Arthur de Jong

Open Source / Free Software developer

summaryrefslogtreecommitdiffstats
path: root/debian/changelog
diff options
context:
space:
mode:
authorArthur de Jong <arthur@arthurdejong.org>2011-03-10 22:45:14 +0100
committerArthur de Jong <arthur@arthurdejong.org>2011-03-10 22:45:14 +0100
commit7bd6de3921993855d280a42e8e5e81f7e2360ba3 (patch)
tree5b831004753d3913ccbd574f10c2c6bdce2332f2 /debian/changelog
parentb7b283dc8db16ecabb42d0792e8e7f06e3eeced8 (diff)
get files ready for 0.8.1 release0.8.1
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1385 ef36b2f9-881f-0410-afb5-c4e39611909c
Diffstat (limited to 'debian/changelog')
-rw-r--r--debian/changelog18
1 files changed, 18 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog
index 0e5dcf3..6d74432 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,21 @@
+nss-pam-ldapd (0.8.1) experimental; urgency=low
+
+ * SECURITY FIX: the PAM module will allow authentication for users that do
+ not exist in LDAP, this allows login to local users with an
+ incorrect password (CVE-2011-0438)
+ the explotability of the problem depends on the details of
+ the PAM stack and the use of the minimum_uid PAM option
+ * add FreeBSD support, partially imported from the FreeBSD port (thanks to
+ Jacques Vidrine, Artem Kazakov and Alexander V. Chernikov)
+ * document how to replace name pam_check_service_attr and
+ pam_check_host_attr options in PADL's pam_ldap with with pam_authz_search
+ in nss-pam-ldapd (closes: #610925)
+ * implement a fqdn variable that can be used in pam_authz_search filters
+ * create the directory to hold the socket and pidfile on startup
+ * implement host, network and netgroup support in pynslcd
+
+ -- Arthur de Jong <adejong@debian.org> Thu, 10 Mar 2011 22:00:00 +0100
+
nss-pam-ldapd (0.8.0) experimental; urgency=low
* include Solaris support developed by Ted C. Cheng of Symas Corporation