diff options
| author | Colin Watson <cjwatson@debian.org> | 2015-08-19 18:34:29 +0100 |
|---|---|---|
| committer | Colin Watson <cjwatson@debian.org> | 2015-08-19 18:37:32 +0100 |
| commit | d2d9171e73cd2db10fabf9dd4924d3dcd5f13c7a (patch) | |
| tree | deedfca8dcc980d858d5caacbde773e44a081bc2 /auth2-chall.c | |
| parent | a608a63196dbda54e9bdd656baa253c56e76bace (diff) | |
| parent | c0ec3def4bec4afe1cad9e99081e658200b13a02 (diff) | |
Backport PAM security fixes.
- sshd(8): Fixed a privilege separation weakness related to PAM support.
Attackers who could successfully compromise the pre-authentication
process for remote code execution and who had valid credentials on the
host could impersonate other users. Reported by Moritz Jodeit.
- sshd(8): Fixed a use-after-free bug related to PAM support that was
reachable by attackers who could compromise the pre-authentication
process for remote code execution (closes: #795711). Also reported by
Moritz Jodeit.
Diffstat (limited to 'auth2-chall.c')
0 files changed, 0 insertions, 0 deletions