-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 09 Aug 2014 09:50:42 +0000 Source: pam Binary: libpam0g libpam-modules libpam-modules-bin libpam-runtime libpam0g-dev libpam-cracklib libpam-doc Architecture: source amd64 all Version: 1.1.8-3.1 Distribution: unstable Urgency: high Maintainer: Steve Langasek <vorlon@debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Description: libpam-cracklib - PAM module to enable cracklib support libpam-doc - Documentation of PAM libpam-modules - Pluggable Authentication Modules for PAM libpam-modules-bin - Pluggable Authentication Modules for PAM - helper binaries libpam-runtime - Runtime support for the PAM library libpam0g - Pluggable Authentication Modules library libpam0g-dev - Development files for PAM Closes: 731368 757555 Changes: pam (1.1.8-3.1) unstable; urgency=high . * Non-maintainer upload by the Security Team. * Fix CVE-2013-7041: case-insensitive comparison used for verifying passwords in the pam_userdb module (closes: #731368). * Fix CVE-2014-2583: multiple directory traversal issues in the pam_timestamp module (closes: 757555) Checksums-Sha1: 0b9b1b250c083d456b6ade1f07b37c71f705872a 3156 pam_1.1.8-3.1.dsc 76de8d48eb7c395915e2dad3269ea46ce7031ef4 132732 pam_1.1.8-3.1.diff.gz 52a0901a1127fb9050ef0967e15e03be28cbd59a 126372 libpam0g_1.1.8-3.1_amd64.deb 527359373a8de215f391f0c47feb6d174c79ed69 304834 libpam-modules_1.1.8-3.1_amd64.deb c066fdcdb99c783012ae742c9908d6297916791c 103804 libpam-modules-bin_1.1.8-3.1_amd64.deb 6d60df4af5fc7b17f998eeade44fb8a2a7fdb007 212442 libpam-runtime_1.1.8-3.1_all.deb 72489c2f2fe8936e0cb8c0153c9a2420db2357ed 182246 libpam0g-dev_1.1.8-3.1_amd64.deb f9336c1a644b6bb32539df80cd0f325b125663dd 85616 libpam-cracklib_1.1.8-3.1_amd64.deb 36100ec718302370a3cf37065799278ba19323db 279668 libpam-doc_1.1.8-3.1_all.deb Checksums-Sha256: bf18ebb78919f02c7cd5bfd335dde619fc01ae080e5d9acf0ef2660d55b85c8a 3156 pam_1.1.8-3.1.dsc 009875287331e91739c3eabf178216fe8dd138b42c092cb8704e4ba9cfb823ba 132732 pam_1.1.8-3.1.diff.gz ffa721e781d7b03bf14e2058efcd728f36fda35cccf03da73209c1545b69224b 126372 libpam0g_1.1.8-3.1_amd64.deb 7577d8cf756e1b32bc89fb6d72cf301adf6ec69f48e08ffdfbfc8e9c9822a85d 304834 libpam-modules_1.1.8-3.1_amd64.deb f765575dc38a4c6678efcc1d44c34595650c32c5500d31fcc9e868d9e71ba947 103804 libpam-modules-bin_1.1.8-3.1_amd64.deb 8ed4e0bfe030fc7a2a193d3009754266b19778f260d8973ca544c120a070869a 212442 libpam-runtime_1.1.8-3.1_all.deb 20207ee390a5aaaa934a5287fe3fac3097e284954f57ed5074ea8a94d43e1a34 182246 