Hi.

Apparently until some versions the debian-security-support was created with
the shell /bin/bash which has been changed to /bin/false.

However, this modification wasn't made for any already existing installations.

To keep systems more consistent and in order to improve security, please
migrated the user's shell of previous versions properly with on of the next
package versions.

Thanks,
Chris.