[ubuntu/maverick-security] shadow_4.1.4.2-1ubuntu3.2_armel_translations.tar.gz, shadow_4.1.4.2-1ubuntu3.2_i386_translations.tar.gz, shadow, shadow_4.1.4.2-1ubuntu3.2_powerpc_translations.tar.gz (delayed), shadow_4.1.4.2-1ubuntu3.2_amd64_translations.tar.gz 1:4.1.4.2-1ubuntu3.2 (Accepted)

[Ubuntu Installer]

shadow (1:4.1.4.2-1ubuntu3.2) maverick-security; urgency=low

  * SECURITY UPDATE: could inject NIS groups memberships into /etc/passwd.
    - debian/patches/900_locale_env_sanity: actually set locale environment
      variables correctly.
    - debian/patches/901_reject_newline: reject newlines in GECOS updates.
    - CVE-2011-0721

Date: Mon, 14 Feb 2011 13:37:48 -0800
Changed-By: Kees Cook <kees at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/maverick/+source/shadow/1:4.1.4.2-1ubuntu3.2
-------------- next part --------------
Format: 1.8
Date: Mon, 14 Feb 2011 13:37:48 -0800
Source: shadow
Binary: passwd login
Architecture: source
Version: 1:4.1.4.2-1ubuntu3.2
Distribution: maverick-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Kees Cook <kees at ubuntu.com>
Description: 
 login      - system login tools
 passwd     - change and administer password and group data
Changes: 
 shadow (1:4.1.4.2-1ubuntu3.2) maverick-security; urgency=low
 .
   * SECURITY UPDATE: could inject NIS groups memberships into /etc/passwd.
     - debian/patches/900_locale_env_sanity: actually set locale environment
       variables correctly.
     - debian/patches/901_reject_newline: reject newlines in GECOS updates.
     - CVE-2011-0721
Checksums-Sha1: 
 43b76fe2fa2a51b935b2ccef179c07e08656e3d1 2349 shadow_4.1.4.2-1ubuntu3.2.dsc
 58c75a98222628038c5b7c2ea1158c911e562db8 83284 shadow_4.1.4.2-1ubuntu3.2.diff.gz
Checksums-Sha256: 
 a88104bf6531c742f5d179b616702a3c9527c7c3bc7670d145d62611a9446d8a 2349 shadow_4.1.4.2-1ubuntu3.2.dsc
 374d00cce6386c5b7f7f91317a6d7cefca225486fff88d2fe6953ad3743726f0 83284 shadow_4.1.4.2-1ubuntu3.2.diff.gz
Files: 
 a177312225cbe835e8254594f4111d07 2349 admin required shadow_4.1.4.2-1ubuntu3.2.dsc
 485ba5d567bcbb68a685dd8f9f40eaac 83284 admin required shadow_4.1.4.2-1ubuntu3.2.diff.gz
Original-Maintainer: Shadow package maintainers <pkg-shadow-devel at lists.alioth.debian.org>