2020-11-27
ALT-BU-2020-4166-1
Branch sisyphus update bulletin.
Closed vulnerabilities
Published: 2020-12-18
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2020-27780
A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Package python3-module-django-recaptcha updated to version 2.0.6-alt1 for branch sisyphus in task 262567.
Closed bugs
python3-module-django-recaptcha shall not provide python3(captcha.tests)