Hi Serge & All, 2016-07-21 16:16 GMT+02:00 Serge E. Hallyn <se...@hallyn.com>: > Quoting Christian PERRIER (bubu...@debian.org): >> Quoting Chris Lamb (la...@debian.org): >> > Hello dear maintainer(s), >> > >> > the Debian LTS team would like to fix the security issues which are >> > currently open in the Wheezy version of shadow: >> > https://security-tracker.debian.org/tracker/CVE-2016-6251 >> > https://security-tracker.debian.org/tracker/CVE-2016-6252 >> > >> > Would you like to take care of this yourself? >> >> There is probably zero chances that this happens. I handled over the >> maintenance of shadow to the "team" but the movement is very slow. So >> I suspect that nearly nothing will happen. >> >> As for Nicolas, he is pretty much inactive for years now, so don't >> expect more from his side. >> >> >> So, well, even though I'm not happy to send suuch news, this is more >> or less the reality nowadays. > > Dimitri, are you able to help here? > > I had a candidate package up on mentors for awhile for a new release > (https://mentors.debian.net/debian/pool/main/s/shadow/shadow_4.3-1~b1.dsc). > Would be great if someone would either test that and fix it up / push, or > start over and ditch my work if they prefer.
I'll check the package tomorrow, both the new release and an update for Wheezy. Cheers, Balint