Back to bug 804123

Who When What Removed Added
Dustin Black 2012-03-30 19:10:22 UTC Target Release 6.3 6.4
CC dblack
Hardware Unspecified x86_64
Chris Williams 2012-04-09 15:31:40 UTC CC cww
Blocks 782183
Siddharth Nagar 2012-07-17 03:20:33 UTC Blocks 782183
Siddharth Nagar 2012-07-17 03:44:30 UTC Blocks 782183
Peter Vrabec 2012-07-30 11:39:47 UTC CC pvrabec
Karel Srot 2012-07-31 07:17:57 UTC CC ksrot
Flags needinfo?
Karel Srot 2012-08-23 09:01:30 UTC Flags needinfo? needinfo?(dkopecek) needinfo?(dblack)
Dustin Black 2012-09-06 01:56:43 UTC Flags needinfo?(dblack)
Dustin Black 2012-09-06 01:58:00 UTC Flags needinfo?(dkopecek)
Daniel Kopeček 2012-09-25 15:02:27 UTC Status NEW ASSIGNED
Daniel Kopeček 2012-09-25 15:54:23 UTC Status ASSIGNED MODIFIED
errata-xmlrpc 2012-09-25 16:00:05 UTC Status MODIFIED ON_QA
Daniel Kopeček 2012-09-25 17:53:21 UTC Fixed In Version sudo-1.8.6p3-1.el6
Aleš Mareček 2012-11-06 17:55:28 UTC CC amarecek
QA Contact qe-baseos-security amarecek
errata-xmlrpc 2012-11-15 12:56:39 UTC Status ON_QA VERIFIED
Daniel Kopeček 2013-01-24 13:14:12 UTC Doc Text Cause:
Passing a different PAM handle to PAM API functions where the same handle should be used. This is caused by initializing the global variable holding the PAM handle from a child process which has a separate address space and thus the initialization has no effect on the parent's PAM handle where the pam_end_sessions functions is called.

Consequence:
(from comment #3)
A module may rely on being called at session close in order to release resources or make important administrative changes, which now won't happen.

Fix:
Fixed by rebasing to a newer upstream version which uses the PAM API correctly i.e. initializes one PAM handle and uses it in all related PAM API function calls.

Result:
PAM session is closed correctly.
errata-xmlrpc 2013-02-07 00:48:19 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2013-02-21 09:44:15 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2013-02-21 04:44:15 UTC

Back to bug 804123