Backport PAM security fixes.

    - sshd(8): Fixed a privilege separation weakness related to PAM support.
      Attackers who could successfully compromise the pre-authentication
      process for remote code execution and who had valid credentials on the
      host could impersonate other users.  Reported by Moritz Jodeit.
    - sshd(8): Fixed a use-after-free bug related to PAM support that was
      reachable by attackers who could compromise the pre-authentication
      process for remote code execution (closes: #795711).  Also reported by
      Moritz Jodeit.

1 files changed, 8 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
index 6c851b644..8e8e9d778 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -136,6 +136,14 @@ openssh (1:6.9p1-1) UNRELEASED; urgency=medium
       world-writable.  Local attackers may be able to write arbitrary
       messages to logged-in users, including terminal escape sequences.
       Reported by Nikolay Edigaryev.
+    - sshd(8): Fixed a privilege separation weakness related to PAM support.
+      Attackers who could successfully compromise the pre-authentication
+      process for remote code execution and who had valid credentials on the
+      host could impersonate other users.  Reported by Moritz Jodeit.
+    - sshd(8): Fixed a use-after-free bug related to PAM support that was
+      reachable by attackers who could compromise the pre-authentication
+      process for remote code execution (closes: #795711).  Also reported by
+      Moritz Jodeit.
   * Thanks to Jakub Jelen of Red Hat for Fedora's rebased version of the
     GSSAPI key exchange patch.