Your message dated Fri, 27 Aug 2021 16:48:44 +0000
with message-id <[email protected]>
and subject line Bug#992848: fixed in pam 1.4.0-10
has caused the Debian Bug report #992848,
regarding pam_unix: Treats SHA256 and older hashes as expired
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
992848: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992848
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libpam-modules
Version: 1.4.0-9
Severity: important

Dear Maintainer,

When upgrading libxcrypt, I ran into upstream bug
<https://github.com/linux-pam/linux-pam/issues/367>.

This has turned into a bit of a problem since some password hashes are synced 
from
a central management system, meaning it is difficult to stop the problem from
recurring by changing the password hash.

Until a new upstream release is made and migrated into Unstable, perhaps the fix
in <https://github.com/linux-pam/linux-pam/pull/368/commits> could be added? I
have tested this locally and it applied cleanly and solved the issue.

Thank you in advance, Mattias


-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (901, 'unstable'), (500, 'unstable-debug')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-8-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE= (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libpam-modules depends on:
ii  debconf [debconf-2.0]  1.5.77
ii  libaudit1              1:3.0.5-1
ii  libc6                  2.31-17
ii  libcrypt1              1:4.4.25-1
ii  libdb5.3               5.3.28+dfsg1-0.8
ii  libnsl2                1.3.0-2
ii  libpam-modules-bin     1.4.0-9
ii  libpam0g               1.4.0-9
ii  libselinux1            3.1-3
ii  libtirpc3              1.3.2-2

libpam-modules recommends no packages.

libpam-modules suggests no packages.

-- Configuration Files:
/etc/security/group.conf changed [not included]

-- debconf information excluded

--- End Message ---
--- Begin Message ---
Source: pam
Source-Version: 1.4.0-10
Done: Sam Hartman <[email protected]>

We believe that the bug you reported is fixed in the latest version of
pam, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sam Hartman <[email protected]> (supplier of updated pam package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 26 Aug 2021 13:43:23 -0600
Source: pam
Architecture: source
Version: 1.4.0-10
Distribution: unstable
Urgency: medium
Maintainer: Steve Langasek <[email protected]>
Changed-By: Sam Hartman <[email protected]>
Closes: 983427 992538 992848
Changes:
 pam (1.4.0-10) unstable; urgency=medium
 .
   * Fix syntax error in libpam0g.postinst when a systemd unit fails,
     Closes: #992538
   * Include upstream patch not to use crypt_checksalt; without this
     passwords set prior to bullseye were considered expired, Closes:
     #992848
   * Support DPKG_ROOT for pam-auth-update, thanks Johannes 'josch' Schauer
     Closes: #983427
Checksums-Sha1:
 f970837f0099a4d9fd912e5995ea0c4f46724cc6 1913 pam_1.4.0-10.dsc
 1c4fca49e211298227430135503a21692aa2e512 120896 pam_1.4.0-10.debian.tar.xz
 dac6c1fc6a9a46f56407dd15e4d16b85bcfed4c1 5083 pam_1.4.0-10_source.buildinfo
Checksums-Sha256:
 66f226023a80a4524e5c0a8a9f280fa7292ecb8dd4bdeacb2a4e6255f87949b8 1913 
pam_1.4.0-10.dsc
 67bc2fba683b98059968b280a3d8f94829fcb625cbc57fdd6ba792c77131d56d 120896 
pam_1.4.0-10.debian.tar.xz
 0e079f673bf3dba9e8dae813779ec408de73ee8ea095d28d18aba94fc14ef097 5083 
pam_1.4.0-10_source.buildinfo
Files:
 98796c1faa79ce850e95d124b9bde815 1913 libs optional pam_1.4.0-10.dsc
 8eb8765442ee5b8743ee08bffbf221f0 120896 libs optional 
pam_1.4.0-10.debian.tar.xz
 25c54077f9d055411d76950decca00f2 5083 libs optional 
pam_1.4.0-10_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQSj2jRwbAdKzGY/4uAsbEw8qDeGdAUCYSkTFQAKCRAsbEw8qDeG
dDELAP9pLJ+4uw/jWstApiOMmIag/84gn6nghvNlAOkIISONewD/YQHIoJVK4Lk3
xrSak3rpN0i63g1PISc39WKATGfeTgY=
=EZhu
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to