Skip to content

Releases: shadow-maint/shadow

Casín (aged++++)

13 Feb 18:15
4.14.5
24605a1
Compare
Choose a tag to compare

shadow-4.14.5 (Casín) - shadow utils

Bugfix release. Changes since shadow-4.14.0:

shadow-4.14.5:

  • Build system:
    • Fix regression introduced in 4.14.4, due to a typo. chgpasswd had
      been deleted from a Makefile variable, but it should have been
      chpasswd.

shadow-4.14.4:

  • Build system:
    • Link correctly with libdl.
    • Install pam configs for chpasswd(8) and newusers(8) when using
      ./configure --with-libpam --disable-account-tools-setuid.
  • libshadow:
    • Fix build error (parameter name omitted).
    • Fix off-by-one bug.
    • Remove warning.

shadow-4.14.3:

  • libshadow:
    • Avoid null pointer dereference.

shadow-4.14.2:

  • libshadow:
    • Fix build with musl libc.
    • Avoid null pointer dereference.
    • Update utmp at an initial login
  • useradd(8):
    • Set proper SELinux labels for def_usrtemplate
  • Manual:
    • Document --prefix in chage(1), chpasswd(8), and passwd(1)

shadow-4.14.1:

  • Build system:
    • Merge libshadow and libmisc into a single libshadow. This fixes
      problems in the linker, which were reported at least in Gentoo.

Thanks to those who contributed to this release (sorry if I forgot to mention anyone):

Full Changelog: 4.14.4...4.14.5

Casín (aged+++) [BROKEN]

11 Feb 23:36
4.14.4
f0f7fc6
Compare
Choose a tag to compare

This release is broken. See #949.


shadow-4.14.4 (Casín) - shadow utils

Bugfix release. Changes since shadow-4.14.0:

shadow-4.14.4:

  • Build system:
    • Link correctly with libdl.
    • Install pam configs for chpasswd(8) and newusers(8) when using
      ./configure --with-libpam --disable-account-tools-setuid. (This change was accidented.)
  • libshadow:
    • Fix build error (parameter name omitted).
    • Fix off-by-one bug.
    • Remove warning.

shadow-4.14.3:

  • libshadow:
    • Avoid null pointer dereference.

shadow-4.14.2:

  • libshadow:
    • Fix build with musl libc.
    • Avoid null pointer dereference.
    • Update utmp at an initial login
  • useradd(8):
    • Set proper SELinux labels for def_usrtemplate
  • Manual:
    • Document --prefix in chage(1), chpasswd(8), and passwd(1)

shadow-4.14.1:

  • Build system:
    • Merge libshadow and libmisc into a single libshadow. This fixes
      problems in the linker, which were reported at least in Gentoo.

Thanks to those who contributed to this release (sorry if I forgot to mention anyone):

$ git log --pretty=fuller 4.14.3..4.14.4 | grep @ | sed 's/.*: *//' | sed 's/<.*//' | sort | uniq | grep -v dlclose@@GLIBC
Alejandro Colomar 
David Runge 
Iker Pedrosa 
Michael Vetter 
Pablo Saavedra 
Sam James 
Serge Hallyn 
Tobias Stoeckmann 

@stoeckmann , @hallyn , @thesamesam , @psaavedra , @jubalh , @ikerexxe , @dvzrv , @alejandro-colomar

Dubliner early morning

02 Feb 14:15
Compare
Choose a tag to compare
Pre-release

Pre-release for general testing in preparation of 4.15.0.

Casín (aged++)

15 Jan 23:17
4.14.3
eae0b02
Compare
Choose a tag to compare

shadow-4.14.3 (Casín) - shadow utils

Bugfix release. Changes since shadow-4.14.0:

shadow-4.14.3:

  • libshadow:
    • Avoid null pointer dereference.

shadow-4.14.2:

  • libshadow:
    • Fix build with musl libc.
    • Avoid null pointer dereference.
    • Update utmp at an initial login
  • useradd(8):
    • Set proper SELinux labels for def_usrtemplate
  • Manual:
    • Document --prefix in chage(1), chpasswd(8), and passwd(1)

shadow-4.14.1:

  • Build system:
    • Merge libshadow and libmisc into a single libshadow. This fixes
      problems in the linker, which were reported at least in Gentoo.

Thanks to Samanta Navarro (@ferivoz ) for contributing to this release.


