-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 26 Sep 2023 22:01:52 +0200 Source: shadow Built-For-Profiles: noudeb Architecture: source Version: 1:4.13+dfsg1-2 Distribution: unstable Urgency: medium Maintainer: Shadow package maintainers <pkg-shadow-devel@lists.alioth.debian.org> Changed-By: Balint Reczey <balint@balintreczey.hu> Closes: 1034482 1040064 1041547 1051062 1051827 Changes: shadow (1:4.13+dfsg1-2) unstable; urgency=medium . [ Balint Reczey ] * debian/gitlab-ci.yml: Use sudo to fix reprotest test * debian/login.pam: Drop reference to Debian Etch (Closes: #1040064) * debian/NEWS: Fix false claim about PREVENT_NO_AUTH affecting authentication. Also drop setting PREVENT_NO_AUTH in shipped login.defs. (Closes: #1041547) * Cherry-pick upstream patch to fix gpasswd passwd leak (CVE-2023-4641) (Closes: #1051062) * Cherry-pick upstream patch to fix chfn vulnerability allowing injection of control characters into some /etc/passwd fields. (CVE-2023-29383) (Closes: #1034482) . [ Gioele Barabucci ] * Support <nodoc> build profile `xsltproc`, `docbook` and all other XML-related packages are not needed when the `<nodoc>` build profile is active, as long as `./configure` is called with `--disable-man`. (Closes: #1051827) Checksums-Sha1: c296cd50c74c5b50d050e1ac23085ac10ea87b83 2447 shadow_4.13+dfsg1-2.dsc 62928d4593fc88611ac506f4e7c0c8e2cd2a1d12 82300 shadow_4.13+dfsg1-2.debian.tar.xz d439a6fd94c942288dabd2be42bd002f122c85ce 8923 shadow_4.13+dfsg1-2_source.buildinfo Checksums-Sha256: cac949c2071dc8955c3fff22e4a113a700b9f68a01b7583b64cfae55c2b2e678 2447 shadow_4.13+dfsg1-2.dsc 0f59c95526a4dc89c70b2fee357f05617d4572c6e94537d21019eed7a22471c6 82300 shadow_4.13+dfsg1-2.debian.tar.xz 8081d4dde05a7a5f3f4649e4a1ceade8631256a36a83135de91fd3726baf030d 8923 shadow_4.13+dfsg1-2_source.buildinfo Files: f39e733513794a93703ebeee93a1aab7 2447 admin required shadow_4.13+dfsg1-2.dsc 091889878b164ff691ac7ba7c4d4b984 82300 admin required shadow_4.13+dfsg1-2.debian.tar.xz 2aa00609c93a76c74c646e8c1399570e 8923 admin required shadow_4.13+dfsg1-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEI/PvTgXX55rLQUfDg6KBkWslS0UFAmUTzsYACgkQg6KBkWsl S0WWmQ//bvtIuPzcYligvZKZm8TOMX00Dl6YTDxtPKHgk3W62df3E61UQk/tq8Qr hO+FHA6x9pdJ4VXLfeXSgcie8oCUGpQrXQs2vEZW7tE34CjBCpQq5En0eeFQ+3av Kjpy7jWFhuT2/enj13xqLvzCeMkHEa7GZgGmFDVgteqh3y5AFV2uWshwc1zAXIyE Dk6QnykFPxrGEASKTL7p20HDKgaPgXKIvIO3GJMqN88u3qZnDivNZSTmEKP9ICjN zbxzEF4PDbqPM0ON4QGIGTq1D926ffEp16f94aQSjIiFeMVO623+SwCwDMeXSfG+ V5yXsynDswMPS9sHkbyPeFQIZWctwnGasCX3VDrgBTKhUf5zj4gxF65RFN0btzNj h/0GoFDJ2rhE23JbBhyFKeI8+90xRrziPzBSde5CTywHR919T9XJzOdT4m5ZUB7P Fh0AOJX9hvZCAn2JtGgSE28945SmttJwP2MZVVn8gzbQCSDlXcNaND24Rh5jgReN TU/aC7k+9JHaxfPiw0KbpUO9sG/vLNF+paSQw4f75EgD93AqFOOwaeW1Z4qB0sZ+ tKRJ1cFsiHwZ0C8BsiQvucU/yZSmVwKMC/+qyeS9IGaZuKhINM4teY+DZ2a0H+Dg sn7n+YP73sy5auFNMQh7SEVVkpWuTRMx5VVOvb+bvn0OSvw+kVI= =2iyr -----END PGP SIGNATURE-----
