Skip to content
OpenAdvisories
Unscored CVE-2019-16729 EUVD-2019-7274GHSA-fmm4-q9rf-m62f

pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root e…

Published Sep 24, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Package: pam-python Package: pam-python Ecosystem: Debian Ecosystem: Ubuntu

Description

pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root escalation in certain PAM setups.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 pam-python 1.0.7-1 —
Debian 13 pam-python 1.0.7-1 —
Debian 12 pam-python 1.0.7-1 —
Debian 10 pam-python 1.0.6-1.1+deb10u1 DSA-4555-1
Debian 9 pam-python 1.0.6-1.1+deb9u1 DSA-4555-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Debian 8 pam-python 1.0.4-1.1+deb8u1 DLA-2000-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS pam-python 1.0.6-1.1+deb10u1build0.18.04.1 USN-4552-3, USN-4552-1
Ubuntu 16.04 LTS pam-python 1.0.4-1.1+deb8u1build0.16.04.1 USN-4552-3, USN-4552-2

Advisories 5

References