[SECURITY] [DLA 2730-1] libpam-tacplus security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- -----------------------------------------------------------------------
Debian LTS Advisory DLA-2730-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Utkarsh Gupta
August 04, 2021 https://wiki.debian.org/LTS
- -----------------------------------------------------------------------
Package : libpam-tacplus
Version : 1.3.8-2+deb9u1
CVE ID : CVE-2020-13881
Debian Bug : 962830
It was discovered that there was an issue in libpam-tacplus (a
security module for using the TACACS+ authentication service) where
shared secrets such as private server keys were being added in
the clear to various logs.
For Debian 9 stretch, this problem has been fixed in version
1.3.8-2+deb9u1.
We recommend that you upgrade your libpam-tacplus packages.
For the detailed security status of libpam-tacplus please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libpam-tacplus
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=j+r6
Reply to: