[ubuntu/disco-proposed] pam 1.3.1-2ubuntu1 (Accepted)

Steve Langasek steve.langasek at ubuntu.com
Wed Feb 13 06:12:12 UTC 2019


pam (1.3.1-2ubuntu1) disco; urgency=medium

  * Merge from Debian unstable, remaining changes:
    - debian/control: have libpam-modules recommend update-motd package
    - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's
      not present there or in /etc/security/pam_env.conf. (should send to
      Debian).
    - debian/libpam0g.postinst: only ask questions during update-manager when
      there are non-default services running.
    - debian/libpam0g.postinst: check if gdm is actually running before
      trying to reload it.
    - debian/libpam0g.postinst: the init script for 'samba' is now named
      'smbd' in Ubuntu, so fix the restart handling.
    - don't notify about xdm restarts during a release-upgrade
    - debian/patches-applied/ubuntu-rlimit_nice_correction: Explicitly
      initialise RLIMIT_NICE rather than relying on the kernel limits.
    - debian/patches-applied/pam_umask_usergroups_from_login.defs.patch:
      Deprecate pam_unix's explicit "usergroups" option and instead read it
      from /etc/login.def's "USERGROUP_ENAB" option if umask is only defined
      there. This restores compatibility with the pre-PAM behaviour of login.
    - debian/patches-applied/pam_motd-legal-notice: display the contents of
      /etc/legal once, then set a flag in the user's homedir to prevent
      showing it again.
    - debian/update-motd.5, debian/libpam-modules.manpages: add a manpage
      for update-motd, with some best practices and notes of explanation.
    - debian/patches/update-motd-manpage-ref: add a reference in pam_motd(8)
      to update-motd(5)
    - debian/local/common-session{,-noninteractive}: Enable pam_umask by
      default, now that the umask setting is gone from /etc/profile.
    - debian/local/pam-auth-update: Add the new md5sums for pam_umask addition.
    - debian/patches-applied/extrausers.patch: Add a pam_extrausers module
      that is basically just a copy of pam_unix but looks at
      /var/lib/extrausers/{group,passwd,shadow} instead of /etc/
    - debian/libpam-modules-bin.install: install the helper binaries for
      pam_extrausers to /sbin
    - debian/rules: Make pam_extrausers_chkpwd sguid shadow
  * Dropped changes, included in Debian:
    - pam-configs/mkhomedir: Added a config for pam_mkhomedir, disabled
      by default.
  * Dropped changes, obsoleted:
    - debian/patches-applied/cve-2015-3238.patch: removed manpage changes
      so they don't get regenerated during build and cause a multiarch
      installation issue.
  * Fix the name of the samba service being restarted, which was now
    differently wrong in each of Debian and Ubuntu.
  * Update extrausers.patch for changes in the upstream build system.
  * Fix debian/patches-applied/update-motd to apply the correct changes
    to the README (should be forwarded to Debian)
  * debian/patches-applied/pam_umask_usergroups_from_login.defs.patch:
    include changes to the README.
  * Add lintian override for pam_extrausers_chkpwd

pam (1.3.1-2) unstable; urgency=medium

  * Bump the version check for service restarts to 1.3.1-2.
    Closes: #922178.
  * Drop hard-coded pre-dep on libpam0g, now superseded by shlibdeps.

pam (1.3.1-1) unstable; urgency=medium

  * New upstream release.  Closes: #821408.
    - Don't try to close an excessive number of fds when we have a high
      ulimit.  Closes: #890524.
    - Clarify pam_access docs regarding handling of daemons and X sessions.
      Closes: #762110.
    - Fix handling of rhost and tty fields in pam_succeed_if.
      Closes: #889910.
    - Fix wrong documentation of pam_umask module behavior.
      Closes: #825782.
  * Refresh patches.
  * Drop patches included or obsoleted upstream:
    - debian/patches-applied/README-rebuild
    - debian/patches-applied/pam-loginuid-in-containers
    - debian/patches-applied/cve-2013-7041.patch
    - debian/patches-applied/cve-2014-2583.patch
    - debian/patches-applied/cve-2015-3238.patch
    - debian/patches-applied/pam_namespace_fix_bashism.patch
  * Drop unused lintian overrides.
  * Fix lintian warnings; thanks to Andreas Henriksson <andreas at fatal.se>
    and Florian Vessaz <florian at florv.ch>
  * Switch source package to 3.0 (quilt) to consume upstream .tar.xz.
  * Update debian/watch.

