[IT-SecNots] [SECURITY] [DSA 3793-2] shadow regression update

[Salvatore Bonaccorso <carnil AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3793-2                   security AT debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
May 17, 2017                          https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : shadow
Debian Bug     : 862806

The update for the shadow suite issued as DSA-3793-1 introduced a
regression in su signal handling. If su receives a signal like SIGTERM,
it is not propagated to the child. Updated packages are now available to
correct this issue.

For the stable distribution (jessie), this problem has been fixed in
version 1:4.2-3+deb8u4.

We recommend that you upgrade your shadow packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=Tmyg
-----END PGP SIGNATURE-----