod: add --selinux-range argument #698
  * sssd: skip flushing if executable does not exist #699
  * semanage: Do not set default SELinux range #676
  * Add control character check #687
  * usermod: respect --prefix for --gid option
  * Fix null dereference in basename
  * newuidmap and newgidmap: support passing pid as fd
  * Prevent out of boundary access #633
  * Explicitly override only newlines #633
  * Correctly handle illegal system file in tz #633
  * Supporting vendor given -shells- configuration file #599

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=151
2023-08-17 07:04:09 +00:00
Michael Vetter
d8c5f764fa - Dont build lastlog (lastlog.legacy) anymore since we
use lastlog2 by default now.

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=150
2023-08-14 13:58:58 +00:00
Michael Vetter
51ee267bd3 - Update to 4.14.0:
- Refresh useradd-default.patch
- Remove upstreamed patches:
  * useradd-userkeleton.patch
  * shadow-audit-no-id.patch
  * shadow-fix-print-login-timeout.patch
  * shadow-CVE-2023-29383.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=149
2023-08-04 15:48:26 +00:00
Dominique Leuenberger
3d8b1375a7 Accepting request 1080172 from Base:System
- bsc#1210507 (CVE-2023-29383):
  Check for control characters
- Add shadow-CVE-2023-29383.patch

OBS-URL: https://build.opensuse.org/request/show/1080172
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=57
2023-04-21 12:15:33 +00:00
Michael Vetter
de2ffbd8a7 - bsc#1210507 (CVE-2023-29383):
Check for control characters
- Add shadow-CVE-2023-29383.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=147
2023-04-18 16:15:03 +00:00
Dominique Leuenberger
60f84ce541 Accepting request 1079091 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1079091
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=56
2023-04-16 14:06:38 +00:00
Michael Vetter
c13dad9ccc Accepting request 1078648 from home:kukuk:branches:Base:System
- Rename lastlog to lastlog.legacy to be able to switch to
  Y2038 safe lastlog2 as default [jsc#PED-3144]

OBS-URL: https://build.opensuse.org/request/show/1078648
OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=145
2023-04-13 09:15:30 +00:00
Dominique Leuenberger
2fe7ade94a Accepting request 1066319 from Base:System
- Update shadow-fix-print-login-timeout.patch
- Reorder source files and patches

- Remove scripts that claim to be config but are in /usr (boo#1191578)
  * userdel-script.patch
  * useradd-script.patch
  * useradd.local
  * userdel-post.local
  * userdel-pre.local

OBS-URL: https://build.opensuse.org/request/show/1066319
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=55
2023-02-19 17:18:38 +00:00
Michael Vetter
cdd1d85c79 OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=143 2023-02-17 07:53:56 +00:00
Michael Vetter
c963e461dd - Reorder source files and patches
OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=142
2023-02-16 11:42:49 +00:00
Michael Vetter
4ed74d809a - Update shadow-fix-print-login-timeout.patch
- Reorder source files

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=141
2023-02-16 11:35:29 +00:00
Michael Vetter
3a9edf4780 - Remove scripts that claim to be config but are in /usr (boo#1191578)
* userdel-script.patch
  * useradd-script.patch
  * useradd.local
  * userdel-post.local
  * userdel-pre.local

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=140
2023-02-16 09:24:10 +00:00
Michael Vetter
e2af94b0ed Accepting request 1065945 from home:lnussel:branches:Base:System
- remove scripts that claim to be config but are in /usr (boo#1191578)

OBS-URL: https://build.opensuse.org/request/show/1065945
OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=139
2023-02-16 09:21:12 +00:00
Dominique Leuenberger
b27c231a63 Accepting request 1058151 from Base:System
- Add shadow-fix-print-login-timeout.patch:
  Fix printing full login timeout message
  See gh/shadow-maint/shadow#621

  See gh/shadow-maint/shadow#606

OBS-URL: https://build.opensuse.org/request/show/1058151
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=54
2023-01-15 16:57:46 +00:00
Michael Vetter
4c6bdfaa5d - Add shadow-fix-print-login-timeout.patch:
Fix printing full login timeout message
  See gh/shadow-maint/shadow#621
  See gh/shadow-maint/shadow#606

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=137
2023-01-13 08:24:43 +00:00
Dominique Leuenberger
50d83362ee Accepting request 1043310 from Base:System
- bsc#1205502: Fix useradd audit event logging of ID field
  * Add shadow-audit-no-id.patch

OBS-URL: https://build.opensuse.org/request/show/1043310
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=53
2022-12-18 16:22:23 +00:00
Michael Vetter
5ee66f6a14 - bsc#1205502: Fix useradd audit event logging of ID field
* Add shadow-audit-no-id.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=135
2022-12-16 10:10:32 +00:00
Dominique Leuenberger
c4ba14a87f Accepting request 1034857 from Base:System
- Update to 4.13:
  * useradd.8: fix default group ID
  * Revert drop of subid_init()
  * Georgian translation
  * useradd: Avoid taking unneeded space: do not reset non-existent data
    in lastlog
  * relax username restrictions
  * selinux: check MLS enabled before setting serange
  * copy_tree: use fchmodat instead of chmod
  * copy_tree: don't block on FIFOs
  * add shell linter
  * copy_tree: carefully treat permissions
  * lib/commonio: make lock failures more detailed
  * lib: use strzero and memzero where applicable
  * Update Dutch translation
  * Don't test for NULL before calling free
  * Use libc MAX() and MIN()
  * chage: Fix regression in print_date
  * usermod: report error if homedir does not exist
  * libmisc: minimum id check for system accounts
  * fix usermod -rG x y wrongly adding a group
  * man: add missing space in useradd.8.xml
  * lastlog: check for localtime() return value
  * Raise limit for passwd and shadow entry length
  * Remove adduser-old.c
  * useradd: Fix buffer overflow when using a prefix
  * Don't warn when failed to open /etc/nsswitch.conf
- Remove patches we took from upstream pre-release:
  * shadow-copytree-usermod-fifo.patch
  * shadow-chage-format.patch

