[UCI-Linux] [SECURITY] Fedora Core 4 Update: pam-0.79-9.6

Mike Iglesias iglesias at draco.acs.uci.edu
Thu Oct 27 10:27:21 PDT 2005


From: "Tomas Mraz" <tmraz at redhat.com>
To: fedora-announce-list at redhat.com
Date: Thu, 27 Oct 2005 13:10:29 -0400
Subject: [SECURITY] Fedora Core 4 Update: pam-0.79-9.6

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-1031
2005-10-27
---------------------------------------------------------------------

Product     : Fedora Core 4
Name        : pam
Version     : 0.79                      
Release     : 9.6                  
Summary     : A security tool which provides authentication for applications.
Description :
PAM (Pluggable Authentication Modules) is a system security tool that
allows system administrators to set authentication policy without
having to recompile programs that handle authentication.

---------------------------------------------------------------------
Update Information:

This update fixes a security bug in unix_chkpwd allowing
brute force attacks against passwords in /etc/shadow by a
regular user when SELinux is enabled.
---------------------------------------------------------------------
* Wed Oct 26 2005 Tomas Mraz <tmraz at redhat.com> 0.79-9.6
- fixed CAN-2005-2977 unix_chkpwd should skip user verification only if
  run as root (#168181)
- link pam_loginuid to libaudit
- remove spurious glib2 dependency
- support no tty in pam_access (#170467)
- support new kernel limits and unlimited limit value in pam_limits (#171546)


---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

fb348c5be5d8f694cdbd927681150989  SRPMS/pam-0.79-9.6.src.rpm
4a06122544169a7549639fa52be91bcd  ppc/pam-0.79-9.6.ppc.rpm
edf3fc81ac4dfddf44f25dd37142b23c  ppc/pam-devel-0.79-9.6.ppc.rpm
873dca1bc06450ede87a40b9d0241398  ppc/debug/pam-debuginfo-0.79-9.6.ppc.rpm
054d2fe06507a3c45c7ef8bcf8a595ac  ppc/pam-0.79-9.6.ppc64.rpm
c7a3db12973f5182739d6adae0b25555  ppc/pam-devel-0.79-9.6.ppc64.rpm
6774937168a148b9e63e54711c26c790  x86_64/pam-0.79-9.6.x86_64.rpm
649b875ec7894c2fd855abb9a6547ef0  x86_64/pam-devel-0.79-9.6.x86_64.rpm
a70f55b7f8ce114052362e167984fdb0  x86_64/debug/pam-debuginfo-0.79-9.6.x86_64.rpm
6674a4ea75709a1e5c7f905e617db12b  x86_64/pam-0.79-9.6.i386.rpm
f535f175a757f0d7b1dc66b1538fcd1c  x86_64/pam-devel-0.79-9.6.i386.rpm
6674a4ea75709a1e5c7f905e617db12b  i386/pam-0.79-9.6.i386.rpm
f535f175a757f0d7b1dc66b1538fcd1c  i386/pam-devel-0.79-9.6.i386.rpm
d4ec56ab2def5974a103495169442c4c  i386/debug/pam-debuginfo-0.79-9.6.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
---------------------------------------------------------------------

-- 
fedora-announce-list mailing list
fedora-announce-list at redhat.com
https://www.redhat.com/mailman/listinfo/fedora-announce-list


More information about the UCI-Linux mailing list