Vulnerability Bulletins

DSA-4555 pam-python - security update

   
Affected software Debian
 
Malte Kraus discovered that libpam-python, a PAM module allowing PAMmodules to be written in Python, didnt sanitise environment variableswhich could result in local privilege escalation if used with asetuid binary.

More info:

https://www.debian.org/security/2019/dsa-4555