Pam-python regression

2020-10-2800:00:00

ubuntu.com

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.7%

JSON

Releases

Ubuntu 18.04 ESM
Ubuntu 16.04 ESM

Packages

pam-python - Enables PAM modules to be written in Python

Details

USN-4552-1 and USN-4552-2 fixed a vulnerability in Pam-python. The update
introduced a regression which prevented PAM modules written in Python from
importing python modules from site-specific directories.

We apologize for the inconvenience.

Original advisory details:

Malte Kraus discovered that Pam-python mishandled certain environment variables.
A local attacker could potentially use this vulnerability to execute programs
as root.

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchlibpam-python< 1.0.6-1.1+deb10u1ubuntu0.1UNKNOWN
Ubuntu18.04noarchlibpam-python-dbgsym< 1.0.6-1.1+deb10u1ubuntu0.1UNKNOWN
Ubuntu18.04noarchlibpam-python-doc< 1.0.6-1.1+deb10u1ubuntu0.1UNKNOWN
Ubuntu16.04noarchlibpam-python< 1.0.4-1.1+deb8u1ubuntu0.1UNKNOWN
Ubuntu16.04noarchlibpam-python-dbgsym< 1.0.4-1.1+deb8u1ubuntu0.1UNKNOWN
Ubuntu16.04noarchlibpam-python-doc< 1.0.4-1.1+deb8u1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	18.04	noarch	libpam-python	< 1.0.6-1.1+deb10u1ubuntu0.1	UNKNOWN
Ubuntu	18.04	noarch	libpam-python-dbgsym	< 1.0.6-1.1+deb10u1ubuntu0.1	UNKNOWN
Ubuntu	18.04	noarch	libpam-python-doc	< 1.0.6-1.1+deb10u1ubuntu0.1	UNKNOWN
Ubuntu	16.04	noarch	libpam-python	< 1.0.4-1.1+deb8u1ubuntu0.1	UNKNOWN
Ubuntu	16.04	noarch	libpam-python-dbgsym	< 1.0.4-1.1+deb8u1ubuntu0.1	UNKNOWN
Ubuntu	16.04	noarch	libpam-python-doc	< 1.0.4-1.1+deb8u1ubuntu0.1	UNKNOWN