4.15.0-rc2

release 4.15.0-rc2

Casín (aged++++)

shadow-4.14.5 (Casín) - shadow utils

Bugfix release. Changes since shadow-4.14.0:

shadow-4.14.5:

• Build system:
  • Fix regression introduced in 4.14.4, due to a typo. chgpasswd had
    been deleted from a Makefile variable, but it should have been
    chpasswd.

shadow-4.14.4:

• Build system:
  • Link correctly with libdl.
  • Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
• libshadow:
  • Fix build error (parameter name omitted).
  • Fix off-by-one bug.
  • Remove warning.

shadow-4.14.3:

• libshadow:
  • Avoid null pointer dereference.

shadow-4.14.2:

• libshadow:
  • Fix build with musl libc.
  • Avoid null pointer dereference.
  • Update utmp at an initial login
• useradd(8):
  • Set proper SELinux labels for def_usrtemplate
• Manual:
  • Document --prefix in chage(1), chpasswd(8), and passwd(1)

shadow-4.14.1:

• Build system:
  • Merge libshadow and libmisc into a single libshadow. This fixes
    problems in the linker, which were reported at least in Gentoo.

---

Thanks to those who contributed to this release (sorry if I forgot to mention anyone):

• Dominique Leuenberger @DimStar77
• Michael Vetter @jubalh
• Iker Pedrosa @ikerexxe
• @loqs
• David Runge @dvzrv
• Alejandro Colomar @alejandro-colomar

Full Changelog: 4.14.4...4.14.5

Casín (aged+++) [BROKEN]

This release is broken. See #949.

---

shadow-4.14.4 (Casín) - shadow utils

Bugfix release. Changes since shadow-4.14.0:

shadow-4.14.4:

• Build system:
  • Link correctly with libdl.
  • Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid. (This change was accidented.)
• libshadow:
  • Fix build error (parameter name omitted).
  • Fix off-by-one bug.
  • Remove warning.

shadow-4.14.3:

• libshadow:
  • Avoid null pointer dereference.

shadow-4.14.2:

• libshadow:
  • Fix build with musl libc.
  • Avoid null pointer dereference.
  • Update utmp at an initial login
• useradd(8):
  • Set proper SELinux labels for def_usrtemplate
• Manual:
  • Document --prefix in chage(1), chpasswd(8), and passwd(1)

shadow-4.14.1:

• Build system:
  • Merge libshadow and libmisc into a single libshadow. This fixes
    problems in the linker, which were reported at least in Gentoo.

---

Thanks to those who contributed to this release (sorry if I forgot to mention anyone):

$ git log --pretty=fuller 4.14.3..4.14.4 | grep @ | sed 's/.*: *//' | sed 's/<.*//' | sort | uniq | grep -v dlclose@@GLIBC
Alejandro Colomar 
David Runge 
Iker Pedrosa 
Michael Vetter 
Pablo Saavedra 
Sam James 
Serge Hallyn 
Tobias Stoeckmann 

@stoeckmann , @hallyn , @thesamesam , @psaavedra , @jubalh , @ikerexxe , @dvzrv , @alejandro-colomar

Dubliner early morning

Pre-release for general testing in preparation of 4.15.0.

Casín (aged++)

shadow-4.14.3 (Casín) - shadow utils

Bugfix release. Changes since shadow-4.14.0:

shadow-4.14.3:

• libshadow:
  • Avoid null pointer dereference.

shadow-4.14.2:

• libshadow:
  • Fix build with musl libc.
  • Avoid null pointer dereference.
  • Update utmp at an initial login
• useradd(8):
  • Set proper SELinux labels for def_usrtemplate
• Manual:
  • Document --prefix in chage(1), chpasswd(8), and passwd(1)

shadow-4.14.1:

• Build system:
  • Merge libshadow and libmisc into a single libshadow. This fixes
    problems in the linker, which were reported at least in Gentoo.

---

Thanks to Samanta Navarro (@ferivoz ) for contributing to this release.