  [ Andreas Henriksson ]
  * Update debian/libpam0g.symbols
  * debian/patches-applied/fix-autoreconf.patch: Do not override user
    variables in Makefile.am

pam (1.1.8-4) unstable; urgency=medium

  * Acknowledge various NMUs; thanks to the various folks who have helped
    keep this package in good condition.
  * debian/control: update VCS headers to point to git (temporarily under
    my personal salsa namespace, until I get around to restoring team
    setup).
  * Actually remove Roger Leigh from uploaders (change not included in
    previous upload).  Thanks Roger for your contributions to Debian!
  * Use DEB_BUILD_PROFILES instead of the obsolete DEB_BUILD_PROFILE.
    Closes: #907492.
  * Don't include changes to autogenerated files in patches.
  * Use LC_ALL=C.UTF-8, not LC_ALL=C, when generating documentation.
  * Consistently include documentation changes in patches, for clean source
    package.
  * debian/patches-applied/README-rebuild: rebuild README files with
    current docs toolchain.

pam (1.1.8-3.8) unstable; urgency=medium

  * Non-maintainer upload.
  * Set Rules-Requires-Root to binary-targets as pam relies on
    chgrp in debian/rules.
  * Update pam-auth-update to detect write errors and properly
    fail when that happens.  (Closes: #880501)
  * Remove Roger Leigh from uploaders as he has restired from
    Debian.  (Closes: #869348)
  * Reduce priority of libpam0g to optional.
  * Rebuild with a recent version of dpkg-source, which ensures
    that the Build-Depends are correct in the .dsc file.
    (Closes: #890602)
  * Apply patch from Felix Lechner to make pam-auth-update ignore
    editor backup files.  (Closes: #519361)
  * Apply update to Brazilian Portuguese translations of the
    debconf templates.  Thanks to Adriano Rafael Gomes.
    (Closes: #799417)

pam (1.1.8-3.7) unstable; urgency=medium

  * Non-maintainer upload.
  * libpam-modules: Added a config for pam_mkhomedir, disabled by default.
    (Closes: #568577)
  * pam-auth-update: Add support for --enable option which is useful for
    enabling non-default configs without prompting the admin. (LP: #1192719)

