diff --git a/SOURCES/shadow-utils.login.defs b/SOURCES/shadow-utils.login.defs index d117aec..0875b63 100644 --- a/SOURCES/shadow-utils.login.defs +++ b/SOURCES/shadow-utils.login.defs @@ -214,7 +214,7 @@ ENCRYPT_METHOD SHA512 # If not specified, the libc will choose the default number of rounds (5000). # The values must be within the 1000-999999999 range. # -#SHA_CRYPT_MAX_ROUNDS 5000 +SHA_CRYPT_MAX_ROUNDS 100000 # Currently SHA_CRYPT_MIN_ROUNDS is not supported diff --git a/SPECS/shadow-utils.spec b/SPECS/shadow-utils.spec index aba5b0b..66fbdc6 100644 --- a/SPECS/shadow-utils.spec +++ b/SPECS/shadow-utils.spec @@ -1,7 +1,7 @@ Summary: Utilities for managing accounts and shadow password files Name: shadow-utils Version: 4.9 -Release: 8%{?dist} +Release: 9%{?dist} Epoch: 2 License: BSD and GPLv2+ URL: https://github.com/shadow-maint/shadow @@ -341,6 +341,9 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/libsubid.la %{_libdir}/libsubid.so %changelog +* Wed Jul 3 2024 Iker Pedrosa - 2:4.9-9 +- login.defs: Update SHA_CRYPT_MAX_ROUNDS from 5000 to 100000. Resolves: RHEL-40195 + * Wed Jul 12 2023 Iker Pedrosa - 2:4.9-8 - gpasswd: fix password leak. Resolves: #2215948