Hello community, here is the log from the commit of package pam_ssh for openSUSE:12.1:Update:Test checked in at 2012-01-30 19:44:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.1:Update:Test/pam_ssh (Old) and /work/SRC/openSUSE:12.1:Update:Test/.pam_ssh.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pam_ssh", Maintainer is "[email protected]" Changes: -------- --- /work/SRC/openSUSE:12.1:Update:Test/pam_ssh/pam_ssh.changes 2012-01-30 19:44:12.000000000 +0100 +++ /work/SRC/openSUSE:12.1:Update:Test/.pam_ssh.new/pam_ssh.changes 2012-01-30 19:44:12.000000000 +0100 @@ -1,0 +2,6 @@ +Thu Jan 12 15:57:39 UTC 2012 - [email protected] + +- added patch that prevents segfault when empty passphrase is + supplied (bnc#741541) + +------------------------------------------------------------------- New: ---- pam_ssh-1.97-empty_passphrase_segfault.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pam_ssh.spec ++++++ --- /var/tmp/diff_new_pack.1zMBpc/_old 2012-01-30 19:44:12.000000000 +0100 +++ /var/tmp/diff_new_pack.1zMBpc/_new 2012-01-30 19:44:12.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package pam_ssh # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -15,23 +15,23 @@ # Please submit bugfixes or comments via http://bugs.opensuse.org/ # -# norootforbuild - Name: pam_ssh -BuildRequires: openssh openssl-devel pam-devel -License: BSD3c(or similar) -Group: Productivity/Networking/SSH -AutoReqProv: on +BuildRequires: openssh +BuildRequires: openssl-devel +BuildRequires: pam-devel Version: 1.97 -Release: 13 +Release: 0 Summary: PAM Module for SSH Authentication +License: BSD-3-Clause +Group: Productivity/Networking/SSH Url: http://sourceforge.net/projects/pam-ssh/ Source: %{name}-%{version}.tar.bz2 Source2: baselibs.conf Patch0: pam_ssh-double-free.patch Patch1: pam_ssh-1.97-setgid.patch Patch2: pam_ssh-1.97-sigmask.patch +Patch3: pam_ssh-1.97-empty_passphrase_segfault.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -52,6 +52,7 @@ %patch0 -p1 %patch1 -p1 %patch2 -p0 +%patch3 -p1 %build %{suse_update_config -f} ++++++ pam_ssh-1.97-empty_passphrase_segfault.patch ++++++ --- pam_ssh-1.92.orig/pam_get_pass.c 2004-02-19 19:59:05.000000000 +0100 +++ pam_ssh-1.92/pam_get_pass.c 2009-04-18 13:51:10.000000000 +0200 @@ -63,6 +63,8 @@ retval = conv->conv(1, msgs, &resp, conv->appdata_ptr); if (retval != PAM_SUCCESS) return retval; + if (resp[0].resp == NULL) + return PAM_AUTHTOK_RECOVERY_ERR; retval = pam_set_item(pamh, PAM_AUTHTOK, resp[0].resp); if (retval != PAM_SUCCESS) return retval; -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
