Relevant BUGIDs: 112540

[linux-pam] / CHANGELOG

diff --git a/CHANGELOG b/CHANGELOG
index e3ff71b4dc6cfcc748a29764b59e04a14f90636b..6ec9c4856551b92c888bd3af6ca08d6f4b278ed5 100644 (file)
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -30,11 +30,60 @@ related bug description with the following URL:
  http://sourceforge.net/bugs/?func=detailbug&bug_id=XXXXX&group_id=6663
 
 Where you should replace XXXXX with a bug-id.
+
+If you have found a bug in Linux-PAM, please consider filing such a
+bug report - outstanding bugs are listed here:
+
+ http://sourceforge.net/bugs/?group_id=6663
+
+(to file another bug see the 'submit bug' button on this page).
+
 ====================================================================
 
-0.74: please submit patches for this section with actual code/doc
+0.75: please submit patches for this section with actual code/doc
       patches!
 
+                          ** WARNING **
+
+This release contains backwardly incompatible changes to
+libpam. Prior versions were buggy - see bugfix for Bug 129775.
+
+                          ** WARNING **
+
+* fixed a small security hole (more of a user confusion issue) with
+  the unix and pwdb password helper binaries. The beef is described in
+  the bug report, but no uid change was possible so no-one should
+  think they need to issue a security bulletin over this one! (Bug
+  112540 - agmorgan)
+* pam_lastlog needs to be linked with -lutil (Bug 131549 - agmorgan)
+* pam_cracklib needs to be linked with -lcrypt (old password checking)
+  (Bug 131601 - agmorgan)
+* fixes for static library builds and also the examples when linked
+  with the debugging build of the libraries. (Bug 131783 - agmorgan)
+* fixed URL for original RFC to a cached kernel.org file. (Bug 131503
+  - agmorgan)
+* quoted the $CRACKLIB_DICTPATH test in configure.in (Bug 130130 -
+  agmorgan).
+* improved handling of the setcred/close_session and update chauthtok
+  stack. *Warning* This is a backwardly incompatable change, but 'more
+  sane' than before. (Bug 129775 - agmorgan).
+* bumped the version number, and added some code to assist in making
+  documentation releases (Bug 129644 - agmorgan).
+
+0.74: Sun Jan 21 22:36:08 PST 2001
+
+* made 0.74 release (Bug 129642 - agmorgan)
+* libpam - cleaned up a few non-static functions to be static and added
+  support for libpam to enforce things like pam_[gs]et_data() and
+  AUTHTOK rules for using the API. Also documented pam_[gs]et_item()
+  a little better including return codes (Bugs 129027, 128576 -
+  agmorgan).
+* pam_access - fixed the non-default config file option (Bug 127561 -
+  agmorgan)
+* pam.8 manual page clarified with respect to the default location for
+  finding modules, also added some text describing the [...] control
+  syntax. (Bug 127625 - agmorgan)
+* md5.h ia64 fixes for pam_unix and pam_pwdb (Bug 127700 - agmorgan)
 * removed requirement for c++ from the configure{.in,} files (Bug
   128298 - agmorgan)
 * removed subdirectories from man page redirections (124396 - baggins)
@@ -66,7 +115,7 @@ Where you should replace XXXXX with a bug-id.
   (Bug 124388 - baggins)
 * pam_userdb - fixed wrong definition of struct pam_module (was pam_wheel)
   (Bug 124386 - baggins)
-* fixed example/Makefile include path (Bug 124187 - agmorgan)
+* fixed example/Makefile include path (Bug 124187, 127563(?) - agmorgan)
 * pam_userdb compiles on RH5x. Also removed circular dependency on
   configure.in. Also bumped revision number to 0.74. (Bug 124136 -
   agmorgan)