Summary
[1.3.1-19.0.1]
- pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534]
[1.3.1-19]
- pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
situations. CVE-2024-22365. Resolves: RHEL-21244
[1.3.1-18]
- libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
- pam_access: handle hostnames in access.conf. Resolves: RHEL-22300
[1.5.1-17]
- pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943
[1.5.1-16]
- libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
- fix formatting of audit messages. Resolves: RHEL-5100
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | pam | 0:1.5.1-19.0.1.el9 |
| Oracle Linux · 9 | pam-devel | 0:1.5.1-19.0.1.el9 |
| Oracle Linux · 9 | pam-docs | 0:1.5.1-19.0.1.el9 |
Vulnerabilities 1
-
Medium 5.5
linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo…