USN-4552-3: Pam-python regression

Publication date

28 October 2020

Overview

USN-4552-1 and USN-4552-2 introduced a regression in Pam-python


Packages

  • pam-python - Enables PAM modules to be written in Python

Details

USN-4552-1 and USN-4552-2 fixed a vulnerability in Pam-python. The update
introduced a regression which prevented PAM modules written in Python from
importing python modules from site-specific directories.

We apologize for the inconvenience.

Original advisory details:

Malte Kraus discovered that Pam-python mishandled certain environment variables.
A local attacker could potentially use this vulnerability to execute programs
as root.

USN-4552-1 and USN-4552-2 fixed a vulnerability in Pam-python. The update
introduced a regression which prevented PAM modules written in Python from
importing python modules from site-specific directories.

We apologize for the inconvenience.

Original advisory details:

Malte Kraus discovered that Pam-python mishandled certain environment variables.
A local attacker could potentially use this vulnerability to execute programs
as root.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
18.04 bionic libpam-python –  1.0.6-1.1+deb10u1ubuntu0.1
16.04 xenial libpam-python –  1.0.4-1.1+deb8u1ubuntu0.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.


Have additional questions?

Talk to a member of the team ›