Here's the release process, to remind my future self:

git tag -s 4.14.3
git show 4.14.3
git push stable 4.14.3
git push shadow 4.14.3
git clean -dffx
git status
./autogen.sh 
make dist
gpg --detach-sign --armor shadow-4.14.3.tar.gz 
gpg --detach-sign --armor shadow-4.14.3.tar.xz 
gpg --verify shadow-4.14.3.tar.gz{.asc,}
gpg --verify shadow-4.14.3.tar.xz{.asc,}

Casín (aged+)

30 Oct 01:14
4.14.2
22656c3
Compare
Choose a tag to compare

shadow-4.14.2 (Casín) - shadow utils

Bugfix release. Changes since shadow-4.14.0:

shadow-4.14.2:

  • libshadow:
    • Fix build with musl libc.
    • Avoid NULL dereference.
    • Update utmp at an initial login
  • useradd(8):
    • Set proper SELinux labels for def_usrtemplate
  • Manual:
    • Document --prefix in chage(1), chpasswd(8), and passwd(1)

shadow-4.14.1:

  • Build system:
    • Merge libshadow and libmisc into a single libshadow. This fixes
      problems in the linker, which were reported at least in Gentoo.

Thanks to those who contributed to this release (sorry if I forgot to mention anyone):

$ git log 4.14.1..4.14.2 | grep @ | sed 's/.*: //' | sed 's/<.*//' | sort | uniq
Alejandro Colomar 
Christian Göttsche 
Heiko Becker 
Iker Pedrosa 
Johannes Segitz 
Michael Vetter 

Casín (aged)

05 Oct 17:34
4.14.1
817f328
Compare
Choose a tag to compare

Bugfix release. Changes since shadow-4.14.0:

shadow-4.14.1:

  • Build system:
    • Merge libshadow and libmisc into a single libshadow. This fixes
      problems in the linker, which were reported at least in Gentoo.

Thanks to those who contributed to this release (sorry if I forgot to mention anyone):

$ git log 4.14.0..4.14.1 | grep @ | sed 's/.*: //' | sed 's/<.*//' | sort | uniq

Alejandro Colomar 
Christian Bricart 
David Seifert 
Iker Pedrosa 
Michael Vetter 
Robert Förster 
Robert Marmorstein 
Sam James 
Serge Hallyn 

Casín

16 Aug 02:46
014536f
Compare
Choose a tag to compare

This release includes some steps toward preparing for the Y2038 (e.g. removing lastlog conditionally), a great deal of removal of obsolete function checks (like rmdir), and overhaul of some string manipulation functions, of which there is more to come. And a great deal more. The abbreviated git log follows:

