Publishing details

• Published on 2016-06-05

Changelog

libpam-sshauth (0.3.1-1+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * CVE-2016-4422: local root privilege escalation.
    Return PAM_AUTH_ERR when a system user. This prevents the pam module
    from returning success without asking for authentication credentials.
    Thanks to Vagrant Cascadian <email address hidden>

 -- Salvatore Bonaccorso <email address hidden>  Wed, 04 May 2016 10:55:45 +0200

Builds

Package files

• libpam-sshauth_0.3.1-1+deb8u1.debian.tar.xz (2.3 KiB)
• libpam-sshauth_0.3.1-1+deb8u1.dsc (2.0 KiB)
• libpam-sshauth_0.3.1.orig.tar.gz (22.0 KiB)