USN-4552-3: Pam-python regression

Releases

• Ubuntu 18.04 ESM
• Ubuntu 16.04 ESM

Packages

• pam-python - Enables PAM modules to be written in Python

Details

USN-4552-1 and USN-4552-2 fixed a vulnerability in Pam-python. The update
introduced a regression which prevented PAM modules written in Python from
importing python modules from site-specific directories.

We apologize for the inconvenience.

Original advisory details:

Malte Kraus discovered that Pam-python mishandled certain environment variables.
A local attacker could potentially use this vulnerability to execute programs
as root.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.04

• libpam-python - 1.0.6-1.1+deb10u1ubuntu0.1

Ubuntu 16.04

• libpam-python - 1.0.4-1.1+deb8u1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2019-16729

Related notices

• USN-4552-1: pam-python, libpam-python
• USN-4552-2: pam-python, libpam-python-doc, libpam-python