Author: Christian Perrier
Revision Date: 2014-11-19 21:59:09 UTC

Enforce hardened builds to workaround cdbs sometimes not building
with hardening flags as in 1:4.2-2+b1
Thanks to Dr. Markus Waldeck for pointing the issue and Simon Ruderich
For providing a working patch.

Author: Christian Perrier
Revision Date: 2014-11-19 21:59:09 UTC

Enforce hardened builds to workaround cdbs sometimes not building
with hardening flags as in 1:4.2-2+b1
Thanks to Dr. Markus Waldeck for pointing the issue and Simon Ruderich
For providing a working patch.

Author: Christian Perrier
Revision Date: 2014-11-19 21:59:09 UTC

Enforce hardened builds to workaround cdbs sometimes not building
with hardening flags as in 1:4.2-2+b1
Thanks to Dr. Markus Waldeck for pointing the issue and Simon Ruderich
For providing a working patch.

Author: Christian Perrier
Revision Date: 2014-04-22 09:01:42 UTC

[ Nicolas FRANCOIS (Nekral) ]
* New upstream release. Fixes:
  - Invalid free() in su fixed by using strdup(). Thanks to Serge
    Hallyn for the patch. Closes: #691459
  - Kill the child process group, rather than just the
    immediate child; this is needed now that su no
    longer starts a controlling terminal when not running an
    interactive shell. Thanks to Colin Watson for the patch.
    Closes: #713979
  - German manpages translation update. Closes: #679152
  - Improve login.defs (typographic errors and better format).
    Closes: #685415
  - Russian translation update. Closes: #718356
  - Do not assume random() is limited by RAND_MAX. Closes: #677275
  - Support C libraries with unknown fields in struct passwd.
    Closes: #675824
  - su: child cleanup is performed before terminating PAM sessions. This
    avoids anoying "...terminated" messages when PAM module send signal to
    su during session close. Closes: #670132
  - vipw/vigr is checking arguments provided after options. Closes: #677812
  - Updated Japanese translation. Closes: #720004
  - vipw: Fix error reporting when editor fails. Closes: #688260
* Moved to git: replace Vcs-Git in place of Vcs-Svn and adapt
  Vcs-Browser.
* Add pam_loginuid to login PAM settings. Closes: #677441
* passwd.install: add new subuid.5 and subgid.5 manpages
* debian/rules, debian/control, debian/uidmap.install: create new uidmap
  package containing the new setuid-root binaries newuidmap and newgidmap
  Set uidmap as priority optional.
* debian/login.su.pam: Enable pam_limits by default. Closes: #705301
* debian/rules: Set default editor to sensible-editor for vipw.
  Closes: #688252

[ Micah Anderson ]
* added debian/patches/userns to enable use of subuids, plus some bugfix
  patches on top of them, patches from Eric Biederman, pulled from
  Ubuntu. Closes: #739981
* Allow LXC devices (lxc/console, lxc/tty[1234]) in securetty.linux
* Update documentation of UMASK: Explain that USERGROUPS_ENAB will modify
  this default for UPGs. (Closes: #583971)
* login.postinst: install a default /etc/subuid and /etc/subgid
* fix installation of setuid/setgid/newuidmap/newgid/map man pages

[ Laurent Bigonville ]
* Switch to dpkg-source 3.0 (quilt) format
* Add build-dependency against bison
* Call dh-autoreconf since we need to regenerate all the autofoo files

[ Philippe Grégoire ]
* Fix 1000_configure_userns to avoid dropping a needed #endif
  Closes: #744877

[ Christian Perrier ]
* Bump Standards to 3.9.5 (checked)
* Use 'set -e' in postinst scripts and not in thei shebang line
* Explicitly point to GPL-2 document in debian/copyright

Author: Nicolas François
Revision Date: 2012-05-25 15:42:01 UTC

* The "Gruyère" release.

[ Nicolas FRANCOIS (Nekral) ]
* New upstream release:
  - login: log into utmp(x) but not into wtmp (this is done by pam_lastlog).
    Log to utmp(x) was broken by the fix for #605329. Closes: 659957
  - userdel: Fix segfault when userdel removes the user's group.
    Closes: #660406
  - manpages: .so links point to paths relative to the top-level manual
    hierarchy. Closes: #661025
  - useradd(8): Return code 13 no more documented. Closes: #661802
* debian/patches/series, debian/patches/428_grpck_add_prune_option: Removed.
  The -p option was not documented and was meant to fix consequences of a
  bug now fixed more than 10 years ago.
* debian/shadowconfig.sh: Display issues, but dot not prompt interactively
  to fix passwd/group/shadow/gshadow issues. Closes: #638263
* debian/control: Bump Standards-Version to 3.9.3 (no changes needed).
* debian/rules: Simplify setting of hardening flags. cdbs 0.4.103 needed to
  get hardened version of shadow-utils. Restore previous requirement on
  dpkg-dev to 1.13.5.

[ Christian Perrier ]
* Complete Polish translation of logoutd(8). Closes: #668880
* German translation of manpages completed. Closes: #673234

[ Roger Leigh ]
* Separation of static and dynamic motd components in login PAM module
  Closes: #669698

Author: Nicolas François
Revision Date: 2011-02-13 22:02:28 UTC

* The "Tomanoix" release.
* debian/patches/300_CVE-2011-0721: Fix insufficient input sanitation
  leading to possible user or group creation in NIS environments.

Author: Nicolas François
Revision Date: 2009-11-13 22:13:39 UTC

* The "Soumaintrain" release.
* debian/patches/306_long_group_lines: Fix handling of long lines in the
  user or group files. Closes: #552006