libpam_1.2.1 and CVE-2010-4708

"Tupe, Amol (Amol)" <[email protected]> Mon, 14 Dec 2015 16:40:16 +0000

Newsgroups	gmane.linux.pam
Message-ID	<CD551047A838BB45A959E537E0B25AB56A86092B@AZ-US1EXMB04.global.avaya.com>

Hello,
I was looking in source code of libpam 1.2.1 ( Linux-PAM-1.2.1/modules/pam_env/pam_env.c) and I don't see fix for
Security vulnerability issue  CVE-2010-4708.

Should not DEFAULT_USER_READ_ENVFILE  be defined as
#define DEFAULT_USER_READ_ENVFILE 1

Please suggest if this security issue is fix in different way in release 1.2.1 Or
I still need a patch for CVE-2010-4708 ?

Regards,

Amol T

_______________________________________________
Pam-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/pam-list