Joined: 12 May 2004
|Posted: Thu Jul 09, 2015 7:26 pm Post subject: [ GLSA 201507-09 ] PyPAM
|Gentoo Linux Security Advisory
Title: PyPAM: Arbitrary code execution (GLSA 201507-09)
Date: July 09, 2015
A double free vulnerability in PyPAM could result in execution of
arbitrary code or Denial of Service.
PyPAM is a PAM binding for Python.
Vulnerable: < 0.5.0-r3
Unaffected: >= 0.5.0-r3
Architectures: All supported architectures
PyPAM does not handle passwords correctly if there is NULL byte in the
A remote attacker could possibly execute arbitrary code or cause a
Denial of Service condition.
There is no known workaround at this time.
All PyPAM users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-python/pypam-0.5.0-r3"