Lucene search

K
oraclelinuxOracleELSA-2007-0465
HistoryJun 20, 2007 - 12:00 a.m.

Moderate: pam security and bug fix update

2007-06-2000:00:00
Oracle
linux.oracle.com
12

0.0004 Low

EPSS

Percentile

8.6%

cdrtools-2.01.0.a32-0.EL3.6

[2.01.0.a32-0.EL3.6]

  • fix for CVE-2004-0813
  • cdrecord and readcd are now suid, but with a pam_console check
  • Resolves: rhbz#232096

[2.01.0.a32-0.EL3.3]

  • fix for CAN-2005-0866 “cdrecord insecure temporary file”

[2.01.0.a32-0.EL3.2]

  • added patch for CAN-2004-0806, if s.o. was so stupid to make cdrecord
    suid
  • removed the suid section from the manpage

[2.01.0.a32-0.EL3.1]

  • errata version for RHEL3

pam-0.75-72

[0.75-72]

  • remove /dev/cdwriter* from console.perms - CVE-2004-0813 (#133098)
  • decrement console login count correctly - CVE-2007-1716 (#234142)

[0.75-71]

  • requires ghostscript and linuxdoc-tools to build

[0.75-70]

  • fix memory leaks in pam_stack (#204055)
  • fix memory leak in pam_unix (#230625)