[Pkg-shadow-devel] Wheezy update of shadow?
Serge E. Hallyn
serge at hallyn.com
Thu Jul 21 14:16:48 UTC 2016
Quoting Christian PERRIER (bubulle at debian.org):
> Quoting Chris Lamb (lamby at debian.org):
> > Hello dear maintainer(s),
> >
> > the Debian LTS team would like to fix the security issues which are
> > currently open in the Wheezy version of shadow:
> > https://security-tracker.debian.org/tracker/CVE-2016-6251
> > https://security-tracker.debian.org/tracker/CVE-2016-6252
> >
> > Would you like to take care of this yourself?
>
> There is probably zero chances that this happens. I handled over the
> maintenance of shadow to the "team" but the movement is very slow. So
> I suspect that nearly nothing will happen.
>
> As for Nicolas, he is pretty much inactive for years now, so don't
> expect more from his side.
>
>
> So, well, even though I'm not happy to send suuch news, this is more
> or less the reality nowadays.
Dimitri, are you able to help here?
I had a candidate package up on mentors for awhile for a new release
(https://mentors.debian.net/debian/pool/main/s/shadow/shadow_4.3-1~b1.dsc).
Would be great if someone would either test that and fix it up / push, or
start over and ditch my work if they prefer.
-serge
More information about the Pkg-shadow-devel
mailing list