Announce: shadow 4.0.8

4.0.8 was released and new tar balls are avalaible in usual location on:

ftp://ftp.pld.org.pl/software/shadow/

Special thanks for Debian developers for very good feedback on current 
work on this version.

Summary changes from NEWS file and traslations statistics.

shadow-4.0.7 -> shadow-4.0.8

*** general:
- remove not working OPIE and SKEY support,
- chage, useradd, usermod: reduce multiple OPENLOG() calls,
- passwd: fix #61313 Debian bug: "passwd -S root" (as a normal user) should not
  display "You may not change the password for root.",
- vipw: fixed race condition (Debian #242407 bug; fix by Alexander Gattin
  <[email protected]>),
- configure.in: add using AC_GNU_SOURCE macro for kill compilation warnings about
  implicit declaration of function `fseeko',
- faillog: changed faillog record display format for allow fit in 80 columns all
  faillog atributies,
- removed NDBM code (unused),
- fixed use of SU_WHEEL_ONLY in su. Now su realy is avalaible for wheel group
  members. Thanks to Mike Frysinger <[email protected]> for report:
  http://bugs.gentoo.org/show_bug.cgi?id=80345
- drop never finished kerberos and des_rpc support (for kerberos support back firs
  must be prepared modularization),
- fixed UTMP path detection (by Kelledin <[email protected]>),
- useradd: rewrited group count to dynamic (by John Newbigin
  <[email protected]>),
- login: fixed create lastlog entry fo users never loged in on non-PAM
  variant of login (fix by <[email protected]>),
- remove handle login.defs::NOLOGIN_STR (never used),
- useradd: fixes a potential security problem when mailbox is created in
  useradd.
  Patch and comment by Koblinger Egmont <[email protected]>:
  Only two arguments are passed to the open() call though it expects three
  because O_CREAT is present. Hence the permission of the file first becomes
  some random garbage found on the stack, and an attacker can perhaps open
  this file and hold it open for reading or writing before the proper
  fchmod() is executed. (Actually, we could also pass the final "mode" to
  the open() call and then save the consequent fchmod().)
- SELinux changes: added changes in chage, chfn, chsh, passwd for allow
  construct more grained user password/accuunt properties on SELinux
  policies level. Patch originally based on RH changes (submited by Chris
  PeBenito <[email protected]>),
- added SELinux changes: in libmisc/copydir.c (based on Fedora patch),
- updated translations: cs, da, es, eu, fi, fr, it, ko, nl, pl, pt, sk, uk,
- added new translations: tl,
- reindent all source code using -l80,
*** documentation:
- it man pages (by Danilo Piazzalunga <[email protected]>):
-- updated: chfn.1, chsh.1, groups.1, grpck.8, grpconv.8,
   grpunconv.8, id.1, lastlog.8, login.1, newgrp.1, pwunconv.8, shadow.5,
   vigr.8, vipw.8,
-- new: chage.1, chpasswd.8, expiry.1, faillog.5, faillog.8, getspnam.3,
   logoutd.8, porttime.5, pwck.8, shadow.3, shadowconfig.8, su.1,
- passwd(1): fix #160477 Debian bug: improve -S output description,
- newgrp(1): fix #251926, #166173, #113191 Debian bugs: explain why editing /etc/group
  (without gshadow) doesn't permit to use newgrp,
- newgrp(1): newgrp uses /bin/sh (not bash),
- faillog(8): updated after rewrite faillog command for use getopt_long(),
- login(1): removed fragment about abilities pass enviroment variables in login prompt,
- gshadow(5): new file (by Nicolas Nicolas François <[email protected]>),
- usermod(8): fixed #302388 Debian bug: added separated -o option description,

shadow 4.0.8 translations statistics:

bs: 41 translated messages, 4 fuzzy translations, 335 untranslated messages.
ca: 357 translated messages, 14 fuzzy translations, 9 untranslated messages.
cs: 380 translated messages.
da: 380 translated messages.
de: 354 translated messages, 16 fuzzy translations, 10 untranslated messages.
el: 345 translated messages, 22 fuzzy translations, 13 untranslated messages.
es: 380 translated messages.
eu: 380 translated messages.
fi: 380 translated messages.
fr: 380 translated messages.
he: 88 translated messages, 14 fuzzy translations, 278 untranslated messages.
id: 268 translated messages, 12 fuzzy translations, 100 untranslated messages.
it: 380 translated messages.
ja: 297 translated messages, 57 fuzzy translations, 26 untranslated messages.
ko: 380 translated messages.
nb: 357 translated messages, 14 fuzzy translations, 9 untranslated messages.
nl: 380 translated messages.
nn: 358 translated messages, 13 fuzzy translations, 9 untranslated messages.
pl: 380 translated messages.
pt: 380 translated messages.
pt_BR: 358 translated messages, 14 fuzzy translations, 8 untranslated messages.
ro: 339 translated messages, 35 fuzzy translations, 6 untranslated messages.
ru: 340 translated messages, 29 fuzzy translations, 11 untranslated messages.
sk: 380 translated messages.
sq: 7 translated messages, 1 fuzzy translation, 372 untranslated messages.
sv: 354 translated messages, 15 fuzzy translations, 11 untranslated messages.
tl: 340 translated messages, 34 fuzzy translations, 6 untranslated messages.
tr: 358 translated messages, 14 fuzzy translations, 8 untranslated messages.
uk: 380 translated messages.
zh_CN: 357 translated messages, 14 fuzzy translations, 9 untranslated messages.
zh_TW: 339 translated messages, 35 fuzzy translations, 6 untranslated messages.

kloczek
-- 
-----------------------------------------------------------
*Ludzie nie mają problemów, tylko sobie sami je stwarzają*
-----------------------------------------------------------
Tomasz Kłoczko, sys adm @zie.pg.gda.pl|*e-mail: [email protected]*