shadow (1:4.13+dfsg1-2) unstable; urgency=medium

  The previous entry falsely states that PREVENT_NO_AUTH in /etc/login.defs
  affects authentication.  The historical default of letting all users with
  empty password field in without authentication is still in effect.

 -- Balint Reczey <balint@balintreczey.hu>  Mon, 25 Sep 2023 17:04:09 +0200

shadow (1:4.11.1+dfsg1-0exp1) experimental; urgency=medium

  Login now prevents an empty password field to be interpreted as
  "no authentication required" for UID 0 (root account).
  The historical default of letting all users with empty password field
  in without authentication can be restored in /etc/login.defs setting
  PREVENT_NO_AUTH to "no".

 -- Balint Reczey <balint@balintreczey.hu>  Sun, 07 Nov 2021 21:51:46 +0100
