ELSA-2007-0555

ELSA-2007-0555 - pam security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2007-11-19

Description

[0.99.6.2-3.26]
- removed realtime default limits (#240123) from the package as
it caused regression on machines with nonexistent realtime group

[0.99.6.2-3.25]
- added and improved translations (#219124)
- adjusted the default limits for realtime users (#240123)

[0.99.6.2-3.23]
- pam_unix: truncated MD5 passwords in shadow shouldn't match (#219258)
- pam_limits: add limits.d support (#232700)
- pam_limits, pam_time, pam_access: add auditing of failed logins (#232993)
- pam_namespace: expand /home/ksharma even when appended with text (#237163)
original patch by Ted X. Toth
- add some default limits for users in realtime group (#240123)
- CVE-2007-3102 - prevent audit log injection through user name (#243204)

[0.99.6.2-3.22]
- make unix_update helper executable only by root as it isn't
useful for regular user anyway

[0.99.6.2-3.21]
- pam_namespace: better document behavior on failure (#237249)
- pam_unix: split out passwd change to a new helper binary (#236316)

[0.99.6.2-3.19]
- pam_selinux: improve context change auditing (#234781)

[0.99.6.2-3.18]
- pam_console: always decrement use count (#233581)
- pam_namespace: fix parsing config file with unknown users (#234513)

[0.99.6.2-3.17]
- pam_namespace: unmount poly dir for override users (#229689)
- pam_namespace: use raw context for poly dir name (#227345)
- pam_namespace: truncate long poly dir name (append hash) (#230120)

[0.99.6.2-3.15]
- correctly relabel tty in the default case (#229542)

Related CVEs

CVE-2007-1716

CVE-2007-3102

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	pam-0.99.6.2-3.26.el5.src.rpm	a4a6924911aaff34157af153528b3679	ELBA-2015-1032
	pam-0.99.6.2-3.26.el5.i386.rpm	534ec2513824148f46ae6935ae17359a	ELBA-2015-1032
	pam-devel-0.99.6.2-3.26.el5.i386.rpm	c34486f294b7eba09cafb29f2b246ca8	ELBA-2015-1032
Oracle Linux 5 (x86_64)	pam-0.99.6.2-3.26.el5.src.rpm	a4a6924911aaff34157af153528b3679	ELBA-2015-1032
	pam-0.99.6.2-3.26.el5.i386.rpm	534ec2513824148f46ae6935ae17359a	ELBA-2015-1032
	pam-0.99.6.2-3.26.el5.x86_64.rpm	a0387aec47f5a7efe2257752452946b7	ELBA-2015-1032
	pam-devel-0.99.6.2-3.26.el5.i386.rpm	c34486f294b7eba09cafb29f2b246ca8	ELBA-2015-1032
	pam-devel-0.99.6.2-3.26.el5.x86_64.rpm	b6fad621ee016182edb5cafc80652264	ELBA-2015-1032

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team