-
shadow (1:4.0.18.1-9ubuntu0.2) gutsy-security; urgency=low
* SECURITY UPDATE: root privilege escalation via utmp group.
- debian/patches/303_login_symlink_attack: upstream fix thanks
to Paul Szabo and Nicolas François.
-- Kees Cook <email address hidden> Mon, 08 Dec 2008 00:35:28 -0800
-
shadow (1:4.0.18.1-9ubuntu0.1) gutsy-security; urgency=low
* disable the root password for virtual machines created with vm-builder
on Ubuntu 8.10. (LP: #296841)
-- Jamie Strandboge <email address hidden> Wed, 12 Nov 2008 22:17:27 -0600
-
shadow (1:4.0.18.1-9) unstable; urgency=low
* The "Etorki" release
* Fix debian/copyright and mention that the upstream site
is "temporarily?) no longer available. Closes: #423956
Add the various copyrights from Marek, Andrzej and Tomasz
(deduced from the ChangeLog entries as upstream doesn't have an
explicit copyright file)
* Debian packaging fixes:
The 3 following entries fix the FTBFS when built twice in a row.
Closes: #424257
- 498_man_nonpam_undefined: Do not patch the generated man/it/Makefile.in.
- 409_man_generate_from_PO: Generate the translated man pages at build
time.
- 200_regenerate_manpages: No more needed.
-- Ubuntu Archive Auto-Sync <email address hidden> Fri, 18 May 2007 09:38:57 +0100
-
shadow (1:4.0.18.1-8) unstable; urgency=low
* The "Feuille de Dreux" release
* New upstream version
* Debian packaging fixes:
- 505_useradd_recommend_adduser: Recommend using adduser and deluser for
regular operations. Closes: #406046
- Versioned Build-Depends on gnome-doc-utils as we use the "-l"
switch of xml2po. Closes: #390110
- Remove conflicts for packages that are only in Debian releases prior
to sarge:
- passwd: shadow-passwd, pam-apps, suidregister (<< 0.50), debconf (<< 0.5)
- login: shadow-login, pam-apps, secure-su, suidregister (<< 0.50)
- Remove all debconf configuration. This is now done in D-I and is
no longer useful on regular systems. Closes: #386529
- Remove Replaces for packages that are only in Debian releases prior
- passwd: manpages (<=1.15-2), manpages-pl (<= 20020406-1)
- login: shadow-login, shadow-passwd, shellutils (<< 2.0-2), manpages-pl (<= 20020406-1)
- Remove unneeded Build-Depends: bzip2, file, texinfo, libpam-runtime
- /etc/default/useradd: Mentions the creation of primary user groups is
neither -n nor -g are specified. See also 407_adduser_disable_PUG_with-n
- no longer include /usr/bin/X11 in defaults PATH variable. Closes: #395890
- set debhelper compatibility to 5 through debian/compat
- ignore a false positive lintian warning about
possible-missing-colon-in-closes in line 668 of the changelog
* Upstream bugs not yet fixed in upstream releases or CVS:
- 493_pwck_no_SHADOWPWD: SHADOWPWD no more exist.
pwck do not detect missing users in /etc/shadow.
- 466_fflush-prompt: Fix compilation error.
One call to yes_or_no was forgotten because it was in
commented code (which is now enabled).
- 406_vipw_resume_properly: Resume correctly after ^Z
Thanks to Dean Gaudet for the patch and report. Closes: #414542
- 497_newgrp_primary_group: Do not request a password when a user uses
newgrp to switch to her primary group. Closes: #396691
- 407_adduser_disable_PUG_with-n: Add option -n to useradd to disable the
creation of primary user groups. Closes: #416835
- 408_passwd_check_arguments: Check the passwd arguments and fail with the
usage message if there are more than one non option arguments (i.e.
usernames). Closes: #410268
* Upstream bugs fixed in upstream releases or CVS:
- 497_non_numerical_identifier moved as 397_non_numerical_identifier
because upstream applied it
-- Ubuntu Archive Auto-Sync <email address hidden> Tue, 08 May 2007 07:59:10 +0100
-
shadow (1:4.0.18.1-7) unstable; urgency=low
* The "Pélardon" release
* Debian packaging fixes:
- debian/recode_manpages.sh: Recode the Swedish manpages to ISO-8859-1.
Closes: #403210
- 200_regenerate_manpages: Manually generate the man pages. This fixes the
formatting of some pages (e.g. passwd.5); permits to propagate the Debian
changes to the translated manpages; and to benefit from the fixes in the
Swedish manpages (see 104_man-sv).
* Upstream bugs fixed upstream:
- 104_man-sv: Fix Swedish manpages's PO encoding (some characters were
converted twice to UTF-8).
* Upstream bugs or fixes not yet fixed in upstream releases or CVS:
- 405_su_no_pam_end_before_exec: Avoid terminating the PAM library in the
forked child. This is done later in the parent after closing the PAM
session. With pam_krb5, this allow users to reuse the cached credential
in the forked shell. Closes: #412061
-- Martin Pitt <email address hidden> Mon, 30 Apr 2007 07:01:31 +0100
-
shadow (1:4.0.18.1-6ubuntu1) feisty; urgency=low
* Merge from debian unstable, remaining changes:
- debian/passwd.postinst: Tidy up after Breezy d-i's password exposure in
log files. (LP#34606)
shadow (1:4.0.18.1-6) unstable; urgency=low
* The "Vieux Lille" release
* Upstream translation updates:
- debian/patches/404_man-fr: Fix the French translation of
passwd.1. Closes: #395537
* Upstream bugs or fixes not yet fixed in upstream releases or CVS:
- 403_fix_PATH-MAX_hurd: fixed glibc error on Hurd by not freeing f
unconditionnally. Thanks to Michael banck for the patch fix
Closes: #402002
* Upstream bugs fixed upstream:
- 103_man-de: early German translation of manpages. Updates
passwd manpage. Closes: #378899
-- Martin Pitt <email address hidden> Tue, 19 Dec 2006 15:42:13 +0100
