From 95a55b95cf5a806ff696de523f7812a425e0851c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dag-Erling=20Sm=C3=B8rgrav?= Date: Tue, 9 Sep 2014 09:33:54 +0000 Subject: [PATCH] Prepare for releasing Ourouparia on Thursday. git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@806 185d5e19-27fe-0310-9dcf-9bff6b9f3609 --- HISTORY | 15 ++++++++++++--- RELNOTES | 4 ++-- include/security/openpam_version.h | 4 ++-- 3 files changed, 16 insertions(+), 7 deletions(-) diff --git a/HISTORY b/HISTORY index 396eda5..750c5f4 100644 --- a/HISTORY +++ b/HISTORY @@ -1,12 +1,21 @@ OpenPAM ?????????? 2014-??-?? + - FEATURE: Add a pam_oath module that implements RFC 4226 (HOTP) and + RFC 6238 (TOTP). +============================================================================ +OpenPAM Ourouparia 2014-09-11 + + - ENHANCE: When executing a chain, require at least one service + function to succeed. This mitigates fail-open scenarios caused by + misconfigurations or missing modules. + + - ENHANCE: Make sure to overwrite buffers which may have contained an + authentication token when they're no longer needed. + - BUGFIX: Under certain circumstances, specifying a non-existent module (or misspelling the name of a module) in a policy could result in a fail-open scenario. (CVE-2014-3879) - - FEATURE: Add a pam_oath module that implements RFC 4226 (HOTP) and - RFC 6238 (TOTP). - - FEATURE: Add a search path for modules. This was implemented in Nummularia but inadvertantly left out of the release notes. diff --git a/RELNOTES b/RELNOTES index d9283d7..714c335 100644 --- a/RELNOTES +++ b/RELNOTES @@ -1,6 +1,6 @@ - Release notes for OpenPAM ???????? - ================================== + Release notes for OpenPAM Ourouparia + ==================================== This release corresponds to the code used in FreeBSD HEAD as of the release date, and is also expected to work on almost any POSIX-like diff --git a/include/security/openpam_version.h b/include/security/openpam_version.h index 12e627f..e5bd567 100644 --- a/include/security/openpam_version.h +++ b/include/security/openpam_version.h @@ -39,7 +39,7 @@ #define SECURITY_OPENPAM_VERSION_H_INCLUDED #define OPENPAM -#define OPENPAM_VERSION 20130907 -#define OPENPAM_RELEASE "Nummularia" +#define OPENPAM_VERSION 20140911 +#define OPENPAM_RELEASE "Ourouparia" #endif /* !SECURITY_OPENPAM_VERSION_H_INCLUDED */