Raphael Pavlidis
b95ffe208b
This commit backports an upstream patch fixing CVE-2024-10963. See: https://github.com/linux-pam/linux-pam/issues/834 https://github.com/linux-pam/linux-pam/pull/854 Fixes: - CVE-2024-10963: Pam: improper hostname interpretation in pam_access leads to access control bypass A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals. https://www.cve.org/CVERecord?id=CVE-2024-10963 Signed-off-by: Raphael Pavlidis <raphael.pavlidis@gmail.com> [Julien: - fix check-package errors - add info in commit log - rebase patch on v1.6.1 to avoid patch offsets - add "CVE:" tag in patch - add comment with patch name near _IGNORE_CVES in .mk ] Signed-off-by: Julien Olivain <ju.o@free.fr>