Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Fedora 10: FEDORA-2009-3204 Moderate: PAM Minor Updates

fedora
Calendar Grey April 14, 2009
Scroller Fedora
The update to pam 1.0.4-4.fc10 improves system security by addressing minor concerns and implementing significant bug fixes as recorded.
Update to new minor upstream release

Summary

PAM (Pluggable Authentication Modules) is a system security tool that

allows system administrators to set authentication policy without

having to recompile programs that handle authentication.

Update to new minor upstream release. Minor security issue fixes and bug fixes.

* Mon Mar 30 2009 Tomas Mraz 1.0.4-4

- replace libtool to drop unneeded /lib64 rpath

* Thu Mar 26 2009 Tomas Mraz 1.0.4-3

- replace all std descriptors when calling helpers (#491471)

* Tue Mar 17 2009 Tomas Mraz 1.0.4-2

- update to new upstream minor release (bugfixes and

minor security fixes)

[ 1 ] Bug #489932 - CVE-2009-0887 pam: integer signedness error in _pam_StrTok()

https://bugzilla.redhat.com/show_bug.cgi?id=489932

[ 2 ] Bug #487216 - CVE-2009:0579 pam: MINDAYS not respected by pam for password changing

https://bugzilla.redhat.com/show_bug.cgi?id=487216

su -c 'yum update pam' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Product: Fedora 10
Version: 1.0.4
Release: 4.fc10
URL: Summary : A security tool which provides authentication for applications

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.