shadow

Files

Utkarsh Gupta 8550bc7a3c Import Debian changes 1:4.2-3+deb8u5

shadow (1:4.2-3+deb8u5) jessie-security; urgency=high
.
  * Non-maintainer upload by the ELTS team.
  * SECURITY UPDATE: Crash or buffer overflow
    - debian/patches/CVE-2017-12424.patch: fix buffer overflow if
      NULL line is present in db in lib/commonio.c.
    - CVE-2017-12424
  * SECURITY UPDATE: Access to privileged information
    - debian/patches/CVE-2018-7169.patch: newgidmap:
      enforce setgroups=deny if self-mapping a group in
      src/newgidmap.c.
    - CVE-2018-7169

2025-04-15 13:59:27 +02:00

patches

Import Debian changes 1:4.2-3+deb8u5

2025-04-15 13:59:27 +02:00

source

Switch to dpkg-source 3.0 (quilt) format

2014-03-15 12:12:50 +01:00

upstream

Properly name the upstream signing key file

2014-05-04 19:36:54 +02:00

bugs-usertags

Move Debian-related files to debian/

2013-07-27 18:36:40 +02:00

changelog

Import Debian changes 1:4.2-3+deb8u5

2025-04-15 13:59:27 +02:00

compat

* debian/rules: Install the lintian overrides with dh_lintian.

2009-05-14 20:40:43 +00:00

control

Imported Debian patch 1:4.2-3+deb8u3

2017-02-26 11:37:09 +01:00

Explicitly point to GPL-2 document in debian/copyright

2014-04-18 08:29:43 +02:00

cpgr.8

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

cppw.8

Fix a typo. Thanks to Justin Pryzby. Closes: #447757

2007-10-27 13:15:50 +00:00

dependencies

Move Debian-related files to debian/

2013-07-27 18:36:40 +02:00

Update documentation of UMASK: Explain that USERGROUPS_ENAB will modify this default for UPGs. (Closes: #583971 )

2014-02-25 23:11:41 -05:00

* debian/login.dirs, debian/passwd.dirs: Removed usr/share/linda/overrides.

2009-07-24 02:03:43 +00:00

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

use the new pam_exec functionality from pam 1.1.8-1 to implement the dynamic motd, rather than using /run/motd.dynamic from initscripts. This will allow initscripts to drop /etc/init.d/motd. Closes: #741129

2014-04-30 22:23:26 +02:00

Use 'set -e' in postinst scripts and not in thei shebang line

2014-04-18 08:27:30 +02:00

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

Close #705301 and #720004

2013-08-23 23:21:50 +02:00

Makefile

Move Debian-related files to debian/

2013-07-27 18:36:40 +02:00

NEWS

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.chage.pam

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.chfn.pam

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.chpasswd.pam

* debian/rules, debian/passwd.newusers.pam, debian/passwd.chpasswd.pam:

2009-05-09 17:03:49 +00:00

passwd.chsh.pam

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.cron.daily

Fix backup command line in cron.daily script. Closes: #596283

2010-09-12 13:00:49 +00:00

passwd.dirs

* debian/login.dirs, debian/passwd.dirs: Removed usr/share/linda/overrides.

2009-07-24 02:03:43 +00:00

passwd.examples

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.expire.cron

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.groupadd.pam

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.groupdel.pam

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.groupmod.pam

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.install

fix installation of setuid/setgid/newuidmap/newgidmap man pages

2014-02-26 11:42:34 -05:00

passwd.links

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.lintian-overrides

* debian/passwd.lintian-overrides: Remove old entries relevant for

2010-04-04 23:14:09 +00:00

passwd.newusers.pam

* debian/rules, debian/passwd.newusers.pam, debian/passwd.chpasswd.pam:

2009-05-09 17:03:49 +00:00

passwd.passwd.pam

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.postinst

Use 'set -e' in postinst scripts and not in thei shebang line

2014-04-18 08:27:30 +02:00

passwd.preinst

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.useradd.pam

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.userdel.pam

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

passwd.usermod.pam

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

README.debian

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

README.source

Merge changes from the lenny branch:

2008-08-31 19:16:54 +00:00

rules

Enforce hardened builds to workaround cdbs sometimes not building with hardening flags as in 1:4.2-2+b1 Thanks to Dr. Markus Waldeck for pointing the issue and Simon Ruderich For providing a working patch.

2014-11-19 21:51:16 +01:00

securetty.hurd

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

securetty.kfreebsd

* debian/securetty.kfreebsd: On GNU/kFreeBSD the serial devices have change

2009-09-01 13:32:06 +00:00

securetty.knetbsd

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

securetty.linux

add LXC devices to debian/securetty.linux

2014-02-25 23:11:41 -05:00

shadowconfig.sh

* debian/patches/428_grpck_add_prune_option: removed -p option. The option

2012-02-16 20:28:21 +00:00

TODO

Remove TODO entries no more relevant.

2013-08-16 00:50:34 +02:00

uidmap.install

fix installation of setuid/setgid/newuidmap/newgidmap man pages

2014-02-26 11:42:34 -05:00

uidmap.lintian-overrides

Add a lintian override for newuidmap and newgidmap setuid binaries

2014-05-04 18:04:15 +02:00

useradd.default

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

watch

* Check upstream signing key in debian/watch

2014-05-04 19:38:08 +02:00

README.source

This package uses quilt to patch the upstream source.

You can find some info on how to generate the patched source, add a new
modification, and remove an existing modification on:
	/usr/share/doc/quilt/README.source

================================================================================

To package a new upstream release, you can use the Makefile:
	svn://svn.debian.org/svn/pkg-shadow/debian/trunk/Makefile

================================================================================

A testsuite is also available. Instruction on how to run this testsuite
are available on:
	svn://svn.debian.org/svn/pkg-shadow/debian/trunk/tests/README