Backport PAM security fixes.

    - sshd(8): Fixed a privilege separation weakness related to PAM support.
      Attackers who could successfully compromise the pre-authentication
      process for remote code execution and who had valid credentials on the
      host could impersonate other users.  Reported by Moritz Jodeit.
    - sshd(8): Fixed a use-after-free bug related to PAM support that was
      reachable by attackers who could compromise the pre-authentication
      process for remote code execution (closes: #795711).  Also reported by
      Moritz Jodeit.

1 files changed, 0 insertions, 1 deletions

diff --git a/monitor_wrap.c b/monitor_wrap.c
index 2a0fe9bf6..e2fcf75ff 100644
--- a/monitor_wrap.c
+++ b/monitor_wrap.c
@@ -632,7 +632,6 @@ mm_sshpam_init_ctx(Authctxt *authctxt)
 
         debug3("%s", __func__);
         buffer_init(&m);
-        buffer_put_cstring(&m, authctxt->user);
         mm_request_send(pmonitor->m_recvfd, MONITOR_REQ_PAM_INIT_CTX, &m);
         debug3("%s: waiting for MONITOR_ANS_PAM_INIT_CTX", __func__);
         mm_request_receive_expect(pmonitor->m_recvfd, MONITOR_ANS_PAM_INIT_CTX, &m);