[cobalt-security] PAM and CobaltOS 5.0

[Gossi The Dog <gossi@xxxxxxxxxxxxxx>]

Hi,

The issue with PAM+userhelper doesn't strictly effect the RaQ3, because it
doesn't appear to have userhelp installed by default.

However, PAM is still ownable.  Cobalt missed it and didn't issue a patch
by the looks of it (nothing on cobalt.com).  Since PAM itself is still
vun, it's probably possible to exploit it (just not through userhelper).

Fix: upgrade it yourself.  Probably breaks warranty.

Bye.

-- 
gossi@xxxxxxxxxxxxxxx