-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ----------------------------------------------------------------------- Debian LTS Advisory DLA-2730-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 04, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------
Package : libpam-tacplus Version : 1.3.8-2+deb9u1 CVE ID : CVE-2020-13881 Debian Bug : 962830 It was discovered that there was an issue in libpam-tacplus (a security module for using the TACACS+ authentication service) where shared secrets such as private server keys were being added in the clear to various logs. For Debian 9 stretch, this problem has been fixed in version 1.3.8-2+deb9u1. We recommend that you upgrade your libpam-tacplus packages. For the detailed security status of libpam-tacplus please refer to its security tracker page at: https://security-tracker.debian.org/tracker/libpam-tacplus Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmEKiKYACgkQgj6WdgbD S5aNQA/7Bh2jOEcbWUOA71sgfqzFX9kCZkqlUt8H3ppZ4upwlsshnoI9HZuk2kiS 1kGxpm81zxfcdH0FQsqNLTNwZ1RJWLCjolzJ6XZ9QZUFIqbm93lYLhml2HChGZiM Wu5bG9iulA8K9vdyaj/C2BWAuLS/kOXGHcsEZ4Nww093ZUwhgCXuiV0hRaVaaIeg jqFsUM7mnT9qJxt+ef+zyUb2fOUcdGNxQqPbsITVVhsqC/qjh/fg6nUkT7nKnHrW voy8k8W6UA0CLlb3qzCmsrYmihUkb6cXzHFWKziCGOllv+gf0IwcBkdaOTmxFtHI u3Jx1AFILXT+DxXfO/H4bVLwhglSrb/BKF37lIPYI6xrgJ7QV4gCJE3zesIBpU7w X85i+kVE8K7A+PztFISr7i44igmq0bQLM+W1rLxIT116RjC3prWgcrX6PYszUIAu ihD4+1XXunQmU5FMDGC79gF5F/eO661q6YnYA+BB2XKX+W+CYN1gYWQ1zjCuE5Ip HaNznD+tUB5ELh9cNwYl1EQGqsPmPSpyPOQ79SvEhURqfh/KhS7U1J8A3VAScmd9 ZLqWuwBMDW5EZfxBMkmFxYl0MXoGAJoPVixDWie6MLt2ePLXKWXrAvD79VKc6wSR ZdIP2yTNGsF6fOG6IhlA/vxOWHa8RTunoJC4SkHzRFFme5iGatg= =j+r6
