OpenSSH: multiple vulnerabilities in the new PAM code

[Michael Sierchio]

Jacques A. Vidrine wrote:

> Unfortunately, it _does_ affect us.  The PAM code in OpenSSH 3.7x was
> taken from FreeBSD's PAM code.  des@ is working the issue now.

Jacques, Dag-Erling -

The effort is much appreciated.  There are a couple of PAMs I'm
working on at the moment, and would love to be able to trust
the AAA chain.

Regards,

MS