Recommended update for libpwquality

Announcement ID: SUSE-RU-2022:0488-1
Rating: moderate
References:
Affected Products:
  • HPE Helion OpenStack 8
  • SUSE Linux Enterprise High Performance Computing 12 SP2
  • SUSE Linux Enterprise High Performance Computing 12 SP3
  • SUSE Linux Enterprise High Performance Computing 12 SP4
  • SUSE Linux Enterprise High Performance Computing 12 SP5
  • SUSE Linux Enterprise Server 12 SP2
  • SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2
  • SUSE Linux Enterprise Server 12 SP3
  • SUSE Linux Enterprise Server 12 SP3 BCL 12-SP3
  • SUSE Linux Enterprise Server 12 SP3 ESPOS 12-SP3
  • SUSE Linux Enterprise Server 12 SP3 LTSS 12-SP3
  • SUSE Linux Enterprise Server 12 SP4
  • SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4
  • SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4
  • SUSE Linux Enterprise Server 12 SP5
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5
  • SUSE Linux Enterprise Software Development Kit 12 SP5
  • SUSE OpenStack Cloud 8
  • SUSE OpenStack Cloud 9
  • SUSE OpenStack Cloud Crowbar 8
  • SUSE OpenStack Cloud Crowbar 9

An update that contains two features can now be installed.

Description:

This update for libpwquality fixes the following issues:

  • Replace %make_build with "make -O %{?_smp_mflags}" for pre-SLE15 builds. (jsc#SLE-22490)

  • update to 1.4.4

  • Fix regression with enabling cracklib check
  • Use make macros in rpm spec file
  • Translated using Weblate (Polish, Turkish, Ukrainian)
  • update to 1.4.3
  • Update translation files
  • Add '--disable-cracklib-check' configure parameter
  • fixup static compilation
  • python: Add missing getters/setters for newly added settings
  • Add usersubstr check
  • pam_pwquality: Add debug message for the local_users_only option
  • Fix some gcc warnings
  • pwmake: Properly validate the bits parameter.
  • we use Fedora Weblate now

  • Translated using Weblate (Azerbaijani, Bulgarian, Chinese (Simplified), Czech, French, Friulian, Hungarian, Italian, Japanese, Norwegian Bokmål, Persian, Russian, Spanish, Turkish)

  • update to 1.4.2:

  • Fix regression in handling retry, enforce_for_root, and local_users_only options introduced with the previous release.

  • Register with pam-config in %post(un)

  • Add baselibs.conf

  • Update to version 1.4.1:

  • Use modern macros.

  • Do not recommend lang package. The lang package already has supplements.

  • Modernize spec-file by calling spec-cleaner

  • Update RPM groups and summaries.

  • Switch url to https://github.com/libpwquality/libpwquality/

  • Update to release 1.4.0:
  • Fix possible buffer overflow with data from /dev/urandom in pwquality_generate().
  • Do not try to check presence of too short username in password. (thanks to Nikos Mavrogiannopoulos)
  • Make the user name check optional (via usercheck option).
  • Add an 'enforcing' option to make the checks to be warning-only in PAM.
  • The difok = 0 setting will disable all old password similarity checks except new and old passwords being identical.
  • Updated translations from Zanata.

  • Make python3 default and enable py2 only when needed

  • Build python3 version of bindings as well

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • HPE Helion OpenStack 8
    zypper in -t patch HPE-Helion-OpenStack-8-2022-488=1
  • SUSE OpenStack Cloud 8
    zypper in -t patch SUSE-OpenStack-Cloud-8-2022-488=1
  • SUSE OpenStack Cloud 9
    zypper in -t patch SUSE-OpenStack-Cloud-9-2022-488=1
  • SUSE OpenStack Cloud Crowbar 8
    zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2022-488=1
  • SUSE OpenStack Cloud Crowbar 9
    zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-488=1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3
    zypper in -t patch SUSE-SLE-SAP-12-SP3-2022-488=1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4
    zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-488=1
  • SUSE Linux Enterprise Software Development Kit 12 SP5
    zypper in -t patch SUSE-SLE-SDK-12-SP5-2022-488=1
  • SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2
    zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2022-488=1
  • SUSE Linux Enterprise Server 12 SP3 BCL 12-SP3
    zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2022-488=1
  • SUSE Linux Enterprise Server 12 SP3 ESPOS 12-SP3
    zypper in -t patch SUSE-SLE-SERVER-12-SP3-ESPOS-2022-488=1
  • SUSE Linux Enterprise Server 12 SP3 LTSS 12-SP3
    zypper in -t patch SUSE-SLE-SERVER-12-SP3-2022-488=1
  • SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4
    zypper in -t patch SUSE-SLE-SERVER-12-SP4-ESPOS-2022-488=1
  • SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4
    zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-488=1
  • SUSE Linux Enterprise High Performance Computing 12 SP5
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-488=1
  • SUSE Linux Enterprise Server 12 SP5
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-488=1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-488=1

Package List:

  • HPE Helion OpenStack 8 (x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • HPE Helion OpenStack 8 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE OpenStack Cloud 8 (x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE OpenStack Cloud 8 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE OpenStack Cloud 9 (x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE OpenStack Cloud 9 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE OpenStack Cloud Crowbar 8 (x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE OpenStack Cloud Crowbar 8 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE OpenStack Cloud Crowbar 9 (x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE OpenStack Cloud Crowbar 9 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3 (ppc64le x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4 (ppc64le x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64)
    • libpwquality-devel-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2 (x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP3 BCL 12-SP3 (x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP3 BCL 12-SP3 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP3 ESPOS 12-SP3 (aarch64 x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP3 ESPOS 12-SP3 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP3 LTSS 12-SP3 (aarch64 ppc64le s390x x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP3 LTSS 12-SP3 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (aarch64 x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (aarch64 ppc64le s390x x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE Linux Enterprise High Performance Computing 12 SP5 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE Linux Enterprise Server 12 SP5 (noarch)
    • libpwquality-lang-1.4.4-8.4.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)
    • libpwquality1-1.4.4-8.4.1
    • libpwquality-debugsource-1.4.4-8.4.1
    • libpwquality1-debuginfo-1.4.4-8.4.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5 (noarch)
    • libpwquality-lang-1.4.4-8.4.1

References: