Changelog
shadow (1:4.0.16-2ubuntu2) edgy; urgency=low
* Consolidate some duplicated code in passwd.postinst.
* Tidy up after Malone bug #48350, which left an empty root password if
you backed up from the installer's final message, by locking the root
password if this condition is detected. Unfortunately I don't know of a
reliable way to tell whether this situation arose due to the installer
bug or deliberately, so the postinst is verbose and we make sure only to
make this change once.
* 495_salt_stack_smash: Make sure the salt returned from crypt_make_salt
is properly truncated if MD5_CRYPT_ENAB is disabled, and make chpasswd
and chgpasswd more careful to avoid a (small) buffer overflow while
handling that salt in their MD5 modes. Fixes chpasswd/chgpasswd crashes
when SSP is enabled.
-- Colin Watson <email address hidden> Tue, 11 Jul 2006 14:13:13 +0100