public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed
* [PATCH] pam: Update to version 1.7.1
@ 2025-06-20 13:57 Adolf Belka
  0 siblings, 0 replies; only message in thread
From: Adolf Belka @ 2025-06-20 13:57 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

- Update from version 1.7.0 to 1.7.1
- Update of rootfile not required
- This version fixes a CVE. However this is for a local to root permission escalation. So
   unlikely to be an issue for IPFire if access is tightly controlled. Also the
   vulnerability is related to pam_access and requires the configuration file for that
   to be defined with user rules that can be confused with hostnames. pam_access.so is
   installed on IPFire but no configuration file.
- Although the risk for IPFire is very low it makes sense to update to the fix.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/pam | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/pam b/lfs/pam
index b2847d0a6..577d40aa1 100644
--- a/lfs/pam
+++ b/lfs/pam
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.7.0
+VER        = 1.7.1
 
 THISAPP    = Linux-PAM-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -45,7 +45,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 39c8c2ccc6f7d125d12d49439ae44cb8fe115f0529549269246e54f4b4de0b3b24c1099e4d3fa39d4e477af8a92b66dd6dc2cb93f0643ab7b56bcaabdd3b8539
+$(DL_FILE)_BLAKE2 = 0a64d7dbf6bb7e3d2c36ea1f29c3217d3e43a1cc0ba8adf2ee8a117946a53bd26634ebd70ff3b99a72f7373df6694ee054dc7eddab04e43bbc8f5b0e9e56b3bc
 
 install : $(TARGET)
 
-- 
2.49.0



^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2025-06-20 13:57 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-06-20 13:57 [PATCH] pam: Update to version 1.7.1 Adolf Belka

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox