[Pkg-shadow-commits] r1081 - in branches/sarge: debian libmisc src
Nicolas FRANCOIS
nekral-guest at costa.debian.org
Wed Aug 16 16:01:17 UTC 2006
Author: nekral-guest
Date: 2006-08-16 16:01:16 +0000 (Wed, 16 Aug 2006)
New Revision: 1081
Modified:
branches/sarge/debian/changelog
branches/sarge/debian/control
branches/sarge/libmisc/pwdcheck.c
branches/sarge/src/passwd.c
Log:
Revert the srage branch to sarge5.
Modified: branches/sarge/debian/changelog
===================================================================
--- branches/sarge/debian/changelog 2006-08-11 21:57:42 UTC (rev 1080)
+++ branches/sarge/debian/changelog 2006-08-16 16:01:16 UTC (rev 1081)
@@ -1,26 +1,10 @@
-shadow (1:4.0.3-31sarge8) proposed-updates; urgency=low
+shadow (1:4.0.3-31sarge6) stable-security; urgency=high
- * Add Nicolas FRANCOIS to the Uploaders.
-
- * SECURITY UPDATE: CVE-2006-3378: Root privilege escalation.
- * src/passwd.c:
- - Check for failing setuid() (which can happen if user hits PAM
- limits). Before, passwd continued to run as root and executed
- chfn/chsh/gpasswd as root instead of as the user.
- - Thanks to Sune Kloppenborg Jeppesen for pointing this out.
-
- -- Nicolas FRANCOIS (Nekral) <nicolas.francois at centraliens.net> Sat, 5 Aug 2006 02:53:20 +0200
-
-shadow (1:4.0.3-31sarge7) proposed-updates; urgency=high
-
- * Bump version to circumvent a 4.0.3-31sarge6 version full of autotools
- cruft which was uploaded to proposed-updates
* passwd.postinst: On upgrades from any prior version, chmod 600 various
base-config and d-i log files that might contain sensative information,
- including in some cases, passwords. Thanks to Joey Hess for the patch.
- Closes: #356939
+ including in some cases, passwords. CLoses: #356939
- -- Christian Perrier <bubulle at kheops.perrier.eu.org> Fri, 21 Jul 2006 09:23:46 +0200
+ -- Joey Hess <joeyh at debian.org> Tue, 14 Mar 2006 16:14:26 -0500
shadow (1:4.0.3-31sarge5) testing-proposed-updates; urgency=high
Modified: branches/sarge/debian/control
===================================================================
--- branches/sarge/debian/control 2006-08-11 21:57:42 UTC (rev 1080)
+++ branches/sarge/debian/control 2006-08-16 16:01:16 UTC (rev 1081)
@@ -3,7 +3,7 @@
Priority: required
Maintainer: Shadow package maintainers <pkg-shadow-devel at lists.alioth.debian.org>
Standards-Version: 3.6.1.1
-Uploaders: Christian Perrier <bubulle at debian.org>, Sam Hartman <hartmans at debian.org>, Nicolas FRANCOIS (Nekral) <nicolas.francois at centraliens.net>
+Uploaders: Christian Perrier <bubulle at debian.org>, Sam Hartman <hartmans at debian.org>
Build-Depends: autoconf, automake1.7, libtool, bzip2, gettext, libpam0g-dev [!hurd-i386], texinfo, file, debhelper (>= 4.1.16), po-debconf, libpam-runtime (>= 0.76-14)
Package: passwd
Modified: branches/sarge/libmisc/pwdcheck.c
===================================================================
--- branches/sarge/libmisc/pwdcheck.c 2006-08-11 21:57:42 UTC (rev 1080)
+++ branches/sarge/libmisc/pwdcheck.c 2006-08-16 16:01:16 UTC (rev 1081)
@@ -1,7 +1,7 @@
#include <config.h>
#include "rcsid.h"
-RCSID("$Id: pwdcheck.c 6 2005-03-20 15:34:28Z bubulle $")
+RCSID("$Id$")
#include "prototypes.h"
#include "defines.h"
Property changes on: branches/sarge/libmisc/pwdcheck.c
___________________________________________________________________
Name: svn:keywords
+ Author Date Id Revision
Modified: branches/sarge/src/passwd.c
===================================================================
--- branches/sarge/src/passwd.c 2006-08-11 21:57:42 UTC (rev 1080)
+++ branches/sarge/src/passwd.c 2006-08-16 16:01:16 UTC (rev 1081)
@@ -30,7 +30,7 @@
#include <config.h>
#include "rcsid.h"
-RCSID (PKG_VER "$Id: passwd.c 6 2005-03-20 15:34:28Z bubulle $")
+RCSID (PKG_VER "$Id$")
#include "prototypes.h"
#include "defines.h"
#include <sys/types.h>
@@ -958,13 +958,7 @@
if (argc > 1 && argv[1][0] == '-' && strchr ("gfs", argv[1][1])) {
char buf[200];
- uid_t uid = getuid();
- setuid (uid);
- if (getuid() != uid) {
- perror("cannot set user id");
- SYSLOG ((LOG_ERR, "setuid to %i failed", uid));
- exit(E_FAILURE);
- }
+ setuid (getuid ());
switch (argv[1][1]) {
case 'g':
argv[1] = GPASSWD_PROGRAM; /* XXX warning: const */
Property changes on: branches/sarge/src/passwd.c
___________________________________________________________________
Name: svn:keywords
+ Author Date Id Revision
More information about the Pkg-shadow-commits
mailing list