Ubuntu
pam package

pam 1.1.2-2ubuntu8.2 source package in Ubuntu

Changelog

pam (1.1.2-2ubuntu8.2) natty-security; urgency=low

  * SECURITY UPDATE: multiple issues with lack of adequate privilege
    dropping
    - debian/patches/security-dropprivs.patch: introduce new privilege
      dropping code in libpam/pam_modutil_priv.c, libpam/Makefile.*,
      libpam/include/security/pam_modutil.h, libpam/libpam.map,
      modules/pam_env/pam_env.c, modules/pam_mail/pam_mail.c,
      modules/pam_xauth/pam_xauth.c.
    - CVE-2010-3430
    - CVE-2010-3431
    - CVE-2010-3435
    - CVE-2010-4706
    - CVE-2010-4707
  * SECURITY UPDATE: privilege escalation via incorrect environment
    - debian/patches/CVE-2010-3853.patch: use clean environment in
      modules/pam_namespace/pam_namespace.c.
    - CVE-2010-3853
  * debian/patches-applied/series: disable hurd_no_setfsuid patch, as it
    isn't needed for Ubuntu, and it needs to be rewritten to work with the
    massive privilege refactoring in the security patches.
 -- Marc Deslauriers <email address hidden>   Thu, 19 May 2011 08:40:22 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Natty
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
pam_1.1.2.orig.tar.gz 1.7 MiB 7c986bc097c487ba6fd944350cb5cc6937592a7b18ceeff5f050f8c397efa6f1
pam_1.1.2-2ubuntu8.2.diff.gz 324.7 KiB 7e3888573a5634ffb72a750b934f1da23e2d3b8a759220b8103c515944fd80d7
pam_1.1.2-2ubuntu8.2.dsc 2.2 KiB 7a2cf7bf658f23b9c694387471969e5c41e98755e47a7bbe2441a367a509e130

View changes file

Binary packages built by this source

libpam-cracklib: No summary available for libpam-cracklib in ubuntu natty.

No description available for libpam-cracklib in ubuntu natty.

libpam-doc: No summary available for libpam-doc in ubuntu natty.

No description available for libpam-doc in ubuntu natty.

libpam-modules: No summary available for libpam-modules in ubuntu natty.

No description available for libpam-modules in ubuntu natty.

libpam-modules-bin: No summary available for libpam-modules-bin in ubuntu natty.

No description available for libpam-modules-bin in ubuntu natty.

libpam-runtime: No summary available for libpam-runtime in ubuntu natty.

No description available for libpam-runtime in ubuntu natty.

libpam0g: No summary available for libpam0g in ubuntu natty.

No description available for libpam0g in ubuntu natty.

libpam0g-dev: No summary available for libpam0g-dev in ubuntu natty.

No description available for libpam0g-dev in ubuntu natty.