[Lunar-commits] <moonbase> shadow: Security update, version bumped to 4.1.2.2

Stefan Wold ratler at lunar-linux.org
Tue Dec 30 15:07:07 CET 2008


commit 5e287d60bed09864795a40ac3ff4650d55b8a7e8
Author: Stefan Wold <ratler at lunar-linux.org>
Date:   Tue Dec 30 15:07:07 2008 +0100

    shadow: Security update, version bumped to 4.1.2.2
    
    Security notes:
    - Fix a race condition in login that could lead to gaining ownership or
      changing mode of arbitrary files.
    - Fix a possible login DOS, which could be caused by injecting forged
      entries in utmp.
---
 security/shadow/DETAILS |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/security/shadow/DETAILS b/security/shadow/DETAILS
index 24674a1..3ccdb3b 100644
--- a/security/shadow/DETAILS
+++ b/security/shadow/DETAILS
@@ -1,16 +1,16 @@
           MODULE=shadow
-         VERSION=4.1.2.1
+         VERSION=4.1.2.2
           SOURCE=$MODULE-$VERSION.tar.bz2
          SOURCE2=login-1.3.defs.pam
       SOURCE_URL=ftp://pkg-shadow.alioth.debian.org/pub/pkg-shadow/
      SOURCE2_URL=$PATCH_URL
      SOURCE3_URL=$PATCH_URL
-      SOURCE_VFY=sha1:a007e90d844d25d67a49699d508613ccea54e068
+      SOURCE_VFY=sha1:6cbd29104c219ff6776eececb8068f7326d57a45
      SOURCE2_VFY=sha1:92676e80ec2e8e83d0dcbd688e1e4026b647232e
         WEB_SITE=http://packages.qa.debian.org/s/shadow.html
       MAINTAINER=ratler at lunar-linux.org
          ENTERED=20010922
-         UPDATED=20080724
+         UPDATED=20081230
            SHORT="Contains the shadow password file utilities"
 PSAFE=no
 


More information about the Lunar-commits mailing list