Accepted libpam4j 1.4-2+deb7u1 (source all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 07 Nov 2017 13:40:55 +0100
Source: libpam4j
Binary: libpam4j-java libpam4j-java-doc
Architecture: source all
Version: 1.4-2+deb7u1
Distribution: wheezy-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libpam4j-java - Java binding for libpam.so
libpam4j-java-doc - Documentation for Java binding for libpam.so
Closes: 879001
Changes:
libpam4j (1.4-2+deb7u1) wheezy-security; urgency=high
.
* Team upload.
* Fix CVE-2017-12197 (Closes: #879001):
It was discovered that libpam4j does not call pam_acct_mgmt().
As a consequence, the PAM account is not properly
verified. Any user with a valid password but with deactivated or
disabled account was able to log in.
Checksums-Sha1:
7a43fa1ccca7a1d80f20881a445cf8b477818408 2274 libpam4j_1.4-2+deb7u1.dsc
1335e34fba33ab2531265ced9dbd58295476a81c 6880 libpam4j_1.4.orig.tar.gz
d0aea63e270d60c85f0812c2014c452d32410c57 5181 libpam4j_1.4-2+deb7u1.debian.tar.gz
161f4c42d6fe975d0a79670d3e7adaf031fca85b 15108 libpam4j-java_1.4-2+deb7u1_all.deb
f89fd61da076289868f0074e10ca64eee21cd3a5 137214 libpam4j-java-doc_1.4-2+deb7u1_all.deb
Checksums-Sha256:
9c97eddc2e2d32616f995e6d3e8066467ba4011ead9883572efa0794e60f5b7e 2274 libpam4j_1.4-2+deb7u1.dsc
83e738e7e6d5055adaaffccd0caa10ba03a13ea59bd016f9bb4d1306c7c3f550 6880 libpam4j_1.4.orig.tar.gz
ded1e334a18e704dbd75f3acb549fda1db760467411e5e1b28cdadbfb7aca125 5181 libpam4j_1.4-2+deb7u1.debian.tar.gz
e8fa65942b707235e250e9677ec59652672dfce62e8f1577dc85158031b78fab 15108 libpam4j-java_1.4-2+deb7u1_all.deb
e39f7768af21fdd21e0cb51675a3b84ca5bc10f7ddfa5d7812f29a93999c87c0 137214 libpam4j-java-doc_1.4-2+deb7u1_all.deb
Files:
ed36111eb5f1fa671f9cc2d1a439360c 2274 java optional libpam4j_1.4-2+deb7u1.dsc
20d90b25f700a559f022d870682f5659 6880 java optional libpam4j_1.4.orig.tar.gz
9a7c4328ea0c066e0531b6cc4437d0d9 5181 java optional libpam4j_1.4-2+deb7u1.debian.tar.gz
8f24c4e2e50cf0ede1734919ae6358af 15108 java optional libpam4j-java_1.4-2+deb7u1_all.deb
1d820cca945418c10b992d696e6b7694 137214 doc optional libpam4j-java-doc_1.4-2+deb7u1_all.deb
-----BEGIN PGP SIGNATURE-----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=TPQ+
-----END PGP SIGNATURE-----