shield Security update for shadow

SUSE-SLE-SERVER-12-SP2-2017-1829

This update for shadow fixes several issues. This security issue was fixed: - CVE-2017-12424: The newusers tool could have been forced to manipulate internal data structures in ways unintended by the authors. Malformed input may have lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors (bsc#1052261). These non-security issues were fixed: - bsc#1023895: Fixed man page to not contain invalid options and also prevent warnings when using these options in certain settings - bsc#980486: Reset user in /var/log/tallylog because of the usage of pam_tally2

Release Date

Nov 8 2017
References

Bugzilla: 1023895, 1052261, 980486
CVEs: CVE-2017-12424
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server 12.2 aarch64

Packages

shadow
Utilities to Manage User and Group Accounts

4.2.1-27.3.3 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

Packages

shadow
Utilities to Manage User and Group Accounts

4.2.1-27.3.3 lock rpm lock src

SUSE Linux Enterprise Server 12.2 s390x

Packages

shadow
Utilities to Manage User and Group Accounts

4.2.1-27.3.3 lock rpm lock src

SUSE Linux Enterprise Server 12.2 x86_64

Packages

shadow
Utilities to Manage User and Group Accounts

4.2.1-27.3.3 lock rpm lock src