[Pkg-shadow-devel] Security fix for shadow in sarge

[Christian Perrier]

Hello dear security team,

Back in March, after a password leaking problem was discovered first
in Ubuntu then in sarge default installs under certain conditions, a
fix for the shadow package has been sent to you. This fix needed to be
coordinated with a base-config fix which has been recently processed
for r3 inclusion.

We (shadow team) did NOT upload a fixed version of shadow anywhere.

We would like to know now whether we need to do something or if the
case is safely in your hands.

A fixed version of the package is quietly waiting on my HD if needed.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/attachments/20060629/cfc5b988/attachment.pgp