thanks for fix .. this package module should be intensively QA-tested .. many ppl and many companies are using it of course not only for ssh (vsftpd, telnet, radius ...) biggest problem with this is that (at least me) I didn't verify if it works, I've automatically assumed that it works and deployed needed changes with puppet like usual and didn't explicitly examine if it works or not .. now, we have around on all leap servers this vulnerability, haha :D (we've been so proud that we've already upgraded most of ours 42.x to 15.0) for me temporary fix is quite easy, I've tested, that I can backport just pam_access.so from 42.2 into 15.0 or to use package from your repo (after code review) .. thanks again for fix and for looking after for a Geeko .. dan ps. this package module should be intensively QA-tested (I considered it so important, that I had to repeat that .....)