FS#50504 - [shadow] Switch to maintained upstream source

Attached to Project: Arch Linux
Opened by userwithuid (userwithuid) - Tuesday, 23 August 2016, 23:01 GMT
Last edited by Dave Reisner (falconindy) - Sunday, 02 October 2016, 17:09 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Dave Reisner (falconindy)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

arch's shadow package source [1] is seemingly not updated any more (version 4.2.1, last update >2 years ago), but there have been many changes since then.

The debian source [2] has recently (2016-07-31) been updated to 4.3+, but the actual upstream seems to be at github [3] (same maintainer; Serge Hallyn).

Some of the fixes seem to be security related, therefore I marked this as Security/High. Arch should switch to a supported source and update to the latest version asap.

[1] http://pkg-shadow.alioth.debian.org/
[2] https://anonscm.debian.org/git/pkg-shadow/shadow.git
[3] https://github.com/shadow-maint/shadow
This task depends upon

Closed by  Dave Reisner (falconindy)
Sunday, 02 October 2016, 17:09 GMT
Reason for closing:  Fixed
Additional comments about closing:  shadow-4.4 is in testing. I hate this package so much.
Comment by userwithuid (userwithuid) - Wednesday, 24 August 2016, 01:01 GMT
Additional notes:

* 4.3.1 has a compiler error in su.c if --with-libpam . I have reported this upstream [1] .

* compiling from git needs setting --enable-man and makedepends on gnome-doc-utils (xml2po) for non-english man-pages

[1] https://github.com/shadow-maint/shadow/issues/32
Comment by Dave Reisner (falconindy) - Sunday, 02 October 2016, 15:50 GMT
Over a month and no response to a blatant syntax error? I don't know how much I want to follow this fork, even if it's objectively "more active" than the current source we follow.
Comment by Dave Reisner (falconindy) - Sunday, 02 October 2016, 15:56 GMT
Ah, I see they actually fixed it without replying to the bug:

https://github.com/shadow-maint/shadow/commit/67d2bb6e0a5ac124ce1f026dd5723217b1493194

And there's now a 4.4 tag.

Loading...