---

Here's the release process, to remind my future self:

git tag -s 4.14.3
git show 4.14.3
git push stable 4.14.3
git push shadow 4.14.3
git clean -dffx
git status
./autogen.sh 
make dist
gpg --detach-sign --armor shadow-4.14.3.tar.gz 
gpg --detach-sign --armor shadow-4.14.3.tar.xz 
gpg --verify shadow-4.14.3.tar.gz{.asc,}
gpg --verify shadow-4.14.3.tar.xz{.asc,}

Casín (aged+)

shadow-4.14.2 (Casín) - shadow utils

Bugfix release. Changes since shadow-4.14.0:

shadow-4.14.2:

• libshadow:
  • Fix build with musl libc.
  • Avoid NULL dereference.
  • Update utmp at an initial login
• useradd(8):
  • Set proper SELinux labels for def_usrtemplate
• Manual:
  • Document --prefix in chage(1), chpasswd(8), and passwd(1)

shadow-4.14.1:

• Build system:
  • Merge libshadow and libmisc into a single libshadow. This fixes
    problems in the linker, which were reported at least in Gentoo.

Thanks to those who contributed to this release (sorry if I forgot to mention anyone):

$ git log 4.14.1..4.14.2 | grep @ | sed 's/.*: //' | sed 's/<.*//' | sort | uniq
Alejandro Colomar 
Christian Göttsche 
Heiko Becker 
Iker Pedrosa 
Johannes Segitz 
Michael Vetter 

Casín (aged)

Bugfix release. Changes since shadow-4.14.0:

shadow-4.14.1:

• Build system:
  • Merge libshadow and libmisc into a single libshadow. This fixes
    problems in the linker, which were reported at least in Gentoo.

Thanks to those who contributed to this release (sorry if I forgot to mention anyone):

$ git log 4.14.0..4.14.1 | grep @ | sed 's/.*: //' | sed 's/<.*//' | sort | uniq

Alejandro Colomar 
Christian Bricart 
David Seifert 
Iker Pedrosa 
Michael Vetter 
Robert Förster 
Robert Marmorstein 
Sam James 
Serge Hallyn 

Casín

This release includes some steps toward preparing for the Y2038 (e.g. removing lastlog conditionally), a great deal of removal of obsolete function checks (like rmdir), and overhaul of some string manipulation functions, of which there is more to come. And a great deal more. The abbreviated git log follows:

Serge Hallyn: configure.ac: check for strlcpy
Michael Vetter: Remove intree website
Serge Hallyn: 4.14.0-rc4 pre-release
Serge Hallyn: Releases: add etc/shadow-maint to distfiles
Serge Hallyn: 4.14.0-rc3
Iker Pedrosa: libmisc: include freezero
Iker Pedrosa: libmisc: add freezero source code
Iker Pedrosa: libmisc: add readpassphrase source code
Iker Pedrosa: configure: add with-libbsd option
Iker Pedrosa: man: include shadow-man.xsl in tarball
Iker Pedrosa: man: include its.rules in tarball
Iker Pedrosa: autogen: enable lastlog build
Christian Göttsche: Add wrapper for write(2)
Serge Hallyn: tag 4.14.0-rc2
Michael Vetter: Add new files to libmisc_la_SOURCES
Serge Hallyn: Add a make dist CI test
Serge Hallyn: 4.14.0-rc1
Serge Hallyn: remove xmalloc.c from POTFILES.in
Iker Pedrosa: logoutd: add missing <utmp.h> include
Iker Pedrosa: CI: compile old utmp interface in Fedora
Iker Pedrosa: src: add SELINUX library
Iker Pedrosa: libmisc: conditionally compile utmp.c and logind.c
Iker Pedrosa: lib: replace USER_NAME_MAX_LENGTH macro
Iker Pedrosa: libmisc: call active_sessions_count()
Iker Pedrosa: libmisc: implement active_sessions_count()
Iker Pedrosa: utmp: update update_utmp()
Iker Pedrosa: utmp: move update_utmp
Iker Pedrosa: utmp: move failtmp()
Iker Pedrosa: libmisc: implement get_session_host()
Iker Pedrosa: configure: new option enable-logind
xiongshenglan: shadow userdel: add the adaptation to the busybox ps in 01-kill_user_procs.sh
Michael Vetter: chsh: warn if root sets a shell not listed in /etc/shells
Michael Vetter: doc: mention ci workflow file to learn about deps
Serge Hallyn: man/po/Makefile: add a comment to shadow-man-pages.pot
Vegard Nossum: newgrp: fix potential string injection
Todd Zullinger: lastlog: fix alignment of Latest header
Iker Pedrosa: configure: fix lastlog check
Alan D. Salewski: subuid.5: reference newusers(8) rather than newusers(1)
Iker Pedrosa: CI: build lastlog in Fedora
Iker Pedrosa: man: conditionally build lastlog documentation
Iker Pedrosa: usermod: conditionally build lastlog functionality
Iker Pedrosa: useradd: conditionally build lastlog functionality
Iker Pedrosa: login: conditionally build lastlog functionality
Iker Pedrosa: lastlog: stop building by default
Iker Pedrosa: CI: update debian repos
Bernd Kuhls: Fix yescrypt support
Jeffrey Bencteux: chgpasswd: fix segfault in command-line options
Alejandro Colomar: gpasswd(1): Fix password leak
Alejandro Colomar: src/useradd.c: create_mail(): Cosmetic
Alejandro Colomar: src/useradd.c: create_home(): Cosmetic
Alejandro Colomar: src/useradd.c: create_home(): Cosmetic
Alejandro Colomar: src/useradd.c: create_home(): Cosmetic
Alejandro Colomar: src/useradd.c: close_group_files(): Cosmetic
Alejandro Colomar: src/useradd.c: check_uid_range(): Cosmetic
Jaroslav Jindrak: build: link passwd, chpasswd and chage against libdl
Jaroslav Jindrak: configure: check whether fgetpwent_r is available before marking xprefix_getpwnam_r as reentrant
Jaroslav Jindrak: passwd: fall back to non-PAM code when prefix is used
Jaroslav Jindrak: chpasswd: fall back to non-PAM code when prefix is used
Jaroslav Jindrak: chpasswd: add --prefix/-P options
Jaroslav Jindrak: chage: add --prefix/-P options
Jaroslav Jindrak: passwd: Respect --prefix/-P options
Michael Vetter: prefix: add prefix support
Iker Pedrosa: strtoday: remove unnecessary cast
Alejandro Colomar: Use temporary variable
Alejandro Colomar: realloc(NULL, ...) is equivalent to malloc(...)
Alejandro Colomar: Simplify allocation APIs
Christian Göttsche: Drop alloca(3)
Christian Göttsche: usermod: fix off-by-one issues
Alejandro Colomar: libmisc/csrand.c: Update comments
Alejandro Colomar: lib/nss.c: Fix use of invalid p
Alejandro Colomar: lib/nss.c: Fix use of uninitialized p
Alejandro Colomar: Centralize error handling
Alejandro Colomar: Second verse, it gets worse; it gets no better than this
Alejandro Colomar: ROFL: Rolling on the floor looping
Alejandro Colomar: This ain't no loop
Iker Pedrosa: newusers: Improve error message
Martin Kletzander: ch(g)passwd: Check selinux permissions upon startup
Skyler Ferrante: Check if crypt_method null before dereferencing
Alejandro Colomar: xgetXXbyYY: Simplify elifs
Alejandro Colomar: xgetXXbyYY: Centralize error handling
Alejandro Colomar: xgetXXbyYY: tfix
Samanta Navarro: xgetXXbyYY: Avoid duplicated error handling block
Samanta Navarro: xgetXXbyYY: Handle DUP_FUNCTION failure
Serge Hallyn: sub_[ug]id_{add,remove}: fix return values
Martin Kletzander: usermod: Small optimization using memmove for password unlock
Alejandro Colomar: Reorder logic to improve comprehensibility
Alejandro Colomar: newusers: Fail early
Alejandro Colomar: newusers: Add missing error handling
Samanta Navarro: libmisc: Use safer chroot/chdir sequence
