ELSA-2007-0737

ELSA-2007-0737 - pam security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2007-11-27

Description

[0.77-66.23]
- pam_cracklib should count the last char when computing difference (#267201)

[0.77-66.22]
- add pam_tally2 module (#228044)
- unset XAUTHORITY when appropriate (#228980)
- CVE-2007-1716 always decrement use count (#230823)
- reset priority only when specified in limits.conf (#232407)
- CVE-2007-3102 prevent audit log injection through user name (#247797)

Related CVEs

CVE-2007-1716

CVE-2007-3102

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 4 (i386)	pam-0.77-66.23.src.rpm	500aafba396ea542aaf480c1a3771c2bda8cb2dc356f2c3040f90cea825eb6fb	ELBA-2010-0512	el4_i386_latest
	pam-0.77-66.23.src.rpm	500aafba396ea542aaf480c1a3771c2bda8cb2dc356f2c3040f90cea825eb6fb	ELBA-2010-0512	el4_u6_i386_base
	pam-0.77-66.23.i386.rpm	12a572291464e9175354a05c5d2363c0934795cf885467e1d115a2ee68c1dc3d	ELBA-2010-0512	el4_i386_latest
	pam-0.77-66.23.i386.rpm	12a572291464e9175354a05c5d2363c0934795cf885467e1d115a2ee68c1dc3d	ELBA-2010-0512	el4_u6_i386_base
	pam-devel-0.77-66.23.i386.rpm	86e69e9c67c737473e7805ac0fc575eba9331018c66e6cc7e173b5c06bff0579	ELBA-2010-0512	el4_i386_latest
	pam-devel-0.77-66.23.i386.rpm	86e69e9c67c737473e7805ac0fc575eba9331018c66e6cc7e173b5c06bff0579	ELBA-2010-0512	el4_u6_i386_base
Oracle Linux 4 (ia64)	pam-0.77-66.23.src.rpm	500aafba396ea542aaf480c1a3771c2bda8cb2dc356f2c3040f90cea825eb6fb	ELBA-2010-0512	el4_ia64_latest
	pam-0.77-66.23.src.rpm	500aafba396ea542aaf480c1a3771c2bda8cb2dc356f2c3040f90cea825eb6fb	ELBA-2010-0512	el4_u6_ia64_base
	pam-0.77-66.23.i386.rpm	12a572291464e9175354a05c5d2363c0934795cf885467e1d115a2ee68c1dc3d	ELBA-2010-0512	el4_ia64_latest
	pam-0.77-66.23.i386.rpm	12a572291464e9175354a05c5d2363c0934795cf885467e1d115a2ee68c1dc3d	ELBA-2010-0512	el4_u6_ia64_base
	pam-0.77-66.23.ia64.rpm	1ae99784cf50e00162fb056fb5073b73c9298e42e17e0c8f6e9e966e4eaea93d	ELBA-2010-0512	el4_ia64_latest
	pam-0.77-66.23.ia64.rpm	1ae99784cf50e00162fb056fb5073b73c9298e42e17e0c8f6e9e966e4eaea93d	ELBA-2010-0512	el4_u6_ia64_base
	pam-devel-0.77-66.23.ia64.rpm	132d2c36508e13808f292d72644eb049f81300fd52f27f01084649f2b5e3f624	ELBA-2010-0512	el4_ia64_latest
	pam-devel-0.77-66.23.ia64.rpm	132d2c36508e13808f292d72644eb049f81300fd52f27f01084649f2b5e3f624	ELBA-2010-0512	el4_u6_ia64_base
Oracle Linux 4 (x86_64)	pam-0.77-66.23.src.rpm	500aafba396ea542aaf480c1a3771c2bda8cb2dc356f2c3040f90cea825eb6fb	ELBA-2010-0512	el4_u6_x86_64_base
	pam-0.77-66.23.src.rpm	500aafba396ea542aaf480c1a3771c2bda8cb2dc356f2c3040f90cea825eb6fb	ELBA-2010-0512	el4_x86_64_latest
	pam-0.77-66.23.i386.rpm	12a572291464e9175354a05c5d2363c0934795cf885467e1d115a2ee68c1dc3d	ELBA-2010-0512	el4_u6_x86_64_base
	pam-0.77-66.23.i386.rpm	12a572291464e9175354a05c5d2363c0934795cf885467e1d115a2ee68c1dc3d	ELBA-2010-0512	el4_x86_64_latest
	pam-0.77-66.23.x86_64.rpm	8ef7478b5bc8efeb28ceb6a6d5207ae913d83efaf7313a1d4e68fc3de52c1c97	ELBA-2010-0512	el4_u6_x86_64_base
	pam-0.77-66.23.x86_64.rpm	8ef7478b5bc8efeb28ceb6a6d5207ae913d83efaf7313a1d4e68fc3de52c1c97	ELBA-2010-0512	el4_x86_64_latest
	pam-devel-0.77-66.23.i386.rpm	86e69e9c67c737473e7805ac0fc575eba9331018c66e6cc7e173b5c06bff0579	ELBA-2010-0512	el4_u6_x86_64_base
	pam-devel-0.77-66.23.i386.rpm	86e69e9c67c737473e7805ac0fc575eba9331018c66e6cc7e173b5c06bff0579	ELBA-2010-0512	el4_x86_64_latest
	pam-devel-0.77-66.23.x86_64.rpm	7922cf9e42bce074b517b365a7495351c9fca79441caa05016c561c4966edd72	ELBA-2010-0512	el4_u6_x86_64_base
	pam-devel-0.77-66.23.x86_64.rpm	7922cf9e42bce074b517b365a7495351c9fca79441caa05016c561c4966edd72	ELBA-2010-0512	el4_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team