Debian Security Advisory DSA 1106-1 (ppp)

The remote host is missing an update to ppp announced via advisory DSA 1106-1. Marcus Meissner discovered that the winbind plugin in pppd does not check whether a setuid call has been successful when trying to drop privileges, which may fail with some PAM configurations. The old stable distributi...