ELSA-2023-6632

ELSA-2023-6632 - shadow-utils security and bug fix update

Type:	SECURITY
Impact:	LOW
Release Date:	2023-11-11

Description

[2:4.9-8]
- gpasswd: fix password leak. Resolves: #2215948

[2:4.9-7]
- useradd: check if subid range exists for user. Resolves: #2179987
- find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988

Related CVEs

CVE-2023-4641

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	shadow-utils-4.9-8.el9.src.rpm	c5a27b6d6539809c1ff068b06af7fb3eff12658992e3aa5a31234fc14552fe2c	-	ol9_aarch64_baseos_latest
	shadow-utils-4.9-8.el9.src.rpm	c5a27b6d6539809c1ff068b06af7fb3eff12658992e3aa5a31234fc14552fe2c	-	ol9_aarch64_codeready_builder
	shadow-utils-4.9-8.el9.src.rpm	c5a27b6d6539809c1ff068b06af7fb3eff12658992e3aa5a31234fc14552fe2c	-	ol9_aarch64_u3_baseos_base
	shadow-utils-4.9-8.el9.src.rpm	c5a27b6d6539809c1ff068b06af7fb3eff12658992e3aa5a31234fc14552fe2c	-	ol9_aarch64_u4_baseos_base
	shadow-utils-4.9-8.el9.aarch64.rpm	b4aba5b002527a47e563f955612c6b6f8cefd0917acc19836e2472065a6ddb86	-	ol9_aarch64_baseos_latest
	shadow-utils-4.9-8.el9.aarch64.rpm	b4aba5b002527a47e563f955612c6b6f8cefd0917acc19836e2472065a6ddb86	-	ol9_aarch64_u3_baseos_base
	shadow-utils-4.9-8.el9.aarch64.rpm	b4aba5b002527a47e563f955612c6b6f8cefd0917acc19836e2472065a6ddb86	-	ol9_aarch64_u4_baseos_base
	shadow-utils-subid-4.9-8.el9.aarch64.rpm	563cb2b7a21596e708020e308acf6f6ebb6fafaa29726c61c2fa9e5cca39ed5d	-	ol9_aarch64_baseos_latest
	shadow-utils-subid-4.9-8.el9.aarch64.rpm	563cb2b7a21596e708020e308acf6f6ebb6fafaa29726c61c2fa9e5cca39ed5d	-	ol9_aarch64_u3_baseos_base
	shadow-utils-subid-4.9-8.el9.aarch64.rpm	563cb2b7a21596e708020e308acf6f6ebb6fafaa29726c61c2fa9e5cca39ed5d	-	ol9_aarch64_u4_baseos_base
	shadow-utils-subid-devel-4.9-8.el9.aarch64.rpm	4edc273e133503cd19e6102c70b5505d997ccf4dc9e5184b0058ae350a91546e	-	ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64)	shadow-utils-4.9-8.el9.src.rpm	c5a27b6d6539809c1ff068b06af7fb3eff12658992e3aa5a31234fc14552fe2c	-	ol9_x86_64_baseos_latest
	shadow-utils-4.9-8.el9.src.rpm	c5a27b6d6539809c1ff068b06af7fb3eff12658992e3aa5a31234fc14552fe2c	-	ol9_x86_64_codeready_builder
	shadow-utils-4.9-8.el9.src.rpm	c5a27b6d6539809c1ff068b06af7fb3eff12658992e3aa5a31234fc14552fe2c	-	ol9_x86_64_u3_baseos_base
	shadow-utils-4.9-8.el9.src.rpm	c5a27b6d6539809c1ff068b06af7fb3eff12658992e3aa5a31234fc14552fe2c	-	ol9_x86_64_u4_baseos_base
	shadow-utils-4.9-8.el9.x86_64.rpm	cdbca64a03ee5c53d6842ba857b0d6b2f53a36f3c39bc8033f340c5fecb14651	-	ol9_x86_64_baseos_latest
	shadow-utils-4.9-8.el9.x86_64.rpm	cdbca64a03ee5c53d6842ba857b0d6b2f53a36f3c39bc8033f340c5fecb14651	-	ol9_x86_64_u3_baseos_base
	shadow-utils-4.9-8.el9.x86_64.rpm	cdbca64a03ee5c53d6842ba857b0d6b2f53a36f3c39bc8033f340c5fecb14651	-	ol9_x86_64_u4_baseos_base
	shadow-utils-subid-4.9-8.el9.i686.rpm	d7009b4baa72cbe22abe1bb6ef5204cd927fa3db047b1eb2c35d5b531067a61b	-	ol9_x86_64_baseos_latest
	shadow-utils-subid-4.9-8.el9.i686.rpm	d7009b4baa72cbe22abe1bb6ef5204cd927fa3db047b1eb2c35d5b531067a61b	-	ol9_x86_64_u3_baseos_base
	shadow-utils-subid-4.9-8.el9.i686.rpm	d7009b4baa72cbe22abe1bb6ef5204cd927fa3db047b1eb2c35d5b531067a61b	-	ol9_x86_64_u4_baseos_base
	shadow-utils-subid-4.9-8.el9.x86_64.rpm	39c495d594f5ddf4f6dc8f09cd63084fb831ae9e688459b6cdbbc8ce95cc005b	-	ol9_x86_64_baseos_latest
	shadow-utils-subid-4.9-8.el9.x86_64.rpm	39c495d594f5ddf4f6dc8f09cd63084fb831ae9e688459b6cdbbc8ce95cc005b	-	ol9_x86_64_u3_baseos_base
	shadow-utils-subid-4.9-8.el9.x86_64.rpm	39c495d594f5ddf4f6dc8f09cd63084fb831ae9e688459b6cdbbc8ce95cc005b	-	ol9_x86_64_u4_baseos_base
	shadow-utils-subid-devel-4.9-8.el9.i686.rpm	d639dcb69de50a6e50e66daaa88f57e2e29db6139aa197d42c91d1fc029abe84	-	ol9_x86_64_codeready_builder
	shadow-utils-subid-devel-4.9-8.el9.x86_64.rpm	06c0c419c7ae00ad8c1a55d16ca4907ffe8154e75b25a2939d851911616c2fdf	-	ol9_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team