Debian/yubico-pam: high 8.2
In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file, which can lead to information disclosur
Action: Upgrade yubico-pam to 2.26-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.26-1 | - |
Fixed versions
| 2.26-1 |
Sources
published · modified · JSON