Serge Hallyn: configure.ac: check for strlcpy
Michael Vetter: Remove intree website
Serge Hallyn: 4.14.0-rc4 pre-release
Serge Hallyn: Releases: add etc/shadow-maint to distfiles
Serge Hallyn: 4.14.0-rc3
Iker Pedrosa: libmisc: include freezero
Iker Pedrosa: libmisc: add freezero source code
Iker Pedrosa: libmisc: add readpassphrase source code
Iker Pedrosa: configure: add with-libbsd option
Iker Pedrosa: man: include shadow-man.xsl in tarball
Iker Pedrosa: man: include its.rules in tarball
Iker Pedrosa: autogen: enable lastlog build
Christian Göttsche: Add wrapper for write(2)
Serge Hallyn: tag 4.14.0-rc2
Michael Vetter: Add new files to libmisc_la_SOURCES
Serge Hallyn: Add a make dist CI test
Serge Hallyn: 4.14.0-rc1
Serge Hallyn: remove xmalloc.c from POTFILES.in
Iker Pedrosa: logoutd: add missing <utmp.h> include
Iker Pedrosa: CI: compile old utmp interface in Fedora
Iker Pedrosa: src: add SELINUX library
Iker Pedrosa: libmisc: conditionally compile utmp.c and logind.c
Iker Pedrosa: lib: replace USER_NAME_MAX_LENGTH macro
Iker Pedrosa: libmisc: call active_sessions_count()
Iker Pedrosa: libmisc: implement active_sessions_count()
Iker Pedrosa: utmp: update update_utmp()
Iker Pedrosa: utmp: move update_utmp
Iker Pedrosa: utmp: move failtmp()
Iker Pedrosa: libmisc: implement get_session_host()
Iker Pedrosa: configure: new option enable-logind
xiongshenglan: shadow userdel: add the adaptation to the busybox ps in 01-kill_user_procs.sh
Michael Vetter: chsh: warn if root sets a shell not listed in /etc/shells
Michael Vetter: doc: mention ci workflow file to learn about deps
Serge Hallyn: man/po/Makefile: add a comment to shadow-man-pages.pot
Vegard Nossum: newgrp: fix potential string injection
Todd Zullinger: lastlog: fix alignment of Latest header
Iker Pedrosa: configure: fix lastlog check
Alan D. Salewski: subuid.5: reference newusers(8) rather than newusers(1)
Iker Pedrosa: CI: build lastlog in Fedora
Iker Pedrosa: man: conditionally build lastlog documentation
Iker Pedrosa: usermod: conditionally build lastlog functionality
Iker Pedrosa: useradd: conditionally build lastlog functionality
Iker Pedrosa: login: conditionally build lastlog functionality
Iker Pedrosa: lastlog: stop building by default
Iker Pedrosa: CI: update debian repos
Bernd Kuhls: Fix yescrypt support
Jeffrey Bencteux: chgpasswd: fix segfault in command-line options
Alejandro Colomar: gpasswd(1): Fix password leak
Alejandro Colomar: src/useradd.c: create_mail(): Cosmetic
Alejandro Colomar: src/useradd.c: create_home(): Cosmetic
Alejandro Colomar: src/useradd.c: create_home(): Cosmetic
Alejandro Colomar: src/useradd.c: create_home(): Cosmetic
Alejandro Colomar: src/useradd.c: close_group_files(): Cosmetic
Alejandro Colomar: src/useradd.c: check_uid_range(): Cosmetic
Jaroslav Jindrak: build: link passwd, chpasswd and chage against libdl
Jaroslav Jindrak: configure: check whether fgetpwent_r is available before marking xprefix_getpwnam_r as reentrant
Jaroslav Jindrak: passwd: fall back to non-PAM code when prefix is used
Jaroslav Jindrak: chpasswd: fall back to non-PAM code when prefix is used
Jaroslav Jindrak: chpasswd: add --prefix/-P options
Jaroslav Jindrak: chage: add --prefix/-P options
Jaroslav Jindrak: passwd: Respect --prefix/-P options
Michael Vetter: prefix: add prefix support
Iker Pedrosa: strtoday: remove unnecessary cast
Alejandro Colomar: Use temporary variable
Alejandro Colomar: realloc(NULL, ...) is equivalent to malloc(...)
Alejandro Colomar: Simplify allocation APIs
Christian Göttsche: Drop alloca(3)
Christian Göttsche: usermod: fix off-by-one issues
Alejandro Colomar: libmisc/csrand.c: Update comments
Alejandro Colomar: lib/nss.c: Fix use of invalid p
Alejandro Colomar: lib/nss.c: Fix use of uninitialized p
Alejandro Colomar: Centralize error handling
Alejandro Colomar: Second verse, it gets worse; it gets no better than this
Alejandro Colomar: ROFL: Rolling on the floor looping
Alejandro Colomar: This ain't no loop
Iker Pedrosa: newusers: Improve error message
Martin Kletzander: ch(g)passwd: Check selinux permissions upon startup
Skyler Ferrante: Check if crypt_method null before dereferencing
Alejandro Colomar: xgetXXbyYY: Simplify elifs
Alejandro Colomar: xgetXXbyYY: Centralize error handling
Alejandro Colomar: xgetXXbyYY: tfix
Samanta Navarro: xgetXXbyYY: Avoid duplicated error handling block
Samanta Navarro: xgetXXbyYY: Handle DUP_FUNCTION failure
Serge Hallyn: sub_[ug]id_{add,remove}: fix return values
Martin Kletzander: usermod: Small optimization using memmove for password unlock
Alejandro Colomar: Reorder logic to improve comprehensibility
Alejandro Colomar: newusers: Fail early
Alejandro Colomar: newusers: Add missing error handling
Samanta Navarro: libmisc: Use safer chroot/chdir sequence
Samanta Navarro: su: Prevent stack overflow in check_perms
Samanta Navarro: subsystem: Prevent endless loop
Serge Hallyn: def_load: avoid NULL deref
