Update changelog for 1:4.19.0-3 release

debian/changelog

@@ -1,3 +1,9 @@
+shadow (1:4.19.0-3) unstable; urgency=medium
+
+  * chpasswd: Disable broken hash check, bug #1124835
+
+ -- Chris Hofstaedtler <zeha@debian.org>  Wed, 07 Jan 2026 11:11:24 +0100
+
 shadow (1:4.19.0-2) unstable; urgency=medium
 
   * Disable logind integration on !linux

debian/patches/debian/chpasswd-Disable-broken-hash-check.patch

@@ -0,0 +1,34 @@
+From: Chris Hofstaedtler <zeha@debian.org>
+Date: Wed, 7 Jan 2026 11:07:34 +0100
+Subject: chpasswd: Disable broken hash check
+
+See Debian bug #1124835.
+---
+ src/chpasswd.c | 14 --------------
+ 1 file changed, 14 deletions(-)
+
+diff --git a/src/chpasswd.c b/src/chpasswd.c
+index ea96dc7..8d24ae6 100644
+--- a/src/chpasswd.c
++++ b/src/chpasswd.c
+@@ -574,20 +574,6 @@ int main (int argc, char **argv)
+ #endif				/* USE_PAM */
+ 		{
+ 
+-		/*
+-		 * Prevent adding a non valid hash to /etc/shadow and
+-		 * potentialy lock account
+-		 */
+-
+-		if (eflg) {
+-			if (!is_valid_hash(newpwd)) {
+-				fprintf (stderr,
+-					_("%s: (line %jd, user %s) invalid password hash\n"),
+-					Prog, line, name);
+-				errors = true;
+-				continue;
+-			}
+-		}
+ 		const struct spwd *sp;
+ 		struct spwd newsp;
+ 		const struct passwd *pw;

debian/patches/series

@@ -8,3 +8,4 @@ debian/Adapt-login.defs-for-Debian.patch
 debian/Stop-building-programs-we-do-not-install.patch
 debian/Warn-when-badname-and-variants-are-given.patch
 debian/configure.ac-align-exec_prefix-with-prefix.patch
+debian/chpasswd-Disable-broken-hash-check.patch