pam: allowing unprivileged user to block another user namespace

A vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with /tmp mounted as a polyinstantiated dir can place a FIFO there, and a subsequent attempt to login as this user with pamnamespace configured will cause the openat in protectdir to...

pam: allowing unprivileged user to block another user namespace

A vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with /tmp mounted as a polyinstantiated dir can place a FIFO there, and a subsequent attempt to login as this user with pamnamespace configured will cause the openat in protectdir to...

Low: pam

Issue Overview: A vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with /tmp mounted as a polyinstantiated dir can place a FIFO there, and a subsequent attempt to login as this user with pamnamespace configured will cause the openat in...

OESA-2024-1130 pam security update

PAM Pluggable Authentication Modules is a system of libraries that handle the authentication tasks of applications services on the system. Security Fixes: A vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with /tmp mounted as a...

OESA-2024-1096 pam security update

PAM Pluggable Authentication Modules is a system of libraries that handle the authentication tasks of applications services on the system. Security Fixes: A vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with /tmp mounted as a...

[SECURITY] Fedora 23 Update: xguest-1.0.10-33.fc23

Installing this package sets up the xguest user to be used as a temporary account to switch to or as a kiosk user account. The account is disabled un less SELinux is in enforcing mode. The user is only allowed to log in via graphi cal login program. The home and temporary directories of the user...

[SECURITY] Fedora 24 Update: xguest-1.0.10-34.fc24

Installing this package sets up the xguest user to be used as a temporary account to switch to or as a kiosk user account. The account is disabled un less SELinux is in enforcing mode. The user is only allowed to log in via graphi cal login program. The home and temporary directories of the user...