shadow (SSA:2011-086-03)
Posted on: 03/28/2011 08:53 AM
New shadow packages are available for Slackware 13.1 and -current to fix a security issue.
Here are the details from the Slackware 13.1 ChangeLog: +--------------------------+ patches/packages/shadow-4.1.4.3-i486-1_slack13.1.txz: Rebuilt. This release fixes a security issue where local users may be able to add themselves to NIS groups through chfn and chsh. For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0721 (* Security fix *) Thanks to Gary Langshaw for collecting important additional patches from svn. +--------------------------+
Where to find the new packages: +-----------------------------+
HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you.