Opened 8 years ago

Closed 8 years ago

#3553 closed task (fixed)


Reported by: bdubbs@… Owned by: lfs-book@…
Priority: normal Milestone: 7.6
Component: Book Version: SVN
Severity: normal Keywords:


New minor version. Changes seem benign. Many things, e.g. Changelog, have not been updated, but NEWS has:

*** general
  * Handle libc whose crypt() returns NULL when passed a salt that
    violates specs or system requirements (e.g. FIPS140). This is needed
    with glibc/eglibc 2.17 for tools checking passwords (passwd (non PAM
    enabled) or newgrp), and for tools generating encrypted passwords
    (chgpasswd, chpasswd, or gpasswd when non PAM enabled or when a fixed
    crypt method is requested on the command line, and newusers, or passwd
    in their non PAM enabled versions)
  * Fix segfault when reading groups split on multiple lines. This impacts
    most user/group management tools when MAX_MEMBERS_PER_GROUP is set.

- su
  * When su receives a signal (SIGTERM, or SIGINT/SIGQUIT in non
    interactive mode), kill the child process group, rather than just the
    immediate child.
  * Fix segmentation faults for users without a proper home or shell in
    their passwd entries.

- login
  * Fix segmentation faults for users without a proper home or shell in
    their passwd entries.

*** documentation
  * Fixed useradd man page (--home-dir option, instead of --home).

*** translation
  * Updated Russian translation.
  * Updated German man pages translation.
  * Fixed gshadow Japanese man page translation.

Change History (12)

comment:1 by bdubbs@…, 8 years ago

I'm not sure if we should update to this package or not. The only place i can find it is Debian experimental. Sid is still using Arch and Gentoo are also still at Fedora still seems to be at

The home page of the package,, knows nothing about this version and appears to not to have been updated since 2011.

There does seem to be activity at;a=summary, but the newest tarball has all the man pages deleted. I can regenerate them but it requires docbook so for LFS we would need to create out own tarball for that. As well as correcting the Makefile which seems to insist on trying to generate .po files. It also wants the python script xml2po.

A configure file has to be created with 'autoreconf -v -f --install'. The script does that, but also runs configure with options we don't want.

The NEWS file says: "shadow- -> shadow-4.2 UNRELEASED"

comment:2 by Armin, 8 years ago

Source tarball is gone.

comment:3 by bdubbs@…, 8 years ago

It can be found at

shadow_4.2.orig.tar.xz 22-Apr-2014 03:25 1.0M

comment:4 by Armin, 8 years ago

Not here. is geodns based so I guess mirror closest to me doesn't have it.

comment:5 by Armin, 8 years ago

Master server has the source though, so it's probbably a problem with the mirror.

comment:6 by bdubbs@…, 8 years ago

Milestone: 7.6Future
Priority: normallow
Summary: shadow-4.2shadow-4.2 (hold until real release)

Marking for future. This is not a release, but a tarball from version control. We can generate a proper release package from the upstream tarball, but then we are the distributors.

Arch, Ubuntu, and Fedora are not using this. Only found it in Debian experimental (not even unstable).

Wait until upstream really releases the package or other mainstream distros start using it.

in reply to:  7 comment:8 by bdubbs@…, 8 years ago

Replying to Krejzi:

Now available at

It's still the same. They don't have configure or any man pages.

comment:9 by Armin, 8 years ago

At least it's "real" release.

comment:10 by bdubbs@…, 8 years ago

Milestone: Future7.6
Priority: lownormal

comment:11 by bdubbs@…, 8 years ago

Summary: shadow-4.2 (hold until real release)shadow-4.2.1

Latest version seems to work without any changes to the book.

comment:12 by bdubbs@…, 8 years ago

Resolution: fixed
Status: newclosed

Fixed at revision 10557.

Note: See TracTickets for help on using tickets.