pam: DoS/user enumeration due to blocking pipe in pam_unix module

It was discovered that the unixrunhelperbinary function of PAM's unixpam module could write to a blocking pipe, possibly causing the function to become unresponsive. An attacker able to supply large passwords to the unixpam module could use this flaw to enumerate valid user accounts, or cause a...

pam security update

1.1.1-20.1 - fix CVE-2015-3238 - DoS due to blocking pipe with very long password...