shield Security update for shadow

SUSE-SLE-Micro-5.5-2024-1007

This update for shadow fixes the following issues: - CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507). - CVE-2023-4641: Fixed possible password leak during passwd(1) change (bsc#1214806). The following non-security bugs were fixed: - bsc#1176006: Fix chage date miscalculation - bsc#1188307: Fix passwd segfault - bsc#1203823: Remove pam_keyinit from PAM config files - bsc#1213189: Change lock mechanism to file locking to prevent lock files after power interruptions - bsc#1206627: Add --prefix support to passwd, chpasswd and chage - bsc#1205502: useradd audit event user id field cannot be interpretedd

• Release Date
  Mar 27 2024
• References
  Bugzilla: 1203823, 1188307, 1206627, 1176006, 1210507, 1205502, 1144060, 1214806, 1213189
  CVEs: CVE-2023-4641, CVE-2023-29383
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Micro 5.5 aarch64

• Packages
  login_defs
  login.defs configuration file

  4.8.1-150500.3.3.1 lock rpm

  shadow
  Utilities to Manage User and Group Accounts

  4.8.1-150500.3.3.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.5 s390x

• Packages
  login_defs
  login.defs configuration file

  4.8.1-150500.3.3.1 lock rpm

  shadow
  Utilities to Manage User and Group Accounts

  4.8.1-150500.3.3.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.5 x86_64

• Packages
  login_defs
  login.defs configuration file

  4.8.1-150500.3.3.1 lock rpm

  shadow
  Utilities to Manage User and Group Accounts

  4.8.1-150500.3.3.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.5 ppc64le

• Packages
  login_defs
  login.defs configuration file

  4.8.1-150500.3.3.1 lock rpm

  shadow
  Utilities to Manage User and Group Accounts

  4.8.1-150500.3.3.1 lock rpm lock src