[Lunar-commits] <moonbase> shadow: Security update, version bumped to 4.1.2.2
Stefan Wold
ratler at lunar-linux.org
Tue Dec 30 15:07:07 CET 2008
commit 5e287d60bed09864795a40ac3ff4650d55b8a7e8
Author: Stefan Wold <ratler at lunar-linux.org>
Date: Tue Dec 30 15:07:07 2008 +0100
shadow: Security update, version bumped to 4.1.2.2
Security notes:
- Fix a race condition in login that could lead to gaining ownership or
changing mode of arbitrary files.
- Fix a possible login DOS, which could be caused by injecting forged
entries in utmp.
---
security/shadow/DETAILS | 6 +++---
1 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/security/shadow/DETAILS b/security/shadow/DETAILS
index 24674a1..3ccdb3b 100644
--- a/security/shadow/DETAILS
+++ b/security/shadow/DETAILS
@@ -1,16 +1,16 @@
MODULE=shadow
- VERSION=4.1.2.1
+ VERSION=4.1.2.2
SOURCE=$MODULE-$VERSION.tar.bz2
SOURCE2=login-1.3.defs.pam
SOURCE_URL=ftp://pkg-shadow.alioth.debian.org/pub/pkg-shadow/
SOURCE2_URL=$PATCH_URL
SOURCE3_URL=$PATCH_URL
- SOURCE_VFY=sha1:a007e90d844d25d67a49699d508613ccea54e068
+ SOURCE_VFY=sha1:6cbd29104c219ff6776eececb8068f7326d57a45
SOURCE2_VFY=sha1:92676e80ec2e8e83d0dcbd688e1e4026b647232e
WEB_SITE=http://packages.qa.debian.org/s/shadow.html
MAINTAINER=ratler at lunar-linux.org
ENTERED=20010922
- UPDATED=20080724
+ UPDATED=20081230
SHORT="Contains the shadow password file utilities"
PSAFE=no
More information about the Lunar-commits
mailing list