-
shadow (1:4.0.18.2-1ubuntu2.2) hardy-security; urgency=low
* SECURITY UPDATE: root privilege escalation via utmp group.
- debian/patches/303_login_symlink_attack: upstream fix thanks
to Paul Szabo and Nicolas François.
-- Kees Cook <email address hidden> Mon, 08 Dec 2008 00:46:04 -0800
-
shadow (1:4.0.18.2-1ubuntu2.1) hardy-security; urgency=low
* disable the root password for virtual machines created with vm-builder
on Ubuntu 8.10. (LP: #296841)
-- Jamie Strandboge <email address hidden> Wed, 12 Nov 2008 22:08:23 -0600
-
shadow (1:4.0.18.2-1ubuntu2) hardy; urgency=low
* Add 498_make_useradd_faster_with_ldap: make useradd faster when
nsswitch uses LDAP or some other remote names database (LP: #120015),
thanks to Vince Busam.
-- <email address hidden> (Matt T. Proud) Fri, 08 Feb 2008 18:30:51 -0800
-
shadow (1:4.0.18.2-1ubuntu1) hardy; urgency=low
* debian/login.pam: Enable SELinux support in login.pam (LP: #191326).
-- Caleb Case <email address hidden> Fri, 08 Feb 2008 02:20:06 -0500
-
shadow (1:4.0.18.2-1) unstable; urgency=low
* The "Vacherin" release.
* New upstream version. This closes the following bugs:
- gpasswd manpage improvements. Closes: #445480
- support for the resource limits "max nice value", and "max real time
priority" was added upstream. Note that it does not impact Debian
because shadow is compiled with PAM support on Debian. Closes: #442334
- Finnish translation. Closes: #448233
- Remove patches applied upstream:
+ 438_su_GNU_origin
+ 433_shadow.5-typo_312430
+ 402-clarify_usermod_usage
+ 498_man_nonpam_undefined
+ 301_passwd-typo-383216
+ 101_ja
+ 102_de-fix-sorry
+ 404_man-fr
+ 103_man-de
+ 104_man-sv
+ 302_su_man_mention_sg
+ 303_wording_fixes_in_su_man
+ 201_fix_man_su_fr
+ 202_it_man_uses_gettext
+ 413_no-sorry-in-passwd
+ 416_man-fr_newgrp
- The upstream tarball is now built with gettext 0.16. Remove
+ 499_gettext-0.15
- Significant changes to patches
+ 397_non_numerical_identifier
usermod.c was already patched upstream; useradd.c was not.
+ 467_useradd_-r_LSB
Simplifications. There should be no changes.
+ 409_man_generate_from_PO
The Italian PO was added upstream. Patch the Italian Makefile.
* Upstream bugs not fixed in upstream's CVS:
- debian/securetty.linux: Added xvc0 and hvc0 consoles to the Linux's
consoles where root login is allowed. (triggered by #423389)
- debian/patches/417_passwd_warndays: Correct the long option name for
"-w" from "warning" to "warndays". Closes: #445481
* Upstream translation updates:
- debian/patches/105_zh_CN: Update Simplified Chinese translation
Closes: #431287
- debian/patches/416_man-fr_newgrp: Fix a typo in the French newgrp man
page. Thanks to Nicolas Aupetit. Closes: #439090
* Debian packaging fixes:
- Fix typos in useradd default file. Thanks to Justin Pryzby.
- Fix typos in cppw.8. Thanks to Justin Pryzby. Closes: #447757
-- Ubuntu Archive Auto-Sync <email address hidden> Tue, 06 Nov 2007 17:22:20 +0000
-
shadow (1:4.0.18.1-11) unstable; urgency=low
* The "Baguette laonnaise" release
* Reactivate ECHOCTL in login after it disappeared in 4.0.8. Closes: #429758
* Disable audit support. Closes: #bug_not_yet_reported_by_Sesse
shadow (1:4.0.18.1-10) unstable; urgency=low
* The "Trappe d'Échourgnac" release
* Upstream bugs fixed in upstream's CVS:
- 302_su_man_mention_sg: mention sg(1) in su man page. Closes: #396690
- 303_wording_fixes_in_su_man: minor wording fixes in su(1)
* Upstream bugs not fixed in upstream's CVS:
- 410_newgrp_man_mention_sg: mention sg(1) in newgrp man page
- 201_fix_man_su_fr: fix translation error in french translation for su(1)
- 202_it_man_uses_gettext: switch italian manpages to gettext. This will
fix missing paragraphs in translated manpages. Closes: #425689
- 411_chpasswd_document_no_pam: Document that chgpasswd do not use PAM to
update the passwords. Thus functionnalities provided by PAM modules are
not present in chgpasswd (e.g. writting the old password in
/etc/security/opasswd). Closes: #396726
- 412_lastlog_-u_numerical_range: allow numerical UID and range of IDs in
argument to lastog -u. Closes: #259494
- 413_no-sorry-in-passwd: No longer print 'Sorry' when something
fails in passwd, su and newgrp. Closes: #384164
- 414_remove-unwise-advices: Remove not so wise advices about choosing
passwords. Closes: #386818
- 494_passwd_lock: set the account expiry field when using
"passwd -l/-u". Closes: #389183
* Debian packaging fixes:
- 506_relaxed_usernames: do not allow spaces in usernames. This was at
least broken with username starting with a space or tabulation (the user
can be added but not removed). Closes: #400683
-- Ubuntu Archive Auto-Sync <email address hidden> Wed, 24 Oct 2007 07:44:11 +0100
-
shadow (1:4.0.18.1-9) unstable; urgency=low
* The "Etorki" release
* Fix debian/copyright and mention that the upstream site
is "temporarily?) no longer available. Closes: #423956
Add the various copyrights from Marek, Andrzej and Tomasz
(deduced from the ChangeLog entries as upstream doesn't have an
explicit copyright file)
* Debian packaging fixes:
The 3 following entries fix the FTBFS when built twice in a row.
Closes: #424257
- 498_man_nonpam_undefined: Do not patch the generated man/it/Makefile.in.
- 409_man_generate_from_PO: Generate the translated man pages at build
time.
- 200_regenerate_manpages: No more needed.
-- Ubuntu Archive Auto-Sync <email address hidden> Fri, 18 May 2007 09:38:57 +0100
