add advisory for pam-bindings

[MartinNowak]

Depeneds on: rustsec/rustsec#1582

[djc]

Thanks for reporting! Should address the lint issue.

I've asked the maintainers to confirm they're okay with an advisory in

• lvkv/pam-rs#16

[MartinNowak]

Should address the lint issue.

I'm having trouble with the crate name pam-bindings not matching the library name pam 🤔.

[djc]

Should address the lint issue.

I'm having trouble with the crate name pam-bindings not matching the library name pam 🤔.

Huh, that's a little annoying. Can you file an issue against the rustsec/rustsec repo?

[MartinNowak]

I've updated the advisory and commented out the affected function for now to unblock this @djc.

Hopefully the pragmatic approach can be merged rustsec/rustsec#1575 (comment), but that shouldn't block alerting PAM module implementations to check whether they are affected.

Thanksfully one module already implemented a workaround rado0x54/pam-ssh-agent-webauthn#14.