[ubuntu/lucid-security] shadow_4.1.4.2-1ubuntu2.2_ia64_translations.tar.gz, shadow_4.1.4.2-1ubuntu2.2_powerpc_translations.tar.gz, shadow_4.1.4.2-1ubuntu2.2_armel_translations.tar.gz, shadow, shadow_4.1.4.2-1ubuntu2.2_amd64_translations.tar.gz, shadow_4.1.4.2-1ubuntu2.2_sparc_translations.tar.gz (delayed), shadow_4.1.4.2-1ubuntu2.2_i386_translations.tar.gz 1:4.1.4.2-1ubuntu2.2 (Accepted)

[Ubuntu Installer]

shadow (1:4.1.4.2-1ubuntu2.2) lucid-security; urgency=low

  * SECURITY UPDATE: could inject NIS groups memberships into /etc/passwd.
    - debian/patches/900_locale_env_sanity: actually set locale environment
      variables correctly.
    - debian/patches/901_reject_newline: reject newlines in GECOS updates.
    - CVE-2011-0721

Date: Mon, 14 Feb 2011 13:42:29 -0800
Changed-By: Kees Cook <kees at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/shadow/1:4.1.4.2-1ubuntu2.2
-------------- next part --------------
Format: 1.8
Date: Mon, 14 Feb 2011 13:42:29 -0800
Source: shadow
Binary: passwd login
Architecture: source
Version: 1:4.1.4.2-1ubuntu2.2
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Kees Cook <kees at ubuntu.com>
Description: 
 login      - system login tools
 passwd     - change and administer password and group data
Changes: 
 shadow (1:4.1.4.2-1ubuntu2.2) lucid-security; urgency=low
 .
   * SECURITY UPDATE: could inject NIS groups memberships into /etc/passwd.
     - debian/patches/900_locale_env_sanity: actually set locale environment
       variables correctly.
     - debian/patches/901_reject_newline: reject newlines in GECOS updates.
     - CVE-2011-0721
Checksums-Sha1: 
 1af3b20eefc88f7da16fb0352f6953dba6afe017 2349 shadow_4.1.4.2-1ubuntu2.2.dsc
 a1c055a13f53258ab0824b2f409d987de19ed0f4 81829 shadow_4.1.4.2-1ubuntu2.2.diff.gz
Checksums-Sha256: 
 1c048b0302159dad7dbd10e54092f69d215a713740cdd668a03290e41cf6cdc6 2349 shadow_4.1.4.2-1ubuntu2.2.dsc
 28bcb02df69b2f015e0f9b7ac60f07ef44b3468e389e85ffb380b09558fbe097 81829 shadow_4.1.4.2-1ubuntu2.2.diff.gz
Files: 
 788910a4c21d47240c4540f597c3fd72 2349 admin required shadow_4.1.4.2-1ubuntu2.2.dsc
 877012c903d9fdcce5d77f017f2f0584 81829 admin required shadow_4.1.4.2-1ubuntu2.2.diff.gz
Original-Maintainer: Shadow package maintainers <pkg-shadow-devel at lists.alioth.debian.org>