Debian Patches

Status for shadow/1:4.19.3-2

Patch Description Author Forwarded Bugs Origin Last update
debian/Set-group-and-mode-for-g-shadow-files.patch Set group and mode for [g]shadow files
Set group 'shadow' and mode 0400.		 Shadow package maintainers <pkg-shadow-devel@lists.alioth.debian.org> no 2024-06-22
debian/Keep-using-Debian-adduser-defaults.patch Keep using Debian's adduser defaults

Upstream's bbf4b79bc49fd1826eb41f6629669ef0b647267b commit
in 4.9 merged those values from upstream's default configuration file
which is not shipped in Debian.
This patch keeps the program's compiled in defaults in sync with the
configuration files shipped in Debian (debian/default/useradd).		 Balint Reczey <balint@balintreczey.hu> not-needed debian upstream 2024-06-22
debian/Exclude-Debian-globally-allocated-UIDs-from-sys_uid-range.patch Exclude Debian-globally allocated UIDs from sys_uid range warning Chris Hofstaedtler <zeha@debian.org> invalid upstream 2025-03-16
debian/Document-the-shadowconfig-utility.patch Document the shadowconfig utility
Status wrt upstream: The shadowconfig utility is Debian-specific.
The man page is Debian-specific, but it used to be distributed by
upstream.		 Shadow package maintainers <pkg-shadow-devel@lists.alioth.debian.org> no 2024-06-22
debian/Recommend-using-adduser-and-deluser.patch Recommend using adduser and deluser

Status wrt upstream: Debian specific patch.		 Shadow package maintainers <pkg-shadow-devel@lists.alioth.debian.org> no 2024-06-22
debian/tests-disable-su.patch upstream testsuite: disable su tests
Debian uses su from util-linux, pointless/impossible to test shadow's su
here.		 Serge Hallyn <serge@hallyn.com> no 2024-06-27
debian/Adapt-login.defs-for-Debian.patch Adapt login.defs for Debian
Remove settings only applicable to shadow's su, which we do not use.
Remove settings only applicable without PAM support enabled.
Remove obscure commented-out settings.
Remove explanation about write(1), which Debian does not ship anymore.		 Shadow package maintainers <pkg-shadow-devel@lists.alioth.debian.org> no 2024-07-07
debian/Stop-building-programs-we-do-not-install.patch Stop building programs we do not install Chris Hofstaedtler <zeha@debian.org> no 2024-08-06
debian/Warn-when-badname-and-variants-are-given.patch Warn when --badname (and variants) are given
Upstream PR 1158 will remove them, probably in the forky timeframe.		 Chris Hofstaedtler <zeha@debian.org> no 2025-02-17
debian/configure.ac-align-exec_prefix-with-prefix.patch configure.ac: align exec_prefix with prefix
Hopefully upstream will fix this one day.
Reported as https://github.com/shadow-maint/shadow/issues/1229		 Chris Hofstaedtler <zeha@debian.org> no 2025-02-24
getsubids-fix-parsing-of-the-first-field.patch getsubids: fix parsing of the first field
getsubids should parse /etc/subgid. The format of this file is supposed to be [1]:

login name or UID : numerical subordinate group ID : numerical subordinate group ID count

Unfortunately getsubids parses it as login name or *GID*. This breaks
when this file contains UID and when UID != GID:

$ id buildd
uid=2952(buildd) gid=1009(buildd) groupes=1009(buildd),115(sbuild)
$ grep 2952 /etc/subgid
2952:193462272:65536
$ getsubids -g buildd
Error fetching ranges

Fortunately it seems that newgidmap parses the file correctly, so this
is not a security issue.

[1] https://manpages.debian.org/unstable/passwd/subgid.5.en.html		 Aurelien Jarno <aurel32@debian.org> no debian 2026-04-02

All known versions for source package 'shadow'

Links