Read Time:22 Second

Fabian Vogt reported that the PAM module in oath-toolkit, a collection
of components to build one-time password authentication systems, does
not safely perform file operations in users’s home directories when
using the usersfile feature (allowing to place the OTP state in the home
directory of the to-be-authenticated user). A local user can take
advantage of this flaw for root privilege escalation.

https://security-tracker.debian.org/tracker/DSA-5784-1

Read More

More Stories

chromium-129.0.6668.89-1.fc39

FEDORA-2024-7aba3c1531 Packages in this update: chromium-129.0.6668.89-1.fc39 Update description: update to 129.0.6668.89 High CVE-2024-7025: Integer overflow in Layout High CVE-2024-9369: Insufficient...

chromium-129.0.6668.89-1.fc40

FEDORA-2024-452b60addf Packages in this update: chromium-129.0.6668.89-1.fc40 Update description: update to 129.0.6668.89 High CVE-2024-7025: Integer overflow in Layout High CVE-2024-9369: Insufficient...

chromium-129.0.6668.89-1.el8

FEDORA-EPEL-2024-a3d9061962 Packages in this update: chromium-129.0.6668.89-1.el8 Update description: update to 129.0.6668.89 * High CVE-2024-7025: Integer overflow in Layout * High...

chromium-129.0.6668.89-1.el9

FEDORA-EPEL-2024-ae299cc269 Packages in this update: chromium-129.0.6668.89-1.el9 Update description: update to 129.0.6668.89 * High CVE-2024-7025: Integer overflow in Layout * High...