[prev in list] [next in list] [prev in thread] [next in thread] 

List:       pkg-shadow-devel
Subject:    [Pkg-shadow-devel] Bug#862806: /bin/su: Regression from CVE-2017-2616 fix: killing su does not kill 
From:       Salvatore Bonaccorso <carnil () debian ! org>
Date:       2017-05-17 10:42:26
Message-ID: 149501774602.3324.4041298197433168465.reportbug () lorien ! valinor ! li
[Download RAW message or body]

Package: login
Version: 1:4.4-4
Severity: serious
File: /bin/su
Tags: patch upstream security
Justification: regression
Forwarded: https://github.com/shadow-maint/shadow/pull/72

Hi

Filling this as severity serious (and thus RC) since a repvious
targetted fix for CVE-2017-2616 causes the regression.

Details:

https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1690820

Upstream pull-request:

https://github.com/shadow-maint/shadow/pull/72

Upstream fix:

https://github.com/shadow-maint/shadow/pull/72/commits/7d82f203eeec881c584b2fa06539b39e82985d97

Regards,
Salvatore

_______________________________________________
Pkg-shadow-devel mailing list
Pkg-shadow-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-shadow-devel
[prev in list] [next in list] [prev in thread] [next in thread]