Change logs for shadow source package in Hardy

  • shadow (1: hardy-security; urgency=low
      * SECURITY UPDATE: root privilege escalation via utmp group.
        - debian/patches/303_login_symlink_attack: upstream fix thanks
          to Paul Szabo and Nicolas François.
     -- Kees Cook <email address hidden>   Mon, 08 Dec 2008 00:46:04 -0800
  • shadow (1: hardy-security; urgency=low
      * disable the root password for virtual machines created with vm-builder
        on Ubuntu 8.10. (LP: #296841)
     -- Jamie Strandboge <email address hidden>   Wed, 12 Nov 2008 22:08:23 -0600
  • shadow (1: hardy; urgency=low
      * Add 498_make_useradd_faster_with_ldap: make useradd faster when
        nsswitch uses LDAP or some other remote names database (LP: #120015),
        thanks to Vince Busam.
     -- <email address hidden> (Matt T. Proud)   Fri, 08 Feb 2008 18:30:51 -0800
  • shadow (1: hardy; urgency=low
      * debian/login.pam: Enable SELinux support in login.pam (LP: #191326).
     -- Caleb Case <email address hidden>   Fri, 08 Feb 2008 02:20:06 -0500
  • shadow (1: unstable; urgency=low
      * The "Vacherin" release.
      * New upstream version. This closes the following bugs:
        - gpasswd manpage improvements. Closes: #445480
        - support for the resource limits "max nice value", and "max real time
          priority" was added upstream. Note that it does not impact Debian
          because shadow is compiled with PAM support on Debian. Closes: #442334
        - Finnish translation. Closes: #448233
        - Remove patches applied upstream:
          + 438_su_GNU_origin
          + 433_shadow.5-typo_312430
          + 402-clarify_usermod_usage
          + 498_man_nonpam_undefined
          + 301_passwd-typo-383216
          + 101_ja
          + 102_de-fix-sorry
          + 404_man-fr
          + 103_man-de
          + 104_man-sv
          + 302_su_man_mention_sg
          + 303_wording_fixes_in_su_man
          + 201_fix_man_su_fr
          + 202_it_man_uses_gettext
          + 413_no-sorry-in-passwd
          + 416_man-fr_newgrp
        - The upstream tarball is now built with gettext 0.16. Remove
          + 499_gettext-0.15
        - Significant changes to patches
          + 397_non_numerical_identifier
            usermod.c was already patched upstream; useradd.c was not.
          + 467_useradd_-r_LSB
            Simplifications. There should be no changes.
          + 409_man_generate_from_PO
            The Italian PO was added upstream. Patch the Italian Makefile.
      * Upstream bugs not fixed in upstream's CVS:
        - debian/securetty.linux: Added xvc0 and hvc0 consoles to the Linux's
          consoles where root login is allowed. (triggered by #423389)
        - debian/patches/417_passwd_warndays: Correct the long option name for
          "-w" from "warning" to "warndays". Closes: #445481
      * Upstream translation updates:
        - debian/patches/105_zh_CN: Update Simplified Chinese translation
          Closes: #431287
        - debian/patches/416_man-fr_newgrp: Fix a typo in the French newgrp man
          page. Thanks to Nicolas Aupetit. Closes: #439090
      * Debian packaging fixes:
        - Fix typos in useradd default file. Thanks to Justin Pryzby.
        - Fix typos in cppw.8. Thanks to Justin Pryzby. Closes: #447757
     -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  06 Nov 2007 17:22:20 +0000
  • shadow (1: unstable; urgency=low
      * The "Baguette laonnaise" release
      * Reactivate ECHOCTL in login after it disappeared in 4.0.8. Closes: #429758
      * Disable audit support. Closes: #bug_not_yet_reported_by_Sesse
    shadow (1: unstable; urgency=low
      * The "Trappe d'Échourgnac" release
      * Upstream bugs fixed in upstream's CVS:
        - 302_su_man_mention_sg: mention sg(1) in su man page. Closes: #396690
        - 303_wording_fixes_in_su_man: minor wording fixes in su(1)
      * Upstream bugs not fixed in upstream's CVS:
        - 410_newgrp_man_mention_sg: mention sg(1) in newgrp man page
        - 201_fix_man_su_fr: fix translation error in french translation for su(1)
        - 202_it_man_uses_gettext: switch italian manpages to gettext. This will
          fix missing paragraphs in translated manpages. Closes: #425689
        - 411_chpasswd_document_no_pam: Document that chgpasswd do not use PAM to
          update the passwords. Thus functionnalities provided by PAM modules are
          not present in chgpasswd (e.g. writting the old password in
          /etc/security/opasswd). Closes: #396726
        - 412_lastlog_-u_numerical_range: allow numerical UID and range of IDs in
          argument to lastog -u. Closes: #259494
        - 413_no-sorry-in-passwd: No longer print 'Sorry' when something
          fails in passwd, su and newgrp. Closes: #384164
        - 414_remove-unwise-advices: Remove not so wise advices about choosing
          passwords. Closes: #386818
        - 494_passwd_lock: set the account expiry field when using
          "passwd -l/-u". Closes: #389183
      * Debian packaging fixes:
        - 506_relaxed_usernames: do not allow spaces in usernames. This was at
          least broken with username starting with a space or tabulation (the user
          can be added but not removed). Closes: #400683
     -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  24 Oct 2007 07:44:11 +0100
  • shadow (1: unstable; urgency=low
      * The "Etorki" release
      * Fix debian/copyright and mention that the upstream site
        is "temporarily?) no longer available. Closes: #423956
        Add the various copyrights from Marek, Andrzej and Tomasz
        (deduced from the ChangeLog entries as upstream doesn't have an
         explicit copyright file)
      * Debian packaging fixes:
        The 3 following entries fix the FTBFS when built twice in a row.
        Closes: #424257
        - 498_man_nonpam_undefined: Do not patch the generated man/it/
        - 409_man_generate_from_PO: Generate the translated man pages at build
        - 200_regenerate_manpages: No more needed.
     -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  18 May 2007 09:38:57 +0100