Thanks for the detailed report! Since the issue and its fix are already public upstream, we’ll make this Launchpad bug public and continue tracking it here.
The report appears to be valid. We’ll evaluate the affected Ubuntu releases and, if appropriate, publish a security update for this issue. Upstream issue: https://github.com/linux-pam/linux-pam/issues/842 Upstream fix: https://github.com/linux-pam/linux-pam/pull/921 ** Bug watch added: github.com/linux-pam/linux-pam/issues #842 https://github.com/linux-pam/linux-pam/issues/842 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2164901 Title: pam_faillock lockout silently defeated by cron/systemd-user account- phase calls - Ubuntu pam 1.7.0-5ubuntu3.1 predates upstream fix To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/2164901/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
