Krzesimir Nowak 8a585bd57a sys-libs/pam: Import pam 1.5.1 from gentoo
Import sys-libs/pam 1.5.1 from upstream Gentoo, mainly to address
CVE-2020-27780, a flaw in the way it handles empty passwords for
non-existing users. When the user doesn't exist PAM try to authenticate
with root and in the case of an empty password it successfully
authenticate.

https://github.com/linux-pam/linux-pam/issues/284
https://github.com/linux-pam/linux-pam/pull/300
2020-12-08 18:39:58 +01:00
..