[SECURITY] Fedora 28 Update: shadow-utils-4.6-1.fc28
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-35254ad97d
2018-06-07 12:34:01.417950
--------------------------------------------------------------------------------
Name : shadow-utils
Product : Fedora 28
Version : 4.6
Release : 1.fc28
URL : http://pkg-shadow.alioth.debian.org/
Summary : Utilities for managing accounts and shadow password files
Description :
The shadow-utils package includes the necessary programs for
converting UNIX password files to the shadow password format, plus
programs for managing user and group accounts. The pwconv command
converts passwords to the shadow password format. The pwunconv command
unconverts shadow passwords and generates a passwd file (a standard
UNIX password file). The pwck command checks the integrity of password
and shadow files. The lastlog command prints out the last login times
for all users. The useradd, userdel, and usermod commands are used for
managing user accounts. The groupadd, groupdel, and groupmod commands
are used for managing group accounts.
--------------------------------------------------------------------------------
Update Information:
Minor security update to version 4.6
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 28 2018 Tom���� Mr��z <tmraz(a)redhat.com> - 2:4.6-1
- update to current upstream release 4.6
* Fri Apr 20 2018 Tom���� Mr��z <tmraz(a)redhat.com> - 2:4.5-10
- Raise limit for passwd and shadow entry length but also prevent
writing longer entries (#1422497)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1546242 - CVE-2018-7169 shadow-utils: newgidmap allows unprivileged user to
drop supplementary groups potentially allowing privilege escalation [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1546242
[ 2 ] Bug #1574037 - shadow-utils-4.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1574037
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-35254ad97d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------