Copied from
ubuntu trusty in
Private PPA for Ubuntu Security Team
by Seth Arnold
Changelog
shadow (1:4.1.5.1-1ubuntu9.5) trusty-security; urgency=medium
* REGRESSION UPDATE: The patch for CVE-2017-2616 introduced a regression.
If su received a signal like SIGTERM it wasn't propagated to the child.
- debian/patches/CVE-2017-2616-regression.patch: Do not reset the
pid_child to 0 if the child process is still running.
Thanks to Tobias Stoeckmann for the fix and Radu Duta for the report.
-- Seth Arnold <email address hidden> Mon, 15 May 2017 19:22:49 -0700