[ubuntu/karmic] shadow 1:4.1.3.1-1ubuntu1 (Accepted)

Kees Cook kees at ubuntu.com
Tue May 5 23:25:12 BST 2009


shadow (1:4.1.3.1-1ubuntu1) karmic; urgency=low

  * Merge from debian unstable, remaining changes:
    - Ubuntu specific:
      + debian/login.defs: use SHA512 by default for password crypt routine.
    - debian/patches/stdout-encrypted-password.patch: chpasswd can report
      password hashes on stdout (debian bug 505640).
    - debian/login.pam: Enable SELinux support (debian bug 527106).
    - debian/securetty.linux: support Freescale MX-series (debian bug 527095).
  * Add debian/patches/300_lastlog_failure: fixed upstream (debian bug 524873).
  * Drop debian/patches/593_omit_lastchange_field_if_clock_is_misset: fixed
    upstream.

shadow (1:4.1.3.1-1) unstable; urgency=low

  * The "Le Puant Macéré" release.
    Sorry for the lack of cheese name in 1:4.1.3-1. At least this one should
    count for two.
  * New upstream release:
    - Fixed wrong parsing of octal permissions. This impacted login (permission
      of the TTYs, UMASK, ERASECHAR or KILLCHAR) in release 1:4.1.3-1 only.
      Closes: #524139, #524258
    - removed debian/patches/200_bin_nb: Applied upstream.
    - removed debian/patches/302_vim_selinux_support: Applied upstream.
    - Fixed login segfault when called without a username. Closes: #524193

shadow (1:4.1.3-1) unstable; urgency=low

  * The "" release.
  * New upstream release:
    - Fix possible login DOS. Closes: #505071
    - Fix gpasswd and username with 32 characters. Closes: #508785
    - Fix typo in nologin(8). Closes: #513252
    - Remove old features from passwd(1). Closes: #499578
    - login: Close passwd while waiting for exit. Closes: #474318
    - login: fix the count of login failures. Closes: #498788
    - Remove patches applied upstream (4.1.2):
      + debian/patches/434_login_stop_checking_args_after--
      + debian/patches/491_configure.in_friendly_selinux_detection
      + debian/patches/487_passwd_chauthtok_failed_message
      + debian/patches/406_vipw_resume_properly
      + debian/patches/414_remove-unwise-advices
      + debian/patches/300_SHA_crypt_method
      + debian/patches/301_manpages_missing_options
      + debian/patches/415_login_put-echoctl-back
      + debian/patches/431_su_uid_0_not_root
    - Remove patches applied upstream (4.1.3):
      + debian/patches/200_Czech_binary_translation
      + debian/patches/302_remove_non_translated_polish_manpages
      + debian/patches/494_passwd_lock-no_account_lock
      + debian/patches/200_Czech_binary_translation
      + debian/patches/494_passwd_lock-no_account_lock
    - Updated patches:
      + debian/patches/431_su_uid_0_not_root
      + debian/patches/463_login_delay_obeys_to_PAM
      + debian/patches/008_su_get_PAM_username
      + debian/patches/302_vim_selinux_support
      + debian/patches/008_login_log_failure_in_FTMP
      + debian/patches/429_login_FAILLOG_ENAB
      + debian/patches/428_grpck_add_prune_option
      + debian/patches/401_cppw_src.dpatch
      + debian/patches/506_relaxed_usernames
      + debian/patches/463_login_delay_obeys_to_PAM
      + debian/patches/542_useradd-O_option
    - Translations
      + New Kazakh translation. Closes: #517809
      + Updated Slovak translation. Closes: #523621
  * debian/patches/454_userdel_no_MAIL_FILE: Patch removed. If MAIL_FILE is
    defined, the mailbox is not in MAIL_SPOOL_DIR.
  * debian/patches/506_relaxed_usernames: Use an extra paragraph for the note
    on username with a '/'.
  * debian/patches/504_undef_USE_PAM.nolibpam,
    debian/patches/504_undef_USE_PAM.dpatch, debian/rules: Patches removed.
    Replaced by the --disable-account-tools-setuid configure option.
  * debian/control: changed the "Replaces" on manpages-zh to a versioned
    one on 1.5.1-1
  * debian/control: drop all Replaces on manpages-* when the version is
    prior to Etch
  * Versioned Replaces on manpages-tr (<<1..5) as conflicting manpages have
    been removed in that package
  * debian/patches/402_cppw_selinux: Add SE Linux support for cppw / cpgr.
  * debian/patches/900_testsuite_groupmems, debian/patches/901_testsuite_gcov:
    Added patches, only intended to be used in the testsuite.
  * debian/securetty.linux: Added ttyPZ0, ttyPZ1, ttyPZ2, ttyPZ3 for PowerMac
    machines.  Closes: #511739
  * debian/patches/579_chowntty_debug: Removed. With the fix for 505071 and
    505271, this additional debug information is no more needed.
  * debian/patches/507_32char_grnames.dpatch: Patch removed. Replaced by the
    --with-group-name-max-length=32 configure option.
  * debian/patches/592_manpages_typos: No more needed.
  * debian/patches/401_cppw_src.dpatch: Call fsync before closing the backup
    file descriptor. This ensures that the backup file will be available on
    the storage medium.
  * debian/securetty.linux: Removed devfs devices. Usage of devfs enabled
    kernel in Lenny was not supported. Closes: #511961
  * debian/login.defs: Added /usr/local/games/ to ENV_PATH (for regular
    users). Closes: #487105
  * debian/patches/200_bin_nb: Updated Norwegian Bokmål translation.
    Closes: #523798
  * debian/login.defs: Update GID_MIN to 1000. This is more consistent with
    UID_MIN, SYS_GID_MAX and the usage of the same ID for UID and GIDs. This
    should also be more consistent with the assignment of system group IDs
    starting from GID_MAX and going down.

