Your message dated Sat, 21 Oct 2006 23:32:10 -0700
with message-id <[EMAIL PROTECTED]>
and subject line Bug#394182: fixed in shadow 1:4.0.18.1-5
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Package: passwd
Version: 1:4.0.18.1-3
Severity: grave
Justification: causes data loss

Since some time after sarge, the cppw program does not recognize the -s
switch.  When -s is given, it is supposed to copy the file to /etc/shadow,
but instead it copies it to /etc/passwd, effectively disabling ALL logins.

I've looked at the code (in debian/patches/401_cppw_src.dpatch), and
noticed it is checking for the obsolete symbol SHADOWPWD before checking
for the -s switch.  Since that symbol doesn't exist (The Changelog says it
has been removed), it goes ahead and copies the file over /etc/passwd
instead of /etc/shadow.

- -- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-2-k7
Locale: LANG=en_CA, LC_CTYPE=en_CA (charmap=ISO-8859-1)

Versions of packages passwd depends on:
ii  debianutils                 2.17.3       Miscellaneous utilities specific t
ii  libc6                       2.3.6.ds1-6  GNU C Library: Shared libraries
ii  libpam-modules              0.79-3.2     Pluggable Authentication Modules f
ii  libpam0g                    0.79-3.2     Pluggable Authentication Modules l
ii  libselinux1                 1.30.28-2    SELinux shared libraries
ii  login                       1:4.0.18.1-3 system login tools

passwd recommends no packages.

- -- debconf information:
  passwd/password-mismatch:
  passwd/username:
  passwd/password-empty:
  passwd/make-user: true
  passwd/md5: false
  passwd/title:
  passwd/user-uid:
  passwd/shadow: true
  passwd/username-bad:
  passwd/user-fullname:

- --

C. Chad Wallace, B.Sc.
The Lodging Company
http://www.skihills.com/
OpenPGP Public Key ID: 0x262208A0


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFOAS6KeSNHCYiCKARAh4ZAJ9gs6b6aACsvZ+DIFYgKUocDKeT2ACghJm+
C20HmFvOGrccYTzlchiGeKs=
=GRyE
-----END PGP SIGNATURE-----


--- End Message ---
--- Begin Message ---
Source: shadow
Source-Version: 1:4.0.18.1-5

We believe that the bug you reported is fixed in the latest version of
shadow, which is due to be installed in the Debian FTP archive:

login_4.0.18.1-5_i386.deb
  to pool/main/s/shadow/login_4.0.18.1-5_i386.deb
passwd_4.0.18.1-5_i386.deb
  to pool/main/s/shadow/passwd_4.0.18.1-5_i386.deb
shadow_4.0.18.1-5.diff.gz
  to pool/main/s/shadow/shadow_4.0.18.1-5.diff.gz
shadow_4.0.18.1-5.dsc
  to pool/main/s/shadow/shadow_4.0.18.1-5.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Christian Perrier <[EMAIL PROTECTED]> (supplier of updated shadow package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat, 21 Oct 2006 23:33:20 +0200
Source: shadow
Binary: login passwd
Architecture: source i386
Version: 1:4.0.18.1-5
Distribution: unstable
Urgency: high
Maintainer: Shadow package maintainers <[EMAIL PROTECTED]>
Changed-By: Christian Perrier <[EMAIL PROTECTED]>
Description: 
 login      - system login tools
 passwd     - change and administer password and group data
Closes: 394182
Changes: 
 shadow (1:4.0.18.1-5) unstable; urgency=high
 .
   * The "Chaource" release
   * Debconf translation updates.
     - Wolof.
   * Debian packaging fixes:
     - 401_cppw_src.dpatch:
       Fix cppw, which copied to /etc/passwd even with the -s switch.
       Closes: #394182
Files: 
 bff3ad2a720b0ed9ca2af49d1d3e3310 1102 admin required shadow_4.0.18.1-5.dsc
 886a3864537084e28bb7d566d508c08c 363800 admin required 
shadow_4.0.18.1-5.diff.gz
 9ffd072a2aba59482d2839b42cfdd852 788616 admin required 
passwd_4.0.18.1-5_i386.deb
 e7ee15493f8efde7067e5ce453c58579 798584 admin required 
login_4.0.18.1-5_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFFOwtg1OXtrMAUPS0RAo0bAJ42SIeZDoWKlfmFz2Byw4xdhMDNhACdGfik
wBWWdgc5eFSjkTRCVzWEm9w=
=8/a7
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to