Date:         Thu, 2 Sep 1999 18:48:13 +0300
From: Mihai Ibanescu <misa@NECOMM.RO>
Subject:      Re: RH 6.0 shadowed users and user lock bug fix
To: BUGTRAQ@SECURITYFOCUS.COM

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.
  Send mail to mime@docserver.cac.washington.edu for more info.

---423549446-1405612532-936287293=:739
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Mon, 30 Aug 1999, Prince Ctrl wrote:

> Aleph,
>
> After confirming with our Sr. Systems Admin, RedHat was contacted and
> they confirmed that it was indeed a bug within 'passwd'. You can
> download the new version of passwd and it will fix this problem.
>
> http://people.redhat.com/~smooge/passwd-0.60-1.i386.rpm

The link above is a redirect to www.redhat.com. Since there was no patch
posted, here it comes, attached.

Cheers,
Misa

---423549446-1405612532-936287293=:739
Content-Type: TEXT/PLAIN; charset=US-ASCII; name="passwd.patch"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.10.9909021848130.739@coyote.is.necomm.ro>
Content-Description:
Content-Disposition: attachment; filename="passwd.patch"
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---423549446-1405612532-936287293=:739--