MGASA-2024-0335

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2024-0335.html

Import Source

https://advisories.mageia.org/MGASA-2024-0335.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2024-0335

Related

CVE-2024-47191

Published

2024-10-25T06:08:30Z

Modified

2024-10-25T05:43:52Z

Summary

Updated oath-toolkit packages fix security vulnerability

Details

pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink. (CVE-2024-47191)

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:9 / oath-toolkit

Package

Name: oath-toolkit
Purl: pkg:rpm/mageia/oath-toolkit?arch=source&distro=mageia-9

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.6.7-1.1.mga9

Ecosystem specific

{
    "section": "core"
}