OpenPAM/OpenPAM
OpenPAM/OpenPAM
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
Page: Releases Ourouparia
Pages
Errata 2011 11 08 Errata 2013 03 04 Errata 2014 02 26 Errata 2014 06 02 Errata 2014 10 22 Errata 2017 01 18 Errata 2017 02 19 Errata 2019 02 22 Errata 2023 06 27 a Errata 2023 06 27 b Errata History Home MigrationToSubversionAndTrac ObtainingAndInstalling Releases Calamite Releases Caliopsis Releases Cantaloupe Releases Celandine Releases Centaury Releases Checklist Releases Cinchona Releases Cineraria Releases Cinnamon Releases Cinquefoil Releases Citronella Releases Cyclamen Releases Daffodil Releases Dianthus Releases Digitalis Releases Dogwood Releases Eelgrass Releases Feterita Releases Figwort Releases Hydrangea Releases Lycopsida Releases Micrampelis Releases Nummularia Releases Ourouparia Releases Radula Releases Resedacea Releases Tabebuia Releases Ximenia Releases
1 Releases Ourouparia
Dag-Erling Smørgrav edited this page 2021-10-20 23:28:58 +02:00
Table of Contents

OpenPAM Ourouparia

Known errata:

OpenPAM Ourouparia was released on 2014-09-12.

  • ENHANCE When executing a chain, require at least one service function to succeed. This mitigates fail-open scenarios caused by misconfigurations or missing modules.

  • ENHANCE Make sure to overwrite buffers which may have contained an authentication token when they're no longer needed.

  • BUGFIX Under certain circumstances, specifying a non-existent module (or misspelling the name of a module) in a policy could result in a fail-open scenario. (CVE-2014-3879)

  • FEATURE Add a search path for modules. This was implemented in Nummularia but inadvertently left out of the release notes.

  • BUGFIX The is_upper() predicate only accepted the letter A as an upper-case character instead of the entire A-Z range. As a result, service and module names containing upper-case letters other than A would be rejected.

Download from Sourceforge