[Pkg-shadow-devel] Bug#914957: login: removal of pts/* from /etc/securetty wasn't applied in stretch

[russm]

Package: login
Version: 1:4.4-4.1
Severity: grave
Tags: security
Justification: user security hole

The addition of pts/* to /etc/securetty was reverted in 1:4.5-1 but
*not* in packages installed to stretch. Please backport this fix to
1:4.4-*


-- System Information:
Debian Release: 9.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.18.0-0.bpo.1-amd64 (SMP w/16 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages login depends on:
ii  libaudit1       1:2.6.7-2
ii  libc6           2.24-11+deb9u3
ii  libpam-modules  1.1.8-3.6
ii  libpam-runtime  1.1.8-3.6
ii  libpam0g        1.1.8-3.6

login recommends no packages.

login suggests no packages.

-- no debconf information