Date: Wed, 13 Feb 2019 06:07:03 +0000
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/pam/1.3.1-2ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 13 Feb 2019 06:07:03 +0000
Source: pam
Binary: libpam0g libpam-modules libpam-modules-bin libpam-runtime libpam0g-dev libpam-cracklib libpam-doc
Architecture: source
Version: 1.3.1-2ubuntu1
Distribution: disco
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Description:
 libpam-cracklib - PAM module to enable cracklib support
 libpam-doc - Documentation of PAM
 libpam-modules - Pluggable Authentication Modules for PAM
 libpam-modules-bin - Pluggable Authentication Modules for PAM - helper binaries
 libpam-runtime - Runtime support for the PAM library
 libpam0g   - Pluggable Authentication Modules library
 libpam0g-dev - Development files for PAM
Closes: 519361 568577 762110 799417 821408 825782 869348 880501 889910 890524 890602 907492 922178
Launchpad-Bugs-Fixed: 1192719
Changes:
 pam (1.3.1-2ubuntu1) disco; urgency=medium
 .
   * Merge from Debian unstable, remaining changes:
     - debian/control: have libpam-modules recommend update-motd package
     - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's
       not present there or in /etc/security/pam_env.conf. (should send to
       Debian).
     - debian/libpam0g.postinst: only ask questions during update-manager when
       there are non-default services running.
     - debian/libpam0g.postinst: check if gdm is actually running before
       trying to reload it.
     - debian/libpam0g.postinst: the init script for 'samba' is now named
       'smbd' in Ubuntu, so fix the restart handling.
     - don't notify about xdm restarts during a release-upgrade
     - debian/patches-applied/ubuntu-rlimit_nice_correction: Explicitly
       initialise RLIMIT_NICE rather than relying on the kernel limits.
     - debian/patches-applied/pam_umask_usergroups_from_login.defs.patch:
       Deprecate pam_unix's explicit "usergroups" option and instead read it
       from /etc/login.def's "USERGROUP_ENAB" option if umask is only defined
       there. This restores compatibility with the pre-PAM behaviour of login.
     - debian/patches-applied/pam_motd-legal-notice: display the contents of
       /etc/legal once, then set a flag in the user's homedir to prevent
       showing it again.
     - debian/update-motd.5, debian/libpam-modules.manpages: add a manpage
       for update-motd, with some best practices and notes of explanation.
     - debian/patches/update-motd-manpage-ref: add a reference in pam_motd(8)
       to update-motd(5)
     - debian/local/common-session{,-noninteractive}: Enable pam_umask by
       default, now that the umask setting is gone from /etc/profile.
     - debian/local/pam-auth-update: Add the new md5sums for pam_umask addition.
     - debian/patches-applied/extrausers.patch: Add a pam_extrausers module
       that is basically just a copy of pam_unix but looks at
       /var/lib/extrausers/{group,passwd,shadow} instead of /etc/
     - debian/libpam-modules-bin.install: install the helper binaries for
       pam_extrausers to /sbin
     - debian/rules: Make pam_extrausers_chkpwd sguid shadow
   * Dropped changes, included in Debian:
     - pam-configs/mkhomedir: Added a config for pam_mkhomedir, disabled
       by default.
   * Dropped changes, obsoleted:
     - debian/patches-applied/cve-2015-3238.patch: removed manpage changes
       so they don't get regenerated during build and cause a multiarch
       installation issue.
   * Fix the name of the samba service being restarted, which was now
     differently wrong in each of Debian and Ubuntu.
   * Update extrausers.patch for changes in the upstream build system.
   * Fix debian/patches-applied/update-motd to apply the correct changes
     to the README (should be forwarded to Debian)
   * debian/patches-applied/pam_umask_usergroups_from_login.defs.patch:
     include changes to the README.
   * Add lintian override for pam_extrausers_chkpwd
 .
 pam (1.3.1-2) unstable; urgency=medium
 .
   * Bump the version check for service restarts to 1.3.1-2.
     Closes: #922178.
   * Drop hard-coded pre-dep on libpam0g, now superseded by shlibdeps.
 .
 pam (1.3.1-1) unstable; urgency=medium
 .
   * New upstream release.  Closes: #821408.
     - Don't try to close an excessive number of fds when we have a high
       ulimit.  Closes: #890524.
