FS#50504 - [shadow] Switch to maintained upstream source
Attached to Project:
Arch Linux
Opened by userwithuid (userwithuid) - Tuesday, 23 August 2016, 23:01 GMT
Last edited by Dave Reisner (falconindy) - Sunday, 02 October 2016, 17:09 GMT
Opened by userwithuid (userwithuid) - Tuesday, 23 August 2016, 23:01 GMT
Last edited by Dave Reisner (falconindy) - Sunday, 02 October 2016, 17:09 GMT
|
Details
arch's shadow package source [1] is seemingly not updated
any more (version 4.2.1, last update >2 years ago), but
there have been many changes since then.
The debian source [2] has recently (2016-07-31) been updated to 4.3+, but the actual upstream seems to be at github [3] (same maintainer; Serge Hallyn). Some of the fixes seem to be security related, therefore I marked this as Security/High. Arch should switch to a supported source and update to the latest version asap. [1] http://pkg-shadow.alioth.debian.org/ [2] https://anonscm.debian.org/git/pkg-shadow/shadow.git [3] https://github.com/shadow-maint/shadow |
This task depends upon
Closed by Dave Reisner (falconindy)
Sunday, 02 October 2016, 17:09 GMT
Reason for closing: Fixed
Additional comments about closing: shadow-4.4 is in testing. I hate this package so much.
Sunday, 02 October 2016, 17:09 GMT
Reason for closing: Fixed
Additional comments about closing: shadow-4.4 is in testing. I hate this package so much.
* 4.3.1 has a compiler error in su.c if --with-libpam . I have reported this upstream [1] .
* compiling from git needs setting --enable-man and makedepends on gnome-doc-utils (xml2po) for non-english man-pages
[1] https://github.com/shadow-maint/shadow/issues/32
https://github.com/shadow-maint/shadow/commit/67d2bb6e0a5ac124ce1f026dd5723217b1493194
And there's now a 4.4 tag.