Download
| Alert*
|
oval:org.secpod.oval:def:89003449
This update for libu2f-host and pam_u2f to version 1.0.8 fixes the following issues: Security issues fixed for libu2f-host: - CVE-2019-9578: Fixed a memory leak due to a wrong parse of init"s response . - CVE-2018-20340: Fixed an unchecked buffer, which could allow a buffer overflow with a custom ma ... oval:org.secpod.oval:def:116953 The PAM U2F module provides an easy way to integrate the Yubikey into your existing user authentication infrastructure. oval:org.secpod.oval:def:116783 The PAM U2F module provides an easy way to integrate the Yubikey into your existing user authentication infrastructure. oval:org.secpod.oval:def:1902055 Yubico libpam-u2f 1.0.7 attempts parsing of the configured authfile as root , and does not properly verify that the path lacks symlinks pointing to other files on the system owned by root. If the debug option is enabled in the PAM configuration, part of the file contents of a symlink target will be ... |
