libpam-tacplus (1.7.0-1) unstable; urgency=medium

  * libtac: Refactored the complex and overengineered TACACS+ session id generation,
    replacing it with getrandom(2).
  * libtac: gnulib now provides implementation of missing functions.
  * libtac: Removed legacy MD5 code and replaced it with gnulib.
  * libtac: Legacy data structures such as attribute lists were replaced with gnulib structures.
  * libtac: CHAP implementation used a fixed challenge in contradiction with the RFC 1994
    requirement. This was replaced with a pseudo-random challenge generated using getrandom(2).
  * libtac: ABI version set to 5:0:0. From now on, this is the only way to version the library.
    The legacy static variables tac_ver_ were removed as confusing.
  * pam_tacplus: Calling process PID is now used as the task_id attribute in TACACS+
    accounting session. This replaces an overengineered cryptographically random tasks identifiers.
  * libtac: Fix CVE-2016-20014. Closes: #1009966

 -- Pawel Krawczyk <pawel.krawczyk@hush.com>  Sat, 31 Oct 2022 22:44:00 +0100

libpam-tacplus (1.6.2-1) unstable; urgency=medium

  * Fix CVE-2020-27743.
  * Allow selection of source addresses.
  * Support for DSCP marking packets.
  * Make most network requests timeout aware.
  * Fix Debian build scripts.
  * OpenSSL licensing clarifications.
  * Use more neutral terminology.

 -- Pawel Krawczyk <pawel.krawczyk@hush.com>  Tue, 27 Oct 08:39:57 2020 +0000

libpam-tacplus (1.4.1-1) unstable; urgency=low

  * Added a simple TACACS+ command-line client (tacc)
  * Numerous fixes and clean-ups

 -- Pawel Krawczyk <pawel.krawczyk@hush.com>  Sat, 23 Jul 2016 08:11:00 +0100

libpam-tacplus (1.3.8-2) unstable; urgency=low

  * Added postinst and prerm scripts for pam-auth-update. Closes: #739274

 -- Jeroen Nijhof <jeroen@jeroennijhof.nl>  Mon, 17 Feb 2014 18:58:59 +0100

libpam-tacplus (1.3.8-1) unstable; urgency=low

  * New upstream release.
  * Fixed pam-configs. Closes: #717716
  * Added dh-autoreconf. Closes: #734228

 -- Jeroen Nijhof <jeroen@jeroennijhof.nl>  Fri, 31 Jan 2014 12:32:00 +0100

libpam-tacplus (1.3.7-1) unstable; urgency=low

  * New upstream release.
  * Changed compat level to 9 for hardening
  * Fixed license link

 -- Jeroen Nijhof <jeroen@jeroennijhof.nl>  Mon, 19 May 2012 19:25:00 +0100

libpam-tacplus (1.3.6-1) unstable; urgency=low

  * New upstream release.
  * Added libpam-runtime support.

 -- Jeroen Nijhof <jeroen@jeroennijhof.nl>  Mon, 7 May 2012 21:21:00 +0100

libpam-tacplus (1.3.5-1) unstable; urgency=low

  * First version of pam_tacplus debian package. Closes: #588172

 -- Jeroen Nijhof <jeroen@jeroennijhof.nl>  Mon, 5 Sep 2011 16:01:00 +0100

