StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · shadow

`shadow` CVE matrix across Linux distros

70 CVEs tracked across 8 distro releases. Showing the 70 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2004-1001→ fixed in1:4.0.3-35
CVE-2005-4890→ fixed in1:4.1.5-1
CVE-2006-1174→ fixed in1:4.0.15-10
CVE-2006-1376→ fixed in1:4.0.14-9
CVE-2006-1844→ fixed in1:4.0.14-9
CVE-2006-3378→ fixed in1:4.0.14-1
CVE-2008-5394→ fixed in1:4.1.1-6
CVE-2011-0721→ fixed in1:4.1.4.2+svn3283-3
+8 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y shadow

Debian bookworm

Source: Debian

CVE-2004-1001→ fixed in1:4.0.3-35
CVE-2005-4890→ fixed in1:4.1.5-1
CVE-2006-1174→ fixed in1:4.0.15-10
CVE-2006-1376→ fixed in1:4.0.14-9
CVE-2006-1844→ fixed in1:4.0.14-9
CVE-2006-3378→ fixed in1:4.0.14-1
CVE-2008-5394→ fixed in1:4.1.1-6
CVE-2011-0721→ fixed in1:4.1.4.2+svn3283-3
+9 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y shadow

Debian trixie

Source: Debian

CVE-2004-1001→ fixed in1:4.0.3-35
CVE-2005-4890→ fixed in1:4.1.5-1
CVE-2006-1174→ fixed in1:4.0.15-10
CVE-2006-1376→ fixed in1:4.0.14-9
CVE-2006-1844→ fixed in1:4.0.14-9
CVE-2006-3378→ fixed in1:4.0.14-1
CVE-2008-5394→ fixed in1:4.1.1-6
CVE-2011-0721→ fixed in1:4.1.4.2+svn3283-3
+9 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y shadow

Alpine v3.20

Source: Alpine secdb

CVE-2016-6252→ fixed in4.2.1-r7
CVE-2017-12424→ fixed in4.5-r0
CVE-2017-2616→ fixed in4.2.1-r11
CVE-2023-29383→ fixed in4.13-r4

Single command to patch all of these:

apk add --upgrade shadow

Alpine v3.21

Source: Alpine secdb

CVE-2016-6252→ fixed in4.2.1-r7
CVE-2017-12424→ fixed in4.5-r0
CVE-2017-2616→ fixed in4.2.1-r11
CVE-2023-29383→ fixed in4.13-r4

Single command to patch all of these:

apk add --upgrade shadow

Alpine edge

Source: Alpine secdb

CVE-2016-6252→ fixed in4.2.1-r7
CVE-2017-12424→ fixed in4.5-r0
CVE-2017-2616→ fixed in4.2.1-r11
CVE-2023-29383→ fixed in4.13-r4

Single command to patch all of these:

apk add --upgrade shadow

Alpine v3.18

Source: Alpine secdb

CVE-2016-6252→ fixed in4.2.1-r7
CVE-2017-12424→ fixed in4.5-r0
CVE-2017-2616→ fixed in4.2.1-r11
CVE-2023-29383→ fixed in4.13-r3

Single command to patch all of these:

apk add --upgrade shadow

Alpine v3.19

Source: Alpine secdb

CVE-2016-6252→ fixed in4.2.1-r7
CVE-2017-12424→ fixed in4.5-r0
CVE-2017-2616→ fixed in4.2.1-r11
CVE-2023-29383→ fixed in4.13-r4

Single command to patch all of these:

apk add --upgrade shadow

Is YOUR shadow patched?

5-second check on your actual server. The quickscan reads your installed shadow version and matches against the same 70-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)