From ec03e45823965bbcfcbaec7497a1b47033c3b632 Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Fri, 26 May 2017 16:44:06 +0200 Subject: Prepare release 1.4.0. --- NEWS | 12 ++++++++++++ configure.ac | 2 +- libpwquality.spec.in | 14 +++++++++++++- 3 files changed, 26 insertions(+), 2 deletions(-) diff --git a/NEWS b/NEWS index 0b2112e..161bc24 100644 --- a/NEWS +++ b/NEWS @@ -1,5 +1,17 @@ libpwquality NEWS -- history of user-visible changes. +Release 1.4.0 +* Fix possible buffer overflow with data from /dev/urandom + in pwquality_generate(). +* Do not try to check presence of too short username in password. + (thanks to Nikos Mavrogiannopoulos) +* Make the user name check optional (via usercheck option). +* Add an 'enforcing' option to make the checks to be warning-only + in PAM. +* The difok = 0 setting will disable all old password similarity + checks except new and old passwords being identical. +* Updated translations from Zanata. + Release 1.3.0 * Change the defaults for credits, difok, and minlen * Make the cracklib check optional but on by default diff --git a/configure.ac b/configure.ac index fff4486..14d3f71 100644 --- a/configure.ac +++ b/configure.ac @@ -1,5 +1,5 @@ dnl Process this file with autoconf to produce a configure script. -AC_INIT([libpwquality], [1.3.1]) +AC_INIT([libpwquality], [1.4.0]) AC_CONFIG_HEADERS([config.h]) AM_INIT_AUTOMAKE([dist-bzip2 no-dist-gzip -Wall]) AC_PREREQ(2.61) diff --git a/libpwquality.spec.in b/libpwquality.spec.in index 740bcd6..7ca9cd2 100644 --- a/libpwquality.spec.in +++ b/libpwquality.spec.in @@ -12,7 +12,7 @@ Source0: http://fedorahosted.org/releases/l/i/libpwquality/libpwquality-%{versio %global _moduledir %{_libdir}/security %global _secconfdir %{_sysconfdir}/security -Requires: cracklib-dicts >= 2.8 +Recommends: cracklib-dicts >= 2.8 Requires: pam%{?_isa} BuildRequires: cracklib-devel BuildRequires: gettext @@ -149,6 +149,18 @@ mkdir $RPM_BUILD_ROOT%{_secconfdir}/pwquality.conf.d %{python3_sitearch}/*.egg-info %changelog +* Fri May 26 2017 Tomáš Mráz 1.4.0-1 +- Do not try to check presence of too short username in password +- Make the user name check optional (via usercheck option) +- Add an 'enforcing' option to make the checks to be warning-only + in PAM +- The difok = 0 setting will disable all old password similarity + checks except new and old passwords being identical +- Updated translations from Zanata + +* Mon Aug 24 2015 Tomáš Mráz 1.3.0-2 +- Fix possible stack overflow in the generate function (#1255935) + * Thu Jul 23 2015 Tomáš Mráz 1.3.0-1 - Change the defaults for credits, difok, and minlen - Make the cracklib check optional but on by default -- cgit v1.2.1