oss-sec mailing list archives
Re: util-linux 2.29.2 fixes CVE-2017-2616
From: Leo Famulari <leo () famulari name>
Date: Thu, 23 Feb 2017 11:51:39 -0500
On Thu, Feb 23, 2017 at 05:08:48PM +0100, Hanno Böck wrote:
Anyone have a good idea who is using shadow vs. util-linux su? Do they have specific advantages/disadvantages, would it be reasonable to try to get all distros to use them same one?
Debian uses shadow, but is discussing a switch to util-linux: https://packages.debian.org/sid/login https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=833256 GuixSD is using shadow: https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/system.scm#n579 I'm also interested to learn the pros and cons of the two implementations.
Attachment:
signature.asc
Description:
Current thread:
- util-linux 2.29.2 fixes CVE-2017-2616 Marcus Meissner (Feb 22)
- Re: util-linux 2.29.2 fixes CVE-2017-2616 Hanno Böck (Feb 23)
- Re: util-linux 2.29.2 fixes CVE-2017-2616 Marcus Meissner (Feb 23)
- Re: util-linux 2.29.2 fixes CVE-2017-2616 Assaf Gordon (Feb 23)
- Re: util-linux 2.29.2 fixes CVE-2017-2616 Hanno Böck (Feb 23)
- Re: util-linux 2.29.2 fixes CVE-2017-2616 Bálint Réczey (Feb 23)
- Re: util-linux 2.29.2 fixes CVE-2017-2616 Emilio Pozuelo Monfort (Feb 23)
- Re: util-linux 2.29.2 fixes CVE-2017-2616 Serge E. Hallyn (Feb 23)
- Re: util-linux 2.29.2 fixes CVE-2017-2616 Leo Famulari (Feb 23)
- Re: util-linux 2.29.2 fixes CVE-2017-2616 Tobias Stöckmann (Feb 23)
- Re: util-linux 2.29.2 fixes CVE-2017-2616 Marcus Meissner (Feb 23)
- Re: util-linux 2.29.2 fixes CVE-2017-2616 Hanno Böck (Feb 23)