Samanta Navarro: su: Prevent stack overflow in check_perms
Samanta Navarro: subsystem: Prevent endless loop
Serge Hallyn: def_load: avoid NULL deref
Serge Hallyn: def_load: split the econf from non-econf definition
Tobias Stoeckmann: Plug econf memory leaks
Samanta Navarro: chsh: Verify that login shell path is absolute
Samanta Navarro: process_prefix_flag: Drop privileges
bubu: Update French translations
Samanta Navarro: get_pid.c: Use tighter validation checks
Markus Hiereth: replace inadequate German translation of login error message
Markus Hiereth: Update German translations
Samanta Navarro: Remove some static char arrays
Samanta Navarro: commonio: Use do_lock_file again
Serge Hallyn: Fix broken docbook translations
ed neville: open with O_CREAT when lock path does not exist
Samanta Navarro: commonio_open: Remove fcntl call
Samanta Navarro: commonio_lock_nowait: Remove deprecated code
Samanta Navarro: login_prompt: Simplify login_prompt API
Samanta Navarro: login_prompt: Use _exit in signal handler
Samanta Navarro: login_prompt: Do not parse environment variables
Samanta Navarro: libmisc/yesno.c: Fix regression
Alejandro Colomar: libmisc, man: Drop old check and advice for complex character sets in passwords
Christian Göttsche: semanage: disconnect to free libsemanage internals
Christian Göttsche: commonio: free removed database entries
ed neville: run_parts for groupadd and groupdel
lilinjie: fix typos
Alejandro Colomar: libmisc/yesno.c: Use getline(3) and rpmatch(3)
Samanta Navarro: newgrp/useradd: always set SIGCHLD to default
Serge Hallyn: Update AUTHORS to add Marek Michałkiewicz
Samanta Navarro: Read whole line in yes_or_no
Christian Göttsche: useradd/usermod: add --selinux-range argument
Alejandro Colomar: CI: Make build logs more readable
Iker Pedrosa: ci: remove explicit fedora dependencies
Iker Pedrosa: README: add reference to contribution guidelines
Iker Pedrosa: doc: add contributions introduction
Iker Pedrosa: doc: add license
Iker Pedrosa: doc: add releases
Iker Pedrosa: doc: add Continuous Integration
Iker Pedrosa: doc: add tests
Iker Pedrosa: doc: add coding style
Iker Pedrosa: doc: add build & install
Serge Hallyn: trivial: vipw.8: fix grammar
Christian Göttsche: sssd: skip flushing if executable does not exist
Christian Göttsche: Overhaul valid_field()
Martin Kletzander: semanage: Do not set default SELinux range
Michael Vetter: Fix typo in groupadd usage
Christian Göttsche: ci: update Differential ShellCheck
tomspiderlabs: Added control character check
Mike Gilbert: usermod: respect --prefix for --gid option
Alejandro Colomar: Fix su(1) silent truncation
Alejandro Colomar: Simplify is_my_tty()
Alejandro Colomar: Fix is_my_tty() buffer overrun
Alejandro Colomar: Add STRLEN(): a constexpr strlen(3) for string literals
Alejandro Colomar: Fix crash with large timestamps
Paul Eggert: Prefer strcpy(3) to strlcpy(3) when either works
Paul Eggert: Fix change_field() buffer underrun
Paul Eggert: Omit unneeded test in change_field()
Paul Eggert: Simplify change_field() by using strcpy
skyler-ferrante: Fix null dereference in basename
Iker Pedrosa: CI: script for local container build
Iker Pedrosa: CI: build project in containers
Iker Pedrosa: container: add fedora
Iker Pedrosa: container: add debian
Iker Pedrosa: container: add alpine
Iker Pedrosa: SECURITY.md: add Iker Pedrosa
Christian Göttsche: selinux: use type safe function pointer assignment
Christian Göttsche: Use strict prototype in definition
Vinícius dos Santos Oliveira: Add .editorconfig
Serge Hallyn: run_some: fix shellcheck warning
Serge Hallyn: fail on any run_some test failure
Serge Hallyn: ignore first test in run_some
Serge Hallyn: swap first two tests - does the first one still fail?
Serge Hallyn: tests: remove some github runner PATH tweaking
Alejandro Colomar: tests: Support git-worktree(1)
Serge Hallyn: tests: newuidmap and newgidmap: update expected fail message
Serge Hallyn: libsubid: include alloc.h
Serge Hallyn: run_some: log stderr
Vinícius dos Santos Oliveira: Validate fds created by the user
Serge Hallyn: get_pidfd_from_fd: return -1 on error, not 0
Serge Hallyn: g-h-a workflow: workaround
Serge Hallyn: Fix regression in some translation strings
Iker Pedrosa: lib: bit_ceil_wrapul(): stop recursion
Iker Pedrosa: lib: define ULONG_WIDTH if non-existent
maqi: Update translation
Serge Hallyn: newuidmap and newgidmap: support passing pid as fd
Alejandro Colomar: Fix use-after-free of pointer after realloc(3)
Alejandro Colomar: Use safer allocation macros
Alejandro Colomar: libmisc: Add safer allocation macros
Alejandro Colomar: Use xreallocarray() instead of its pattern
Alejandro Colomar: Use reallocarrayf() instead of its pattern
...

4.14.0-rc5

Warn about strlcpy dependency.

4.14.0-rc4

Adding the userdel and groupdel hooks to release tarball.