ELA-1180-1 libpam-tacplus security update

possible information disclosure

2024-09-15
Packagelibpam-tacplus
Version1.3.8-2+deb10u2 (buster)
Related CVEs CVE-2016-20014


Missing zeroing of a structure has been fixed in libpam-tacplus, a PAM module for using TACACS+ as an authentication service.



For Debian 10 buster, these problems have been fixed in version 1.3.8-2+deb10u2.

We recommend that you upgrade your libpam-tacplus packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.