Date: Tue, 05 May 2009 09:45:21 -0700
Changed-By: Kees Cook <kees at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/karmic/+source/shadow/1:4.1.3.1-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 05 May 2009 09:45:21 -0700
Source: shadow
Binary: passwd login
Architecture: source
Version: 1:4.1.3.1-1ubuntu1
Distribution: karmic
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Kees Cook <kees at ubuntu.com>
Description: 
 login      - system login tools
 passwd     - change and administer password and group data
Closes: 474318 487105 498788 499578 505071 508785 511739 511961 513252 517809 523621 523798 524139 524193 524258
Changes: 
 shadow (1:4.1.3.1-1ubuntu1) karmic; urgency=low
 .
   * Merge from debian unstable, remaining changes:
     - Ubuntu specific:
       + debian/login.defs: use SHA512 by default for password crypt routine.
     - debian/patches/stdout-encrypted-password.patch: chpasswd can report
       password hashes on stdout (debian bug 505640).
     - debian/login.pam: Enable SELinux support (debian bug 527106).
     - debian/securetty.linux: support Freescale MX-series (debian bug 527095).
   * Add debian/patches/300_lastlog_failure: fixed upstream (debian bug 524873).
   * Drop debian/patches/593_omit_lastchange_field_if_clock_is_misset: fixed
     upstream.
 .
 shadow (1:4.1.3.1-1) unstable; urgency=low
 .
   * The "Le Puant Macéré" release.
     Sorry for the lack of cheese name in 1:4.1.3-1. At least this one should
     count for two.
   * New upstream release:
     - Fixed wrong parsing of octal permissions. This impacted login (permission
       of the TTYs, UMASK, ERASECHAR or KILLCHAR) in release 1:4.1.3-1 only.
       Closes: #524139, #524258
     - removed debian/patches/200_bin_nb: Applied upstream.
     - removed debian/patches/302_vim_selinux_support: Applied upstream.
     - Fixed login segfault when called without a username. Closes: #524193
 .
 shadow (1:4.1.3-1) unstable; urgency=low
 .
   * The "" release.
   * New upstream release:
     - Fix possible login DOS. Closes: #505071
     - Fix gpasswd and username with 32 characters. Closes: #508785
     - Fix typo in nologin(8). Closes: #513252
     - Remove old features from passwd(1). Closes: #499578
     - login: Close passwd while waiting for exit. Closes: #474318
     - login: fix the count of login failures. Closes: #498788
     - Remove patches applied upstream (4.1.2):
       + debian/patches/434_login_stop_checking_args_after--
       + debian/patches/491_configure.in_friendly_selinux_detection
       + debian/patches/487_passwd_chauthtok_failed_message
       + debian/patches/406_vipw_resume_properly
       + debian/patches/414_remove-unwise-advices
       + debian/patches/300_SHA_crypt_method
       + debian/patches/301_manpages_missing_options
       + debian/patches/415_login_put-echoctl-back
       + debian/patches/431_su_uid_0_not_root
     - Remove patches applied upstream (4.1.3):
       + debian/patches/200_Czech_binary_translation
       + debian/patches/302_remove_non_translated_polish_manpages
       + debian/patches/494_passwd_lock-no_account_lock
       + debian/patches/200_Czech_binary_translation
       + debian/patches/494_passwd_lock-no_account_lock
     - Updated patches:
       + debian/patches/431_su_uid_0_not_root
       + debian/patches/463_login_delay_obeys_to_PAM
       + debian/patches/008_su_get_PAM_username
       + debian/patches/302_vim_selinux_support
       + debian/patches/008_login_log_failure_in_FTMP
       + debian/patches/429_login_FAILLOG_ENAB
       + debian/patches/428_grpck_add_prune_option
       + debian/patches/401_cppw_src.dpatch
       + debian/patches/506_relaxed_usernames
       + debian/patches/463_login_delay_obeys_to_PAM
       + debian/patches/542_useradd-O_option
     - Translations
       + New Kazakh translation. Closes: #517809
       + Updated Slovak translation. Closes: #523621
   * debian/patches/454_userdel_no_MAIL_FILE: Patch removed. If MAIL_FILE is
     defined, the mailbox is not in MAIL_SPOOL_DIR.
   * debian/patches/506_relaxed_usernames: Use an extra paragraph for the note
     on username with a '/'.
   * debian/patches/504_undef_USE_PAM.nolibpam,
     debian/patches/504_undef_USE_PAM.dpatch, debian/rules: Patches removed.
     Replaced by the --disable-account-tools-setuid configure option.
   * debian/control: changed the "Replaces" on manpages-zh to a versioned
     one on 1.5.1-1
   * debian/control: drop all Replaces on manpages-* when the version is
     prior to Etch
   * Versioned Replaces on manpages-tr (<<1..5) as conflicting manpages have
     been removed in that package
   * debian/patches/402_cppw_selinux: Add SE Linux support for cppw / cpgr.
   * debian/patches/900_testsuite_groupmems, debian/patches/901_testsuite_gcov:
     Added patches, only intended to be used in the testsuite.
   * debian/securetty.linux: Added ttyPZ0, ttyPZ1, ttyPZ2, ttyPZ3 for PowerMac
     machines.  Closes: #511739
   * debian/patches/579_chowntty_debug: Removed. With the fix for 505071 and
     505271, this additional debug information is no more needed.
   * debian/patches/507_32char_grnames.dpatch: Patch removed. Replaced by the
     --with-group-name-max-length=32 configure option.
   * debian/patches/592_manpages_typos: No more needed.
   * debian/patches/401_cppw_src.dpatch: Call fsync before closing the backup
     file descriptor. This ensures that the backup file will be available on
     the storage medium.
   * debian/securetty.linux: Removed devfs devices. Usage of devfs enabled
     kernel in Lenny was not supported. Closes: #511961
   * debian/login.defs: Added /usr/local/games/ to ENV_PATH (for regular
     users). Closes: #487105
   * debian/patches/200_bin_nb: Updated Norwegian Bokmål translation.
     Closes: #523798
   * debian/login.defs: Update GID_MIN to 1000. This is more consistent with
     UID_MIN, SYS_GID_MAX and the usage of the same ID for UID and GIDs. This
     should also be more consistent with the assignment of system group IDs
     starting from GID_MAX and going down.
Checksums-Sha1: 
 212c17e0db4c26d8bffabc4740e2ce6b46e6fc61 1709 shadow_4.1.3.1-1ubuntu1.dsc
 8fae6445ecff97fb4cdeab0034417589a6fd7e48 2682948 shadow_4.1.3.1.orig.tar.gz
 74f9b3b3ae9d75698df2445e915db0c3e6424847 105338 shadow_4.1.3.1-1ubuntu1.diff.gz
Checksums-Sha256: 
 1b845bfe664f9c81a83e6a64b5cf45eda077bfee3dcf057c021267fa1c442651 1709 shadow_4.1.3.1-1ubuntu1.dsc
 3be8d9e8cf383a8d6236107a212668ab27297a834988ea1c44f836aa072ce798 2682948 shadow_4.1.3.1.orig.tar.gz
 723f9496f33eb5b6887a7fcdb9034b511b0ccf8fd3b027050c11b33a9f1a3541 105338 shadow_4.1.3.1-1ubuntu1.diff.gz
Files: 
 f440de043d71ae49b8c88320c9527a88 1709 admin required shadow_4.1.3.1-1ubuntu1.dsc
 dd22f2ad8f7550bc1177ddcca49877ff 2682948 admin required shadow_4.1.3.1.orig.tar.gz
 07db539d5a064e010b24b86caaedca39 105338 admin required shadow_4.1.3.1-1ubuntu1.diff.gz
Original-Maintainer: Shadow package maintainers <pkg-shadow-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Kees Cook <kees at outflux.net>

iEYEARECAAYFAkoAu2kACgkQH/9LqRcGPm0siwCdGPvtBUvqidY4Y2jvHqWqJVla
IUsAn177JsnFS6HlZj2lKshyKBjh1Dsw
=z9Ej
-----END PGP SIGNATURE-----


More information about the Karmic-changes mailing list