Debian/pam-u2f: high 7.5
Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enabled), and does not properly verify that the path lacks symli
Action: Upgrade pam-u2f to 1.0.8-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.8-1 | - |
Fixed versions
| 1.0.8-1 |
Sources
- osv: DEBIAN-CVE-2019-12209#Debian:14/pam-u2f
- https://security-tracker.debian.org/tracker/CVE-2019-12209
published · modified · JSON