[Pkg-shadow-devel] Bug#778950: Fixed in Upstream

[Bálint Réczey]

Hi Jeff,

On Mon, 3 Oct 2022 09:10:33 -0500 Jeffrey Hawkins
<jeffrey.f.hawkins at motorolasolutions.com> wrote:
> It appears the CVE-2013-4235 has been fixed in the upstream project,
> Release:  4.11.  Is there any intent by Debian to backport the fix?
> https://github.com/shadow-maint/shadow/releases/tag/v4.11

Not really. This marked as an unimportant issue by the Security Team.
https://security-tracker.debian.org/tracker/source-package/shadow

Cheers,
Balint