-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 07 Nov 2017 13:40:55 +0100 Source: libpam4j Binary: libpam4j-java libpam4j-java-doc Architecture: source all Version: 1.4-2+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: libpam4j-java - Java binding for libpam.so libpam4j-java-doc - Documentation for Java binding for libpam.so Closes: 879001 Changes: libpam4j (1.4-2+deb7u1) wheezy-security; urgency=high . * Team upload. * Fix CVE-2017-12197 (Closes: #879001): It was discovered that libpam4j does not call pam_acct_mgmt(). As a consequence, the PAM account is not properly verified. Any user with a valid password but with deactivated or disabled account was able to log in. Checksums-Sha1: 7a43fa1ccca7a1d80f20881a445cf8b477818408 2274 libpam4j_1.4-2+deb7u1.dsc 1335e34fba33ab2531265ced9dbd58295476a81c 6880 libpam4j_1.4.orig.tar.gz d0aea63e270d60c85f0812c2014c452d32410c57 5181 libpam4j_1.4-2+deb7u1.debian.tar.gz 161f4c42d6fe975d0a79670d3e7adaf031fca85b 15108 libpam4j-java_1.4-2+deb7u1_all.deb f89fd61da076289868f0074e10ca64eee21cd3a5 137214 libpam4j-java-doc_1.4-2+deb7u1_all.deb Checksums-Sha256: 9c97eddc2e2d32616f995e6d3e8066467ba4011ead9883572efa0794e60f5b7e 2274 libpam4j_1.4-2+deb7u1.dsc 83e738e7e6d5055adaaffccd0caa10ba03a13ea59bd016f9bb4d1306c7c3f550 6880 libpam4j_1.4.orig.tar.gz ded1e334a18e704dbd75f3acb549fda1db760467411e5e1b28cdadbfb7aca125 5181 libpam4j_1.4-2+deb7u1.debian.tar.gz e8fa65942b707235e250e9677ec59652672dfce62e8f1577dc85158031b78fab 15108 libpam4j-java_1.4-2+deb7u1_all.deb e39f7768af21fdd21e0cb51675a3b84ca5bc10f7ddfa5d7812f29a93999c87c0 137214 libpam4j-java-doc_1.4-2+deb7u1_all.deb Files: ed36111eb5f1fa671f9cc2d1a439360c 2274 java optional libpam4j_1.4-2+deb7u1.dsc 20d90b25f700a559f022d870682f5659 6880 java optional libpam4j_1.4.orig.tar.gz 9a7c4328ea0c066e0531b6cc4437d0d9 5181 java optional libpam4j_1.4-2+deb7u1.debian.tar.gz 8f24c4e2e50cf0ede1734919ae6358af 15108 java optional libpam4j-java_1.4-2+deb7u1_all.deb 1d820cca945418c10b992d696e6b7694 137214 doc optional libpam4j-java-doc_1.4-2+deb7u1_all.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAloBtaZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkA0MQAIQSt44y6AGp4edgXi1fr9xRPjGjn/9xCrvW LwP26zQ6p7gRMIjipXuONVXtOD1XYeICWf7PuPfN8owPDqhJ01Q+BOuEKgTcY3jR VArW4cMgQLvOCH2rFit2EIjSbS+T0wZcCSGXgy1IJwRdrfJSqQNvwGZvgLUDeNwd lEiPsdvwSQkI32JvaLOKuz9uBhEHl2Vn/44lKuCDN6o+s7SwMSL1b1o0X2xy66hh SDPWBtZjkS2Jv83AKiWTjGAGdsHfyFYxVaWOiFQNidf+LWoqqPoyNPLCu/eCXQBK lcS18g65jj1372KUKNb7kiHA6tEFsHFQsW2JR8Y/DN7ozpZAwDd61xTSZe6I96VS 3/QsPulew3pVnKkut1+vDmco915UgFt6pg0xXRDfw8X8olHip7Zbvp4DGBfA+akH jWjTZ2+PMC7XDKE0RvFSUhyViVFxKCj8u5yJzEot7T/IX+PiFQN8+OWQ3d6g+FJx /942lV/8INp+nKqVhmJO/XPttGOXT4iTca//0mDih1XoIlCT2vWJ3zry01cmq1rY tGMynxV46AuftYMe7B8s20Ltt5DEqISW4aVrNT+vtHMM7Tw2ePyO/AJIiaLsv4gP lkpZxmkFHMMoFDobRY9fliUEZr4uJg3Rl9bvlkhCl68e3bRRnm5EHfM/WCzS2OzK QKDmllN8 =TPQ+ -----END PGP SIGNATURE-----