[linux-security] Re: shadow-971001

[R E Wolff BitWizard nl (Rogier Wolff)]

M Taylor wrote:
> At 06:02 PM 7/10/98 -0500, you wrote:
> >I think I may have found a security weakness w/ login in shadow-971001.  I
> >can't imagine this being a large problem if no one has run into it yet,
> >but I know that's not the way to run security.
> >...
> >I appologize for being out of coding long enough to put together a patch
> >and contact the _right_ people before hand (I'm getting back though),
> >however if this does in fact need to be patched, it should be as simple as
> >what's done in su.c from the same package:
> >...
> 
> Did you inform the shadow package maintainer? 

[...]

> Maintained-by:  marekm piast t19 ds pwr wroc pl (Marek Michalkiewicz)
> (according to http://sunsite.unc.edu/pub/Linux/system/admin/shadow.lsm)

Marek informs me:

> Fixed in shadow-980724, available from

> ftp://piast.t19.ds.pwr.wroc.pl/pub/linux/shadow/shadow-980724.tar.gz
> ftp://ftp.ists.pwr.wroc.pl/pub/linux/shadow/shadow-980724.tar.gz

				Roger. 

-- 
Actor asks a collegue: "To what do you owe your success in acting?"
Answer: "Honesty. Once you've learned how to fake that, you've got it made."
-------- Custom Linux device drivers for sale! Call for a quote. ----------
Email: R E Wolff BitWizard nl || Tel: +31-15-2137555 || FAX: +31-15-2138217