libpam-sshauth (0.3.1-1+deb8u1) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * CVE-2016-4422: local root privilege escalation. Return PAM_AUTH_ERR when a system user. This prevents the pam module from returning success without asking for authentication credentials. Thanks to Vagrant Cascadian -- Salvatore Bonaccorso Wed, 04 May 2016 10:55:45 +0200 libpam-sshauth (0.3.1-1) unstable; urgency=low * New upstream version: - Fix segfault under KDM -- Vagrant Cascadian Tue, 26 Mar 2013 14:09:32 -0700 libpam-sshauth (0.3-1) experimental; urgency=low * New upstream version. - Switch to using libssh2. * Add Build-Depends on libssh2-1-dev and pkg-config, drop libssh-dev. * debian/rules: Install pam_sshauth.so into /lib//security/. -- Vagrant Cascadian Fri, 22 Mar 2013 12:31:56 -0700 libpam-sshauth (0.2-1) experimental; urgency=low * New upstream version. * Set debian/compat to 9, to enable hardening flags. * Bump Standards-Version to 3.9.4, no changes necessary. * Add Vcs-Browser and Vcs-Bzr to debian/control (Closes: #692637). -- Vagrant Cascadian Fri, 15 Feb 2013 11:48:57 -0800 libpam-sshauth (0.1-1) unstable; urgency=low * Initial release. -- Vagrant Cascadian Fri, 28 Oct 2011 20:26:42 -0400