     - Clarify pam_access docs regarding handling of daemons and X sessions.
       Closes: #762110.
     - Fix handling of rhost and tty fields in pam_succeed_if.
       Closes: #889910.
     - Fix wrong documentation of pam_umask module behavior.
       Closes: #825782.
   * Refresh patches.
   * Drop patches included or obsoleted upstream:
     - debian/patches-applied/README-rebuild
     - debian/patches-applied/pam-loginuid-in-containers
     - debian/patches-applied/cve-2013-7041.patch
     - debian/patches-applied/cve-2014-2583.patch
     - debian/patches-applied/cve-2015-3238.patch
     - debian/patches-applied/pam_namespace_fix_bashism.patch
   * Drop unused lintian overrides.
   * Fix lintian warnings; thanks to Andreas Henriksson <andreas at fatal.se>
     and Florian Vessaz <florian at florv.ch>
   * Switch source package to 3.0 (quilt) to consume upstream .tar.xz.
   * Update debian/watch.
 .
   [ Andreas Henriksson ]
   * Update debian/libpam0g.symbols
   * debian/patches-applied/fix-autoreconf.patch: Do not override user
     variables in Makefile.am
 .
 pam (1.1.8-4) unstable; urgency=medium
 .
   * Acknowledge various NMUs; thanks to the various folks who have helped
     keep this package in good condition.
   * debian/control: update VCS headers to point to git (temporarily under
     my personal salsa namespace, until I get around to restoring team
     setup).
   * Actually remove Roger Leigh from uploaders (change not included in
     previous upload).  Thanks Roger for your contributions to Debian!
   * Use DEB_BUILD_PROFILES instead of the obsolete DEB_BUILD_PROFILE.
     Closes: #907492.
   * Don't include changes to autogenerated files in patches.
   * Use LC_ALL=C.UTF-8, not LC_ALL=C, when generating documentation.
   * Consistently include documentation changes in patches, for clean source
     package.
   * debian/patches-applied/README-rebuild: rebuild README files with
     current docs toolchain.
 .
 pam (1.1.8-3.8) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Set Rules-Requires-Root to binary-targets as pam relies on
     chgrp in debian/rules.
   * Update pam-auth-update to detect write errors and properly
     fail when that happens.  (Closes: #880501)
   * Remove Roger Leigh from uploaders as he has restired from
     Debian.  (Closes: #869348)
   * Reduce priority of libpam0g to optional.
   * Rebuild with a recent version of dpkg-source, which ensures
     that the Build-Depends are correct in the .dsc file.
     (Closes: #890602)
   * Apply patch from Felix Lechner to make pam-auth-update ignore
     editor backup files.  (Closes: #519361)
   * Apply update to Brazilian Portuguese translations of the
     debconf templates.  Thanks to Adriano Rafael Gomes.
     (Closes: #799417)
 .
 pam (1.1.8-3.7) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * libpam-modules: Added a config for pam_mkhomedir, disabled by default.
     (Closes: #568577)
   * pam-auth-update: Add support for --enable option which is useful for
     enabling non-default configs without prompting the admin. (LP: #1192719)
Checksums-Sha1:
 b3cf5788f400cf095ba73abb69c426eac257c186 2736 pam_1.3.1-2ubuntu1.dsc
 e89b6d279c9bf8cb495dfc0b3f3931eb50f818e9 912332 pam_1.3.1.orig.tar.xz
 82856fece1622eb76f2ad8a1ddd892fd605690c6 158372 pam_1.3.1-2ubuntu1.debian.tar.xz
 c341f079d3da33ab670ba58bf526015c99c75481 7072 pam_1.3.1-2ubuntu1_source.buildinfo
Checksums-Sha256:
 7fedaaff52c57d2511312136885542f1ae331538fe1caca3133a13323f288777 2736 pam_1.3.1-2ubuntu1.dsc
 eff47a4ecd833fbf18de9686632a70ee8d0794b79aecb217ebd0ce11db4cd0db 912332 pam_1.3.1.orig.tar.xz
 6cbad77b1c7d43a0aa274cbaafa903881b713603e822409d31c8614e0dba08d5 158372 pam_1.3.1-2ubuntu1.debian.tar.xz
 065ea700fea3447c3609d262c0fe5fcdb818a13a49e32fc2f8a12ed8e88981ce 7072 pam_1.3.1-2ubuntu1_source.buildinfo
Files:
 0a077b4af756e95c63ffda293b0abd1c 2736 libs optional pam_1.3.1-2ubuntu1.dsc
 558ff53b0fc0563ca97f79e911822165 912332 libs optional pam_1.3.1.orig.tar.xz
 accb3259ec12a29dea15ce0dbb711a36 158372 libs optional pam_1.3.1-2ubuntu1.debian.tar.xz
 899f85e34c09f22942aa0a0ff1526207 7072 libs optional pam_1.3.1-2ubuntu1_source.buildinfo
Original-Maintainer: Steve Langasek <vorlon at debian.org>

-----BEGIN PGP SIGNATURE-----
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=oJi7
-----END PGP SIGNATURE-----


More information about the Disco-changes mailing list