-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 01 Feb 2021 15:27:08 -0500 Source: pam Architecture: source Version: 1.4.0-3 Distribution: unstable Urgency: medium Maintainer: Steve Langasek <vorlon@debian.org> Changed-By: Sam Hartman <hartmans@debian.org> Closes: 834589 977648 978553 978601 980285 981092 Changes: pam (1.4.0-3) unstable; urgency=medium . [ Josh Triplett ] * libpam-runtime.postrm: Remove session-noninteractive files on purge, Closes: #978601 . [ Sam Hartman ] * patches-applied/pam_mkhomedir_stat_before_opendir: Stat the skeleton directory before opendir, Closes: #834589 * libpam-modules.install: Install pam_faillock binaries, Closes: #981092 * debian/patches-applied/pam_unix_initialize_daysleft : Initialize days before password expire, Closes: #980285 * pam-configs/unix: Default to yescript rather than sha512. From a theoretical security standpoint, it looks like yescript has similar security properties, assuming (as we typically do in the crypto protocol community) that sha256 is still reasonable. However, in terms of practical resistant to password cracking, particularly in terms of valuing space complexity as well as time complexity, yescript is superior, Closes: #978553 * No infinite loop on purge of libpam-runtime, Closes: #977648 * patches-applied/pam_faillock_create_directory: create /run/faillock when needed. Checksums-Sha1: beedc193313c31efc30df51a649553543140389d 2169 pam_1.4.0-3.dsc 6653aeda231e9c5a21b5bd7220b092d6e075e78d 113340 pam_1.4.0-3.debian.tar.xz d7d8624f5162969d99e3940f823ad1ed11f75411 5818 pam_1.4.0-3_source.buildinfo Checksums-Sha256: e8034bd84adc169f94c34d3dd5291f7919ca0f12aa5b7b957741e6c31e1cb8a6 2169 pam_1.4.0-3.dsc 5a2e2b2471c756981fea3745115b46c4df893a422b1b7023275cef725045b13d 113340 pam_1.4.0-3.debian.tar.xz 4fd8b87da2b15d192f7e3a7a15f190fd868db84334ac430c73b0e93c27ff1b8e 5818 pam_1.4.0-3_source.buildinfo Files: 043c0e355623b70aca7b7a529665c059 2169 libs optional pam_1.4.0-3.dsc 3725bf143b0a44fce0febfe23a0152f4 113340 libs optional pam_1.4.0-3.debian.tar.xz 60357435856bb5daa5f3dd975891935b 5818 libs optional pam_1.4.0-3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEE9Li3nMNy++OFgPTCQe7SUh/WssoFAmAYgUUACgkQQe7SUh/W sspRpQf7BzdhUWNTnMFI00rL8jo1JxRv5vv0xmi2uKFL+vcjDGRK7bP0Lv2s0eZN ZBl9COdW2vLpNMpU7l5I0joO7Ppji+yK0CvVhTiy28ndcs+3tau3h1HMWl2NSc9u LlrmGltp4K9CrrY59toUb0lEbNGqpCeisws8AAxQrHhHh6JEwqZj4pGsMNWyOSI9 gNI7gn4yeJ+ilnqGud515mbYJ3vt56UCpEks4+J58gwZ8ZlRbajgLhfLa0V4O0SS WBkBO6rCUZJkwhtIqx+jP8wgX08ls4xWKmLdzTJaLu65PctSTgjWPe20oJwvtDkY qWih6DQX+hkYVfzqhzSwB/uT5dRAGg== =W9Yc -----END PGP SIGNATURE-----