emo/shadow
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity

* NEWS, src/chfn.c, src/chsh.c: Fix CVE-2011-0721: forbid \n in

Browse Source 
gecos or shell.
This commit is contained in:
nekral-guest
2011-02-16 00:18:45 +00:00
parent 7de49dec7b
commit 0419fc4f5f
4 changed files with 18 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
NEWS
View File

@@ -1,6 +1,6 @@
$Id$
shadow-4.1.4.2 -> shadow-4.1.5 UNRELEASED
shadow-4.1.4.3 -> shadow-4.1.5 UNRELEASED
- general
* report usage error to stderr, but report usage help to stdout (and return
@@ -48,6 +48,12 @@ shadow-4.1.4.2 -> shadow-4.1.5 UNRELEASED
* Updated Vietnamese translation.
* Updated Kazakh translation.
shadow-4.1.4.2 -> shadow-4.1.4.3 2011-02-15
*** security:
- CVE-2011-0721: An insufficient input sanitation in chfn can be exploited
to create users or groups in a NIS environment.
shadow-4.1.4.1 -> shadow-4.1.4.2 2009-07-24
- general