[ubuntu/karmic-security] shadow_4.1.4.1-1ubuntu2.2_amd64_translations.tar.gz, shadow_4.1.4.1-1ubuntu2.2_armel_translations.tar.gz, shadow_4.1.4.1-1ubuntu2.2_sparc_translations.tar.gz (delayed), shadow_4.1.4.1-1ubuntu2.2_i386_translations.tar.gz, shadow_4.1.4.1-1ubuntu2.2_powerpc_translations.tar.gz, shadow_4.1.4.1-1ubuntu2.2_lpia_translations.tar.gz, shadow, shadow_4.1.4.1-1ubuntu2.2_ia64_translations.tar.gz 1:4.1.4.1-1ubuntu2.2 (Accepted)

[Ubuntu Installer]

shadow (1:4.1.4.1-1ubuntu2.2) karmic-security; urgency=low

  * SECURITY UPDATE: could inject NIS groups memberships into /etc/passwd.
    - debian/patches/900_locale_env_sanity: actually set locale environment
      variables correctly.
    - debian/patches/901_reject_newline: reject newlines in GECOS updates.
    - CVE-2011-0721

Date: Mon, 14 Feb 2011 13:43:17 -0800
Changed-By: Kees Cook <kees at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/karmic/+source/shadow/1:4.1.4.1-1ubuntu2.2
-------------- next part --------------
Format: 1.8
Date: Mon, 14 Feb 2011 13:43:17 -0800
Source: shadow
Binary: passwd login
Architecture: source
Version: 1:4.1.4.1-1ubuntu2.2
Distribution: karmic-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Kees Cook <kees at ubuntu.com>
Description: 
 login      - system login tools
 passwd     - change and administer password and group data
Changes: 
 shadow (1:4.1.4.1-1ubuntu2.2) karmic-security; urgency=low
 .
   * SECURITY UPDATE: could inject NIS groups memberships into /etc/passwd.
     - debian/patches/900_locale_env_sanity: actually set locale environment
       variables correctly.
     - debian/patches/901_reject_newline: reject newlines in GECOS updates.
     - CVE-2011-0721
Checksums-Sha1: 
 d522c30d882225379da615db5080f61edf7b8798 2349 shadow_4.1.4.1-1ubuntu2.2.dsc
 85d3426aeea0814e8650199a9c3d43c9429972ad 80909 shadow_4.1.4.1-1ubuntu2.2.diff.gz
Checksums-Sha256: 
 0b65e4918cbda92e7bbee3ba374800449c08f426923568a0a2365c6ee3ff10f0 2349 shadow_4.1.4.1-1ubuntu2.2.dsc
 4ea34e61a1068a89c34c3ea0e1d48bdb2d034f65fc7749e702b07a641cddb5bd 80909 shadow_4.1.4.1-1ubuntu2.2.diff.gz
Files: 
 aafbd5790c84b6d4c4ca8e26d5c22198 2349 admin required shadow_4.1.4.1-1ubuntu2.2.dsc
 51c66e9b503868bdedd54efe4928cfa3 80909 admin required shadow_4.1.4.1-1ubuntu2.2.diff.gz
Original-Maintainer: Shadow package maintainers <pkg-shadow-devel at lists.alioth.debian.org>