OBS-URL: https://build.opensuse.org/request/show/1034857
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=52
2022-11-12 16:39:48 +00:00
Michael Vetter
8c1e3ce264 - Update to 4.13:
* useradd.8: fix default group ID
  * Revert drop of subid_init()
  * Georgian translation
  * useradd: Avoid taking unneeded space: do not reset non-existent data
    in lastlog
  * relax username restrictions
  * selinux: check MLS enabled before setting serange
  * copy_tree: use fchmodat instead of chmod
  * copy_tree: don't block on FIFOs
  * add shell linter
  * copy_tree: carefully treat permissions
  * lib/commonio: make lock failures more detailed
  * lib: use strzero and memzero where applicable
  * Update Dutch translation
  * Don't test for NULL before calling free
  * Use libc MAX() and MIN()
  * chage: Fix regression in print_date
  * usermod: report error if homedir does not exist
  * libmisc: minimum id check for system accounts
  * fix usermod -rG x y wrongly adding a group
  * man: add missing space in useradd.8.xml
  * lastlog: check for localtime() return value
  * Raise limit for passwd and shadow entry length
  * Remove adduser-old.c
  * useradd: Fix buffer overflow when using a prefix
  * Don't warn when failed to open /etc/nsswitch.conf
- Remove patches we took from upstream pre-release:
  * shadow-copytree-usermod-fifo.patch
  * shadow-chage-format.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=133
2022-11-09 13:35:08 +00:00
Dominique Leuenberger
639c9f801b Accepting request 1034152 from Base:System
- Add shadow-copytree-usermod-fifo.patch:
  Fix regression that prevented `usermod -m` to work when their
  home directory contained at least one fifo
  See https://github.com/shadow-maint/shadow/pull/565

OBS-URL: https://build.opensuse.org/request/show/1034152
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=51
2022-11-09 11:55:54 +00:00
Michael Vetter
91f075eb3d - Add shadow-copytree-usermod-fifo.patch:
Fix regression that prevented `usermod -m` to work when their
  home directory contained at least one fifo
  See https://github.com/shadow-maint/shadow/pull/565

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=131
2022-11-07 11:26:02 +00:00
Dominique Leuenberger
205ec2f07a Accepting request 1032849 from Base:System
- bsc#1204811: Fix chage date format string regression
  * Add shadow-chage-format.patch

OBS-URL: https://build.opensuse.org/request/show/1032849
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=50
2022-11-04 16:31:23 +00:00
Michael Vetter
ec972ebebd - bsc#1204811: Fix chage date format string regression
* Add shadow-chage-format.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=129
2022-11-02 11:01:13 +00:00
Dominique Leuenberger
33a33d170a Accepting request 1030965 from Base:System
- Add shadow-prefix-overflow.patch:
  Fix buffer overflow when calling useradd with --prefix
  See https://github.com/shadow-maint/shadow/pull/588

OBS-URL: https://build.opensuse.org/request/show/1030965
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=49
2022-10-26 10:31:12 +00:00
Michael Vetter
30472fc2d8 - Add shadow-prefix-overflow.patch:
Fix buffer overflow when calling useradd with --prefix
  See https://github.com/shadow-maint/shadow/pull/588

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=127
2022-10-24 22:07:29 +00:00
Dominique Leuenberger
58b710d489 Accepting request 999092 from Base:System
- Update to 4.12.3:
  Revert removal of subid_init, which should have bumped soname.
  So note that 4.12 through 4.12.2 were broken for subid users.

- Update to 4.12.2:
  * Address CVE-2013-4235 (TOCTTOU when copying directories) [bsc#916845]
- Refresh useradd-userkeleton.patch:
  LSTAT() was removed with https://github.com/shadow-maint/shadow/pull/545
  Let's use fstatat() now.

- Update to 4.12.1:
  * Fix uk manpages
- Remove shadow-4.12-remove-uk.patch: fixed upstream

- Update to 4.12:
  * Add absolute path hint to --root
  * Various cleanups
  * Fix Ubuntu release used in CI tests
  * add -F options to userad
  * useradd manpage updates
  * Check for ownerid (not just username) in subid ranges
  * Declare file local functions static
  * Use strict prototypes
  * Do not drop const qualifier for Basename
  * Constify various pointers
  * Don't return uninitialized memory
  * Don't let compiler optimize away memory cleaning
  * Remove many obsolete compatibility checks  and defines
  * Modify ID range check in useradd
  * Use "extern "C"" to make libsubid easier to use from C++

OBS-URL: https://build.opensuse.org/request/show/999092
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shadow?expand=0&rev=48
2022-08-26 07:08:03 +00:00
Michael Vetter
2fcb52ebdf OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=125 2022-08-24 14:58:41 +00:00
Michael Vetter
b7b2971a9a - Update to 4.12.3:
Revert removal of subid_init, which should have bumped soname.
  So note that 4.12 through 4.12.2 were broken for subid users.

- Update to 4.12.2:
  * Address CVE-2013-4235 (TOCTTOU when copying directories) [bsc#916845]
- Refresh useradd-userkeleton.patch:
  LSTAT() was removed with https://github.com/shadow-maint/shadow/pull/545
  Let's use fstatat() now.

OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=124
2022-08-22 14:01:13 +00:00