Backport PAM security fixes.

    - sshd(8): Fixed a privilege separation weakness related to PAM support.
      Attackers who could successfully compromise the pre-authentication
      process for remote code execution and who had valid credentials on the
      host could impersonate other users.  Reported by Moritz Jodeit.
    - sshd(8): Fixed a use-after-free bug related to PAM support that was
      reachable by attackers who could compromise the pre-authentication
      process for remote code execution (closes: #795711).  Also reported by
      Moritz Jodeit.

1 files changed, 2 insertions, 0 deletions

diff --git a/debian/patches/series b/debian/patches/series
index bee70bc30..1a843eac8 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -28,3 +28,5 @@ gnome-ssh-askpass2-icon.patch
 sigstop.patch
 debian-config.patch
 backport-fix-pty-permissions.patch
+backport-do-not-resend-username-to-pam.patch
+backport-pam-use-after-free.patch