=== modified file 'debian/changelog'
--- debian/changelog	2011-04-11 21:57:36 +0000
+++ debian/changelog	2011-04-27 18:12:41 +0000
@@ -1,3 +1,10 @@
+pam (1.1.2-2ubuntu9) oneiric; urgency=low
+
+  * debian/patches-applied/update-motd: santize the environment before
+    calling run-parts, LP: #610125
+
+ -- Dustin Kirkland <kirkland@ubuntu.com>  Wed, 27 Apr 2011 13:02:15 -0500
+
 pam (1.1.2-2ubuntu8) natty; urgency=low
 
   * Check if gdm is actually running before trying to reload it. (LP: #745532)

=== modified file 'debian/patches-applied/update-motd'
--- debian/patches-applied/update-motd	2009-07-15 20:41:52 +0000
+++ debian/patches-applied/update-motd	2011-04-27 18:12:29 +0000
@@ -80,7 +80,7 @@
 +       Otherwise, the admin can force a static MOTD by breaking that symlink
 +       and publishing into an /etc/motd text file. */
 +    if ((stat("/etc/update-motd.d", &st) == 0) && S_ISDIR(st.st_mode)) {
-+	if (!system("run-parts --lsbsysinit /etc/update-motd.d > /var/run/motd.new"))
++	if (!system("env -i PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin /bin/run-parts --lsbsysinit /etc/update-motd.d > /var/run/motd.new"))
 +	    rename("/var/run/motd.new", "/var/run/motd");
      }