diff --git a/HISTORY b/HISTORY index 396eda5..750c5f4 100644 --- a/HISTORY +++ b/HISTORY @@ -1,12 +1,21 @@ OpenPAM ?????????? 2014-??-?? + - FEATURE: Add a pam_oath module that implements RFC 4226 (HOTP) and + RFC 6238 (TOTP). +============================================================================ +OpenPAM Ourouparia 2014-09-11 + + - ENHANCE: When executing a chain, require at least one service + function to succeed. This mitigates fail-open scenarios caused by + misconfigurations or missing modules. + + - ENHANCE: Make sure to overwrite buffers which may have contained an + authentication token when they're no longer needed. + - BUGFIX: Under certain circumstances, specifying a non-existent module (or misspelling the name of a module) in a policy could result in a fail-open scenario. (CVE-2014-3879) - - FEATURE: Add a pam_oath module that implements RFC 4226 (HOTP) and - RFC 6238 (TOTP). - - FEATURE: Add a search path for modules. This was implemented in Nummularia but inadvertantly left out of the release notes. diff --git a/RELNOTES b/RELNOTES index d9283d7..714c335 100644 --- a/RELNOTES +++ b/RELNOTES @@ -1,6 +1,6 @@ - Release notes for OpenPAM ???????? - ================================== + Release notes for OpenPAM Ourouparia + ==================================== This release corresponds to the code used in FreeBSD HEAD as of the release date, and is also expected to work on almost any POSIX-like diff --git a/include/security/openpam_version.h b/include/security/openpam_version.h index 12e627f..e5bd567 100644 --- a/include/security/openpam_version.h +++ b/include/security/openpam_version.h @@ -39,7 +39,7 @@ #define SECURITY_OPENPAM_VERSION_H_INCLUDED #define OPENPAM -#define OPENPAM_VERSION 20130907 -#define OPENPAM_RELEASE "Nummularia" +#define OPENPAM_VERSION 20140911 +#define OPENPAM_RELEASE "Ourouparia" #endif /* !SECURITY_OPENPAM_VERSION_H_INCLUDED */