Publishing details

• Published on 2017-07-22

Changelog

shadow (1:4.2-3+deb8u4) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Reset pid_child only if waitpid was successful.
    This is a regression fix for CVE-2017-2616. If su receives a signal like
    SIGTERM, it is not propagated to the child. (Closes: #862806)

 -- Salvatore Bonaccorso <email address hidden>  Wed, 17 May 2017 12:58:54 +0200

Builds

Package files

• shadow_4.2-3+deb8u4.debian.tar.xz (487.1 KiB)
• shadow_4.2-3+deb8u4.dsc (2.4 KiB)
• shadow_4.2.orig.tar.xz (1.0 MiB)