Skip to content
OpenAdvisories
Unscored DLA-2596-1 2 CVEs

shadow - security update

Published Mar 17, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 shadow 1:4.4-4.1+deb9u1

Vulnerabilities 2

  • Unscored —

    In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the …

  • Unscored —

    The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/sec…