Debian/pam-u2f: high 7.5
Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enabled), and does not properly verify that the path lacks symli
Action: Upgrade pam-u2f to 1.0.8-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.8-1 | - |
Fixed versions
| 1.0.8-1 |
Sources
published · modified · JSON