#4976 closed enhancement (fixed)


Reported by: Bruce Dubbs Owned by: lfs-book
Priority: high Milestone: 11.1
Component: Book Version: git
Severity: normal Keywords:




  • Handle possible TOCTTOU issues in usermod/userdel
    • (CVE-2013-4235)
    • Use O_NOFOLLOW when copying file
    • Kill all user tasks in userdel
  • Fix useradd -D segfault
  • Clean up obsolete libc feature-check ifdefs
  • Fix -fno-common build breaks due to duplicate Prog declarations
  • Have single date_to_str definition
  • Fix libsubid SONAME version
  • Clarify licensing info, use SPDX.



  • build: include lib/shadowlog_internal.h in dist tarballs


The recent patch to shadow is no longer needed.

Change History (4)

comment:1 by pierre, 21 months ago

Summary: shadow-4.11.1 (Wait for LFS)shadow-4.11.1

This is LFS :)

comment:2 by pierre, 21 months ago

Looks like the sed to libmisc/salt.c is unneeded now too.

comment:3 by Douglas R. Reno, 21 months ago

Priority: normalhigh

Marking as one priority up due to CVE-2013-4235.

comment:4 by Bruce Dubbs, 21 months ago

Resolution: fixed
Status: newclosed

Fixed at commit ade3efafc6caf69322c5fed47bc376c088f07a67

Package updates.
    Update to shadow-4.11.1.
    Update to readline-8.1.2.
    Update to meson-0.61.0.
    Update to libpipeline-1.5.5.
    Update to bash-5.1.16.
Note: See TracTickets for help on using tickets.