Updated oath-toolkit packages fix security vulnerability

pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink. CVE-2024-47191...

CVE-2024-47191

CVE-2024-47191 affects oath-toolkit’s PAM module pam_oath.so, with vulnerable versions 2.6.7–2.6.11 (pre-2.6.12). The flaw arises during PAM code execution as root, where the user-credentials file handling can mishandle access to users’ files (e.g., fchown called while a symlink is present), enab...

CVE-2024-47191

pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...