[Bug 790538] Re: pam update causes cron to stop working with "Module is unknown" error

[Chris Siebenmann]

@Marc: the previous libpam version (1.1.1-2ubuntu5 for 10.04 LTS)
doesn't seem to be available any more, or at least 'apt-get' can't
find it, which makes downgrading hard. We would have to roll all the
way back to 1.1.1-2ubuntu2 ... which is missing a root escalation CVE
(CVE-2010-0832, root priv escalation via symlink following). This is
not something we are in a position to do on multiuser systems.

(Nor is it in /var/cache/apt/archives on our machines.)

I am trying 'apt-get -u install "libpam-modules=1.1.1-2ubuntu5"'.
Possibly this is the wrong thing.


** CVE added: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2010-0832

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/790538

Title:
  pam update causes cron to stop working with "Module is unknown" error

Status in “pam” package in Ubuntu:
  Confirmed

Bug description:
  Upgrading libpam-modules from 1.1.1-4ubuntu1 to 1.1.1-4ubuntu2.2, cron stopped working, just gives a log message "Module is unknown". This happened during unattended-upgrades this night, so there might be a lot of people who didn't realize that yet.
  Downgrading to 1.1.1-4ubuntu1 fixes this.
  Ubuntu 10.10 amd64, almost vanilla, fresh, minimum install + java (ppa) + postgresql9 (ppa).