package: src:shadow severity: normal tags: security This issue was disclosed a couple years ago: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235 It isn't very severe, but it is still currently unfixed. Best wishes, Mike