Summary
[1.3.1-33]
- pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
situations. CVE-2024-22365. Resolves: RHEL-21242
[1.3.1-32]
- pam_access: handle hostnames in access.conf. Resolves: RHEL-3374
[1.3.1-31]
- pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810
[1.3.1-30]
- pam_unix: enable bcrypt. Resolves: RHEL-5057
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | pam | 0:1.3.1-33.el8 |
| Oracle Linux · 8 | pam-devel | 0:1.3.1-33.el8 |
Vulnerabilities 1
-
Medium 5.5
linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo…