You are here
Home > Preporuke > Sigurnosni propust programskog paketa oath

Sigurnosni propust programskog paketa oath

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2014-2534
2014-02-14 06:36:13
——————————————————————————–

Name : oath-toolkit
Product : Fedora 19
Version : 2.4.1
Release : 1.fc19
URL : http://www.nongnu.org/oath-toolkit/
Summary : One-time password components
Description :
The OATH Toolkit provide components for building one-time password
authentication systems. It contains shared libraries, command line tools and a
PAM module. Supported technologies include the event-based HOTP algorithm
(RFC4226) and the time-based TOTP algorithm (RFC6238). OATH stands for Open
AuTHentication, which is the organization that specify the algorithms. For
managing secret key files, the Portable Symmetric Key Container (PSKC) format
described in RFC6030 is supported.

——————————————————————————–
Update Information:

This is an update that fixes CVE-2013-7322.
——————————————————————————–
ChangeLog:

* Thu Feb 13 2014 Jaroslav Škarvada <jskarvad@redhat.com> – 2.4.1-1
– New version
Resolves: rhbz#1064764
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 2.4.0-2
– Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Tue Jul 23 2013 Jaroslav Škarvada <jskarvad@redhat.com> – 2.4.0-1
– New version
Resolves: rhbz#987378
* Wed Jul 10 2013 Jaroslav Škarvada <jskarvad@redhat.com> – 2.2.0-1
– New version
Resolves: rhbz#982986
——————————————————————————–
References:

[ 1 ] Bug #1063083 – CVE-2013-7322 oath-toolkit: certain one-time-passwords not invalidated correctly
https://bugzilla.redhat.com/show_bug.cgi?id=1063083
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update oath-toolkit’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorMarko Stanec
Cert idNCERT-REF-2014-02-0017-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa numpy

Otkriveni su sigurnosni nedostaci u programskom paketu numpy za operacijski sustav Fedora. Otkriveni nedostaci potencijalnim napadačima omogućuju izvršavanje napada simboličkim...

Close