[Pkg-shadow-devel] Re: Shadow updates for sarge (was: )Re: Packages awaiting proposed-updates moderation)

[Nicolas François]

Hello Martin,

Here is shadow 1:4.0.3-31sarge8 for proposed-updates

I had to add myself to the Uploaders to avoid an NMU. (but this can be
changed if needed)

I still don't know if it should be uploaded right now, but it can be
reviewed.

Kind Regards,
-- 
Nekral
-------------- next part --------------
A non-text attachment was scrubbed...
Name: shadow_4.0.3-31sarge8.diff.gz
Type: application/octet-stream
Size: 1319844 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/attachments/20060805/c3b4216d/shadow_4.0.3-31sarge8.diff-0001.obj
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.0
Source: shadow
Version: 1:4.0.3-31sarge8
Binary: passwd, login
Maintainer: Shadow package maintainers <pkg-shadow-devel at lists.alioth.debian.org>
Architecture: any
Standards-Version: 3.6.1.1
Build-Depends: autoconf, automake1.7, libtool, bzip2, gettext, libpam0g-dev [!hurd-i386], texinfo, file, debhelper (>= 4.1.16), po-debconf, libpam-runtime (>= 0.76-14)
Uploaders: Christian Perrier <bubulle at debian.org>, Sam Hartman <hartmans at debian.org>, Nicolas FRANCOIS (Nekral) <nicolas.francois at centraliens.net>
Files: 
 b52dfb2e5e8d9a4a2aae0ca1b266c513 1045704 shadow_4.0.3.orig.tar.gz
 641048e199c2a9bef20fb763f749b6c2 1319844 shadow_4.0.3-31sarge8.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFE0/cRWgo5mup89a0RAi7gAJ0QTbiU7pAProLj1MYFagd2oTuVAgCaAiOt
xKWTw5dnexJX+DFEil/1Azw=
=sSAq
-----END PGP SIGNATURE-----
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat,  5 Aug 2006 02:53:20 +0200
Source: shadow
Binary: login passwd
Architecture: source i386
Version: 1:4.0.3-31sarge8
Distribution: proposed-updates
Urgency: low
Maintainer: Shadow package maintainers <pkg-shadow-devel at lists.alioth.debian.org>
Changed-By: Nicolas FRANCOIS (Nekral) <nicolas.francois at centraliens.net>
Description: 
 login      - system login tools
 passwd     - change and administer password and group data
Changes: 
 shadow (1:4.0.3-31sarge8) proposed-updates; urgency=low
 .
   * Add Nicolas FRANCOIS to the Uploaders.
 .
   * SECURITY UPDATE: CVE-2006-3378: Root privilege escalation.
   * src/passwd.c:
     - Check for failing setuid() (which can happen if user hits PAM
       limits). Before, passwd continued to run as root and executed
       chfn/chsh/gpasswd as root instead of as the user.
     - Thanks to Sune Kloppenborg Jeppesen for pointing this out.
Files: 
 e6425d0aa9dc6d4ae9901b8d7b817ea7 901 base required shadow_4.0.3-31sarge8.dsc
 641048e199c2a9bef20fb763f749b6c2 1319844 base required shadow_4.0.3-31sarge8.diff.gz
 ff65b7e0ed231fafc11cf3390b819603 529284 base required passwd_4.0.3-31sarge8_i386.deb
 95a3650eae729778c52603a87f08849b 576300 base required login_4.0.3-31sarge8_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFE0/cRWgo5mup89a0RAlUQAJ9nohUJ/BtgmNe62F6YlZ+ZxVfXCQCfR8lG
Ob+KVwEA5v6YhPnmn0To0P0=
=Khab
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: login_4.0.3-31sarge8_i386.deb
Type: application/x-debian-package
Size: 576300 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/attachments/20060805/c3b4216d/login_4.0.3-31sarge8_i386-0001.deb
-------------- next part --------------
A non-text attachment was scrubbed...
Name: passwd_4.0.3-31sarge8_i386.deb
Type: application/x-debian-package
Size: 529284 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/attachments/20060805/c3b4216d/passwd_4.0.3-31sarge8_i386-0001.deb