Date: Thu, 2 Sep 1999 17:53:11 -0600 (MDT)
From: Dan Burcaw <dburcaw@terraplex.com>
To: dave@linuxtoday.com, lwn@lwn.net
Subject: UPDATE: pam, passwd 


We've just released updates of the pam and passwd packages which fix a
problem with MD5 passwords.

Packages: pam, passwd                         
Date: September 2, 1999
Problem:
                         
The pam and passwd packages that ships with Yellow Dog Linux have a bug in
the MD5 code which shows up on big endian systems such as PowerPC which
causes sulogin and other programs (such as ssh) to report that your
password is incorrect when it is actually correct. sulogin is program
which is run when your system is forced to a shell if a file system is
damaged. Previously, entering the correct root password did not allow you
to access your system and repair the filesystem. 
                         
These updates fix the MD5 big endian problem. To allow sulogin (and ssh)
to work, you'll need to reset your password(s). 

Urgency: MEDIUM
Solution: rpm -Uvh
ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/champion-1.1/RPMS/pam-0.68-2.ppc.rpm
ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/champion-1.1/RPMS/passwd-0.60-1.ppc.rpm

Here are the md5 checksums of the update packages, please verify these
before installing the new packages by running: md5sum <file> 

64d9e634e7cacb16b481fd5a81e90f02 RPMS/pam-0.68-2.ppc.rpm
bbbda3f96de08fe88b3fa134ba6c9e18 RPMS/passwd-0.60-1.ppc.rpm

More information is available at our errata page:
http://www.yellowdoglinux.com/resources/errata_cs11.shtml