diff options
| author | Kees Cook <kees@debian.org> | 2011-10-14 19:32:25 +0000 |
|---|---|---|
| committer | Dmitry V. Levin <ldv@altlinux.org> | 2011-10-14 19:32:25 +0000 |
| commit | caf5e7f61c8d9288daa49b4f61962e6b1239121d (patch) | |
| tree | 4eb2a6ea8e8de07a13ccabec4be6691a5da1245e /ChangeLog | |
| parent | c5cbe7a04f82ac89372dd2765979aac66188dca1 (diff) | |
pam_env: correctly count leading whitespace when parsing environment file
* modules/pam_env/pam_env.c (_assemble_line): Correctly count leading
whitespace.
Fixes CVE-2011-3148.
Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874469
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -1,3 +1,10 @@ +2011-10-14 Kees Cook <kees@debian.org> + + * modules/pam_env/pam_env.c (_assemble_line): Correctly count leading + whitespace. + Fixes CVE-2011-3148. + Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874469 + 2011-10-10 Tomas Mraz <tm@t8m.info> * modules/pam_access/pam_access.c: Add hostname resolution |