Quoting Christian PERRIER (bubu...@debian.org): > Quoting Chris Lamb (la...@debian.org): > > Hello dear maintainer(s), > > > > the Debian LTS team would like to fix the security issues which are > > currently open in the Wheezy version of shadow: > > https://security-tracker.debian.org/tracker/CVE-2016-6251 > > https://security-tracker.debian.org/tracker/CVE-2016-6252 > > > > Would you like to take care of this yourself? > > There is probably zero chances that this happens. I handled over the > maintenance of shadow to the "team" but the movement is very slow. So > I suspect that nearly nothing will happen. > > As for Nicolas, he is pretty much inactive for years now, so don't > expect more from his side. > > > So, well, even though I'm not happy to send suuch news, this is more > or less the reality nowadays.
Dimitri, are you able to help here? I had a candidate package up on mentors for awhile for a new release (https://mentors.debian.net/debian/pool/main/s/shadow/shadow_4.3-1~b1.dsc). Would be great if someone would either test that and fix it up / push, or start over and ditch my work if they prefer. -serge