Serge Hallyn: def_load: split the econf from non-econf definition
Tobias Stoeckmann: Plug econf memory leaks
Samanta Navarro: chsh: Verify that login shell path is absolute
Samanta Navarro: process_prefix_flag: Drop privileges
bubu: Update French translations
Samanta Navarro: get_pid.c: Use tighter validation checks
Markus Hiereth: replace inadequate German translation of login error message
Markus Hiereth: Update German translations
Samanta Navarro: Remove some static char arrays
Samanta Navarro: commonio: Use do_lock_file again
Serge Hallyn: Fix broken docbook translations
ed neville: open with O_CREAT when lock path does not exist
Samanta Navarro: commonio_open: Remove fcntl call
Samanta Navarro: commonio_lock_nowait: Remove deprecated code
Samanta Navarro: login_prompt: Simplify login_prompt API
Samanta Navarro: login_prompt: Use _exit in signal handler
Samanta Navarro: login_prompt: Do not parse environment variables
Samanta Navarro: libmisc/yesno.c: Fix regression
Alejandro Colomar: libmisc, man: Drop old check and advice for complex character sets in passwords
Christian Göttsche: semanage: disconnect to free libsemanage internals
Christian Göttsche: commonio: free removed database entries
ed neville: run_parts for groupadd and groupdel
lilinjie: fix typos
Alejandro Colomar: libmisc/yesno.c: Use getline(3) and rpmatch(3)
Samanta Navarro: newgrp/useradd: always set SIGCHLD to default
Serge Hallyn: Update AUTHORS to add Marek Michałkiewicz
Samanta Navarro: Read whole line in yes_or_no
Christian Göttsche: useradd/usermod: add --selinux-range argument
Alejandro Colomar: CI: Make build logs more readable
Iker Pedrosa: ci: remove explicit fedora dependencies
Iker Pedrosa: README: add reference to contribution guidelines
Iker Pedrosa: doc: add contributions introduction
Iker Pedrosa: doc: add license
Iker Pedrosa: doc: add releases
Iker Pedrosa: doc: add Continuous Integration
Iker Pedrosa: doc: add tests
Iker Pedrosa: doc: add coding style
Iker Pedrosa: doc: add build & install
Serge Hallyn: trivial: vipw.8: fix grammar
Christian Göttsche: sssd: skip flushing if executable does not exist
Christian Göttsche: Overhaul valid_field()
Martin Kletzander: semanage: Do not set default SELinux range
Michael Vetter: Fix typo in groupadd usage
Christian Göttsche: ci: update Differential ShellCheck
tomspiderlabs: Added control character check
Mike Gilbert: usermod: respect --prefix for --gid option
Alejandro Colomar: Fix su(1) silent truncation
Alejandro Colomar: Simplify is_my_tty()
Alejandro Colomar: Fix is_my_tty() buffer overrun
Alejandro Colomar: Add STRLEN(): a constexpr strlen(3) for string literals
Alejandro Colomar: Fix crash with large timestamps
Paul Eggert: Prefer strcpy(3) to strlcpy(3) when either works
Paul Eggert: Fix change_field() buffer underrun
Paul Eggert: Omit unneeded test in change_field()
Paul Eggert: Simplify change_field() by using strcpy
skyler-ferrante: Fix null dereference in basename
Iker Pedrosa: CI: script for local container build
Iker Pedrosa: CI: build project in containers
Iker Pedrosa: container: add fedora
Iker Pedrosa: container: add debian
Iker Pedrosa: container: add alpine
Iker Pedrosa: SECURITY.md: add Iker Pedrosa
Christian Göttsche: selinux: use type safe function pointer assignment
Christian Göttsche: Use strict prototype in definition
Vinícius dos Santos Oliveira: Add .editorconfig
Serge Hallyn: run_some: fix shellcheck warning
Serge Hallyn: fail on any run_some test failure
Serge Hallyn: ignore first test in run_some
Serge Hallyn: swap first two tests - does the first one still fail?
Serge Hallyn: tests: remove some github runner PATH tweaking
Alejandro Colomar: tests: Support git-worktree(1)
Serge Hallyn: tests: newuidmap and newgidmap: update expected fail message
Serge Hallyn: libsubid: include alloc.h
Serge Hallyn: run_some: log stderr
Vinícius dos Santos Oliveira: Validate fds created by the user
Serge Hallyn: get_pidfd_from_fd: return -1 on error, not 0
Serge Hallyn: g-h-a workflow: workaround
Serge Hallyn: Fix regression in some translation strings
Iker Pedrosa: lib: bit_ceil_wrapul(): stop recursion
Iker Pedrosa: lib: define ULONG_WIDTH if non-existent
maqi: Update translation
Serge Hallyn: newuidmap and newgidmap: support passing pid as fd
Alejandro Colomar: Fix use-after-free of pointer after realloc(3)
Alejandro Colomar: Use safer allocation macros
Alejandro Colomar: libmisc: Add safer allocation macros
Alejandro Colomar: Use xreallocarray() instead of its pattern
Alejandro Colomar: Use reallocarrayf() instead of its pattern
...

Read more

4.14.0-rc5

14 Aug 16:59
Compare
Choose a tag to compare
4.14.0-rc5 Pre-release
Pre-release

Warn about strlcpy dependency.

4.14.0-rc4

13 Aug 04:30
Compare
Choose a tag to compare
4.14.0-rc4 Pre-release
Pre-release

Adding the userdel and groupdel hooks to release tarball.

RC3

10 Aug 16:47
Compare
Choose a tag to compare
RC3 Pre-release
Pre-release
4.14.0-rc3

Release 4.14.0-rc3