libpam0g-dev_1.1.8-3.1_amd64.deb 9569174e1e813bb4235693f3d633d7c216cfc45b0a8a230824301ef8bdaa74ed 85616 libpam-cracklib_1.1.8-3.1_amd64.deb 2a949699e7babf886d86d4c13a78d07dbe2e5a50bb6d83c541be90b1d49825c7 279668 libpam-doc_1.1.8-3.1_all.deb Files: 2569d182360692c5fdb14456820ffcd8 126372 libs required libpam0g_1.1.8-3.1_amd64.deb 04924d09732d1503874b6a0c70b339e1 304834 admin required libpam-modules_1.1.8-3.1_amd64.deb 8bc16196c62a6c936f92b3c54a975200 103804 admin required libpam-modules-bin_1.1.8-3.1_amd64.deb d00a0e0bba32c12916a50218b5b7789c 212442 admin required libpam-runtime_1.1.8-3.1_all.deb d38738be71623cab3a4dabae8670a723 182246 libdevel optional libpam0g-dev_1.1.8-3.1_amd64.deb 3ba7be8de05d96bacf3415931b4c0abe 85616 admin optional libpam-cracklib_1.1.8-3.1_amd64.deb aca3f3eba09d7244c57c9c6f14d9fcf1 279668 doc optional libpam-doc_1.1.8-3.1_all.deb 5a8b8c368bf26dae6bcb395be112bce6 3156 libs optional pam_1.1.8-3.1.dsc a75e5526a58384ea2496adad648884fd 132732 libs optional pam_1.1.8-3.1.diff.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQQcBAEBCgAGBQJT5f35AAoJELjWss0C1vRztuYf/R1sEDgUEXIedBi8mDdhgNv+ nx9mSRWCKD9aQoREhNWXFiNukQdHGNQSSDsVTnFE5XC1SYHLJqrDkNJlZb7DchYf fGJ5QmEzCdCerVV9BgAZeMi1kn4b6T8xQEEDS19cXueweoXowfKPZr3mK5mfSoIr 8hvZE9KghBojJ+mnuHhkK9V2RDdEPlKP8ypmTXdRXLFZtbNovla5mBrzKu/6B7zm 0YQgRBLfyORSPcfFAuqRaDsPmt+nCU7iKRvNwmht5lJt9z8JbYsdHJu4+4Ng4jwN 5Gj6vL7MHKnZ39aWGhmoMqJEyCKsHk7HIMejMupaNVcpwIFLDX1C3L7+s5YGjIdt Bdf5Ud66EEcQRU4adFGFZlUNv+v1TUWe8GUia4rsEhSjROpBxNNgGgKCkeJdMC3R ZNb1uc+jvgf0fZWe0Q+XRcJk4FD4zShLLm0aaW2GMR2yICmRyItae+RkYpPPo2Op sdV5jwh2pP0uMo52XXnkTrBjyaJIXYKNUWacGYlcNy9DlGny0rGgt1102QK7qDoX Yl0wX2M1GmVUe1Q/3a2rWkm4pPaolywdlcL4RkGzcecx4re/cMOrBuub1UZhKbBu ZGoyChQCUytmV4sBJXFFGkGiDAi2kcj+NKlRaIV/Un8cIAEsFkkyXUmFEkpjEwst /o/ZOykl0W5DpflRyETCvEAPlZY14VNULtmvQ5+uwoj3o2gTR2wPPWyjDtMpYD2E 6wySAD1HJnLzRGZXPzUzGGTAn4DR80QR2p/3SDSKv5cRExE+grkPo25SVBe4Vln6 Y196zE68qeR6xNXzopx7j4ozVd4qR+LvMI7e/XCibXV4zSphLRD5nJCGwbD8ItfF oyYlGGtEBWCad1RrcC6uXHeOOUakfvL/rsI6QVBQx9LTyxJGn6JtjtPdyl4KzMxb n1IEigKytedjG+EKc175YZXk8Wr4rESlrAbrnwVRyMyE2Fw1WJLFGbRjhdr2OHaJ O7Z5txLzGTF6dE69PZZdWq0xkzuwX/Kp6U+AOk7trSS4UcvPpHZ2GETJOZkVyS7V 5L1FjuKfnd9LEf5kFRKRu9Xc4zjkVdeWyreBXQ5RWKA82hMKAw1GWPPg8A/sIrit Sij9gA++mPwUmOyH2rtPKpNBD6ztYx5voPZ4aRCjj6Mm8vMuVAR3LIMN3ZSYHauw gUbdSr8ux3JqKJ5e2KXHq4HRhHiZXmcHrQAwgzGe+SX/tkFP482D1d+A92M8D5sO lpUQZQ6GsTqZijMXJ7L7q3YQhzTuZM/ci0jTzONOe5V2BQy4lQj+HiG5qxhEwc4c LmjUj7nhWKOYMEmTR59Hzg1fneXlL1yLxYnjvzDwGj6tykQYrBN4EChdl+cpB4g= =qXbc -----END PGP SIGNATURE-----