Ubuntu
shadow package

shadow 1:4.1.5.1-1ubuntu9.4 source package in Ubuntu

Changelog

shadow (1:4.1.5.1-1ubuntu9.4) trusty-security; urgency=medium

  * SECURITY UPDATE: su could be used to kill arbitrary processes.
    - debian/patches/CVE-2017-2616.patch: Check process's exit status before
      sending signal
    - CVE-2017-2616
  * SECURITY UPDATE: su could be used to kill arbitrary processes.
    - debian/patches/reset-caught-on-sigtstp.patch: Check process's SIGTSTP
      status before sending signal. No CVE is currently assigned.
  * SECURITY UPDATE: getulong() function could accidentally parse negative
    numbers as large positive numbers.
    - debian/patches/CVE-2016-6252.patch: parse directly into unsigned long
    - CVE-2016-6252

 -- Seth Arnold <email address hidden>  Thu, 04 May 2017 01:00:09 -0700

Upload details

Uploaded by:
Seth Arnold
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
shadow_4.1.5.1.orig.tar.gz 3.3 MiB ee1986c5fec9f6e7868bcc5329874a72dec74897b598d86eb0532f79471f32f0
shadow_4.1.5.1-1ubuntu9.4.diff.gz 112.1 KiB aaa679411a846e839f1825704149164c37238579d1899da35111ce30c52d9c54
shadow_4.1.5.1-1ubuntu9.4.dsc 2.0 KiB 8d838462f07178d88295396582b49e64a24c3e223c6982b3dd3697ba743e62e9

View changes file

Binary packages built by this source

login: system login tools

 These tools are required to be able to login and use your system. The
 login program invokes your user shell and enables command execution. The
 newgrp program is used to change your effective group ID (useful for
 workgroup type situations). The su program allows changing your effective
 user ID (useful being able to execute commands as another user).

login-dbgsym: debug symbols for package login

 These tools are required to be able to login and use your system. The
 login program invokes your user shell and enables command execution. The
 newgrp program is used to change your effective group ID (useful for
 workgroup type situations). The su program allows changing your effective
 user ID (useful being able to execute commands as another user).

passwd: change and administer password and group data

 This package includes passwd, chsh, chfn, and many other programs to
 maintain password and group data.
 .
 Shadow passwords are supported. See /usr/share/doc/passwd/README.Debian

passwd-dbgsym: debug symbols for package passwd

 This package includes passwd, chsh, chfn, and many other programs to
 maintain password and group data.
 .
 Shadow passwords are supported. See /usr/share/doc/passwd/README.Debian

uidmap: programs to help use subuids

 These programs help unprivileged users to create uid and gid mappings in
 user namespaces.

uidmap-dbgsym: debug symbols for package uidmap

 These programs help unprivileged users to create uid and gid mappings in
 user namespaces.