Change logs for pam source package in Lenny

  • pam (1.0.1-5+lenny1) stable; urgency=high
    
    
      * Security NMU, high urgency.
      * Fix signedness error in _pam_StrTok(), CVE-2009-0887.
        Closes: #520115.
    
     -- Jan Christoph Nordholz <email address hidden>  Tue, 17 Mar 2009 18:51:07 +0100
  • pam (1.0.1-5) unstable; urgency=low
    
    
      * Build-conflict with libxcrypt-dev, which otherwise pulls libxcrypt in as
        a dependency of libpam-modules if it's installed during the build.
        Thanks to Larry Doolittle for catching.
      * Don't refer to gnome-screensaver in the debconf template; it isn't
        actually affected by the libpam symbol issue because it forks a separate
        process to display the screensaver dialog.
      * Have libpam-modules Pre-Depend on ${misc:Depends}, so that we can
        warn users about needing to disable xscreensaver and xlockmore
        before libpam-modules is unpacked.  Closes: #502140, LP: #256238.
      * Updated debconf translations for the new template:
        - Italian, thanks to David Paleino <email address hidden>
        - Simplified Chinese, thanks to Deng Xiyue
          <email address hidden> (closes: #510371)
        - Portuguese, thanks to Américo Monteiro <email address hidden>
        - Swedish, thanks to Martin Bagge <email address hidden> (closes: #510379)
        - Japanese, thanks to Kenshi Muto <email address hidden> (closes: #510380)
        - Finnish, thanks to Esko Arajärvi <email address hidden> (closes: #510382)
        - Spanish, thanks to Javier Fernandez-Sanguino Peña <email address hidden>
          (closes: #510389)
        - Galician, thanks to Marce Villarino <email address hidden>
        - Slovak, thanks to helix84 <email address hidden> (closes: #510412)
        - Bulgarian, thanks to Damyan Ivanov <email address hidden>
        - Czech, thanks to Miroslav Kure <<email address hidden>
          (closes: #510608)
        - French, thanks to Steve Petruzzello <email address hidden>
        - German, thanks to Sven Joachim <email address hidden> (closes: #510617)  
        - Basque, thanks to Piarres Beobide <email address hidden>
          (closes: #510699)
        - Russian, thanks to Yuri Kozlov <email address hidden> (closes: #510701)
        - Turkish, thanks to Mert Dirik <email address hidden> (closes: #510707)
    
     -- Steve Langasek <email address hidden>  Tue, 06 Jan 2009 00:05:13 -0800
  • pam (1.0.1-4) unstable; urgency=high
    
    
      * High-urgency upload for RC bugfix.
    
      [ Julien Cristau ]
      * pam_unix-chkpwd-wait: don't assume that the unix_chkpwd process exits
        normally; if it was killed by a signal, we don't want to accept the
        password.  Closes: #495879.
    
      [ Steve Langasek ]
      * 007_modules_pam_unix: update the manpage at the same time as the xml
        source (grr, autogenerated files in source packages).  Closes: #495804.
      * 055_pam_unix_nullok_secure: also don't call the helper at all from
        _unix_blankpasswd when we can detect that null passwords are disallowed,
        to avoid causing spammy logs on successful authentications.
        Closes: #496620.
      * debian/rules: call chgrp *before* calling chmod, lest the sgid bit
        on unix_chkpwd be cleared during the build when using -rsudo.
        Closes: #496983.
    
     -- Steve Langasek <email address hidden>  Thu, 28 Aug 2008 22:59:23 -0700