[Pkg-shadow-devel] Wheezy update of shadow?

Serge E. Hallyn serge at hallyn.com
Thu Jul 21 14:16:48 UTC 2016


Quoting Christian PERRIER (bubulle at debian.org):
> Quoting Chris Lamb (lamby at debian.org):
> > Hello dear maintainer(s),
> > 
> > the Debian LTS team would like to fix the security issues which are
> > currently open in the Wheezy version of shadow:
> > https://security-tracker.debian.org/tracker/CVE-2016-6251
> > https://security-tracker.debian.org/tracker/CVE-2016-6252
> > 
> > Would you like to take care of this yourself?
> 
> There is probably zero chances that this happens. I handled over the
> maintenance of shadow to the "team" but the movement is very slow. So
> I suspect that nearly nothing will happen.
> 
> As for Nicolas, he is pretty much inactive for years now, so don't
> expect more from his side.
> 
> 
> So, well, even though I'm not happy to send suuch news, this is more
> or less the reality nowadays.

Dimitri, are you able to help here?

I had a candidate package up on mentors for awhile for a new release
(https://mentors.debian.net/debian/pool/main/s/shadow/shadow_4.3-1~b1.dsc).
Would be great if someone would either test that and fix it up / push, or
start over and ditch my work if they prefer.

-serge



More information about the Pkg-shadow-devel mailing list