This repository has been archived by the owner on Feb 28, 2024. It is now read-only.
-
-
Notifications
You must be signed in to change notification settings - Fork 101
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1 changed file
with
12 additions
and
12 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,17 +1,17 @@ | ||
libpam-tacplus (1.7.0-1) unstable; urgency=medium | ||
|
||
* libtac: Refactored the complex and overengineered TACACS+ session id generation, | ||
replacing it with getrandom(2). | ||
* libtac: gnulib now provides implementation of missing functions. | ||
* libtac: Removed legacy MD5 code and replaced it with gnulib. | ||
* libtac: Legacy data structures such as attribute lists were replaced with gnulib structures. | ||
* libtac: CHAP implementation used a fixed challenge in contradiction with the RFC 1994 | ||
requirement. This was replaced with a pseudo-random challenge generated using getrandom(2). | ||
* libtac: ABI version set to 5:0:0. From now on, this is the only way to version the library. | ||
The legacy static variables tac_ver_ were removed as confusing. | ||
* pam_tacplus: Calling process PID is now used as the task_id attribute in TACACS+ | ||
accounting session. This replaces an overengineered cryptographically random tasks identifiers. | ||
* libtac: Fix CVE-2016-20014. Closes: #1009966 | ||
* libtac: Refactored the complex and overengineered TACACS+ session id generation, | ||
replacing it with getrandom(2). | ||
* libtac: gnulib now provides implementation of missing functions. | ||
* libtac: Removed legacy MD5 code and replaced it with gnulib. | ||
* libtac: Legacy data structures such as attribute lists were replaced with gnulib structures. | ||
* libtac: CHAP implementation used a fixed challenge in contradiction with the RFC 1994 | ||
requirement. This was replaced with a pseudo-random challenge generated using getrandom(2). | ||
* libtac: ABI version set to 5:0:0. From now on, this is the only way to version the library. | ||
The legacy static variables tac_ver_ were removed as confusing. | ||
* pam_tacplus: Calling process PID is now used as the task_id attribute in TACACS+ | ||
accounting session. This replaces an overengineered cryptographically random tasks identifiers. | ||
* libtac: Fix CVE-2016-20014. Closes: #1009966 | ||
|
||
-- Pawel Krawczyk <[email protected]> Sat, 31 Oct 2022 22:44:00 +0100 | ||
|
||
|