tocsin

Debian/oath-toolkit: high 7.1

pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling

Action: Upgrade oath-toolkit to 2.6.7-3.1+deb12u1 or later.

Affected

introducedfixedlast affected
02.6.7-3.1+deb12u1-

Fixed versions

2.6.7-3.1+deb12u1

Sources

published · modified · JSON