[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [Pkg-shadow-devel] Wheezy update of shadow?



Quoting Christian PERRIER (bubulle@debian.org):
> Quoting Chris Lamb (lamby@debian.org):
> > Hello dear maintainer(s),
> > 
> > the Debian LTS team would like to fix the security issues which are
> > currently open in the Wheezy version of shadow:
> > https://security-tracker.debian.org/tracker/CVE-2016-6251
> > https://security-tracker.debian.org/tracker/CVE-2016-6252
> > 
> > Would you like to take care of this yourself?
> 
> There is probably zero chances that this happens. I handled over the
> maintenance of shadow to the "team" but the movement is very slow. So
> I suspect that nearly nothing will happen.
> 
> As for Nicolas, he is pretty much inactive for years now, so don't
> expect more from his side.
> 
> 
> So, well, even though I'm not happy to send suuch news, this is more
> or less the reality nowadays.

Dimitri, are you able to help here?

I had a candidate package up on mentors for awhile for a new release
(https://mentors.debian.net/debian/pool/main/s/shadow/shadow_4.3-1~b1.dsc).
Would be great if someone would either test that and fix it up / push, or
start over and ditch my work if they prefer.

-serge


Reply to: