Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Fri, 17 Mar 2017 18:12:02 -0700
From: Seth Arnold <>
Subject: CVE-2017-6967 xrdp PAM auth_start_session()

Hello, CVE-2017-6967 has been assigned to xrdp for an incorrect placement
of auth_start_session().

Full details are at:

I believe this is the change upstream has chosen to use:


Download attachment "signature.asc" of type "application/pgp-signature" (474 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.