* NEWS, src/login.c: Do not trust the current utmp entry's ut_line

to set PAM_TTY.
2009-04-17 20:40:26 +00:00
parent c49371e423
commit 5298ac3dd9
3 changed files with 23 additions and 5 deletions
--- a/6
+++ b/6
@@ -1,5 +1,11 @@
 $Id$

+shadow-4.1.3.1 -> shadow-4.1.3.2					UNRELEASED
+
+- login
+  * Do not trust the current utmp entry's ut_line to set PAM_TTY. This could
+    lead to DOS attacks.
+
 shadow-4.1.3 -> shadow-4.1.3.1						2009-04-15

 *** security: