bd62b6b2fb
shadow (1:4.2-3+deb8u4) jessie-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Reset pid_child only if waitpid was successful.
This is a regression fix for CVE-2017-2616. If su receives a signal like
SIGTERM, it is not propagated to the child. (Closes: #862806)
This package uses quilt to patch the upstream source. You can find some info on how to generate the patched source, add a new modification, and remove an existing modification on: /usr/share/doc/quilt/README.source ================================================================================ To package a new upstream release, you can use the Makefile: svn://svn.debian.org/svn/pkg-shadow/debian/trunk/Makefile ================================================================================ A testsuite is also available. Instruction on how to run this testsuite are available on: svn://svn.debian.org/svn/pkg-shadow/debian/trunk/tests/README