Login
Newsletter
Werbung

Sicherheit: Denial of Service in oath-toolkit
Aktuelle Meldungen Distributionen
Name: Denial of Service in oath-toolkit
ID: FEDORA-2014-14506
Distribution: Fedora
Plattformen: Fedora 20
Datum: Di, 18. November 2014, 13:34
Referenzen: Keine Angabe
Applikationen: oath-toolkit

Originalnachricht

Name        : oath-toolkit
Product : Fedora 20
Version : 2.4.1
Release : 6.fc20
URL : http://www.nongnu.org/oath-toolkit/
Summary : One-time password components
Description :
The OATH Toolkit provide components for building one-time password
authentication systems. It contains shared libraries, command line tools and a
PAM module. Supported technologies include the event-based HOTP algorithm
(RFC4226) and the time-based TOTP algorithm (RFC6238). OATH stands for Open
AuTHentication, which is the organization that specify the algorithms. For
managing secret key files, the Portable Symmetric Key Container (PSKC) format
described in RFC6030 is supported.

-------------------------------------------------------------------------------
-
Update Information:

This is an update adding null check to strdup calls.
-------------------------------------------------------------------------------
-
ChangeLog:

* Fri Nov 7 2014 Jaroslav Škarvada <jskarvad@redhat.com> - 2.4.1-6
- Added check for strdup failure (by strdup-null-check patch)
Resolves: rhbz#1161360
* Sun Aug 17 2014 Fedora Release Engineering
<rel-eng@lists.fedoraproject.org> - 2.4.1-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering
<rel-eng@lists.fedoraproject.org> - 2.4.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu Feb 20 2014 Jaroslav Škarvada <jskarvad@redhat.com> - 2.4.1-3
- Added xmlsec1-openssl to requires
Resolves: rhbz#1066477
* Mon Feb 17 2014 Jaroslav Škarvada <jskarvad@redhat.com> - 2.4.1-2
- Added xmlsec1-openssl-devel to buildrequires
* Thu Feb 13 2014 Jaroslav Škarvada <jskarvad@redhat.com> - 2.4.1-1
- New version
Resolves: rhbz#1064764
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1161360 - oath-toolkit: potential NULL pointer dereference in OATH
PAM module
https://bugzilla.redhat.com/show_bug.cgi?id=1161360
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update oath-toolkit' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Gewinnspiel
Neue Nachrichten
Werbung