ELSA-2010-0891

ELSA-2010-0891 - pam security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2011-02-10

Description

[1.1.1-4.1]
- fix insecure dropping of priviledges in pam_xauth, pam_env,
and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
- fix insecure executing of scripts with user supplied environment
variables in pam_namespace - CVE-2010-3853 (#643043)

Related CVEs

CVE-2010-4708

CVE-2010-3435

CVE-2010-3316

CVE-2010-3853

CVE-2010-4707

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	pam-1.1.1-4.el6_0.1.src.rpm	c571f61d491d6ac994256afeb894cbc9a7339aec3b12e5657b6593205dc1bc86	ELBA-2017-0759	ol6_ga_i386_patch
	pam-1.1.1-4.el6_0.1.src.rpm	c571f61d491d6ac994256afeb894cbc9a7339aec3b12e5657b6593205dc1bc86	ELBA-2017-0759	ol6_i386_latest_archive
	pam-1.1.1-4.el6_0.1.i686.rpm	9e185cacfe0b2da1efcac82a24583380a87c4147573a287ff2d9d8e5b14ecf5c	ELBA-2017-0759	ol6_ga_i386_patch
	pam-1.1.1-4.el6_0.1.i686.rpm	9e185cacfe0b2da1efcac82a24583380a87c4147573a287ff2d9d8e5b14ecf5c	ELBA-2017-0759	ol6_i386_latest_archive
	pam-devel-1.1.1-4.el6_0.1.i686.rpm	7907916cf5859062725f4fecc210eb4749540cd27805c3b77a74b6ef2d9c295a	ELBA-2017-0759	ol6_ga_i386_patch
	pam-devel-1.1.1-4.el6_0.1.i686.rpm	7907916cf5859062725f4fecc210eb4749540cd27805c3b77a74b6ef2d9c295a	ELBA-2017-0759	ol6_i386_latest_archive
Oracle Linux 6 (x86_64)	pam-1.1.1-4.el6_0.1.src.rpm	c571f61d491d6ac994256afeb894cbc9a7339aec3b12e5657b6593205dc1bc86	ELBA-2017-0759	ol6_ga_x86_64_patch
	pam-1.1.1-4.el6_0.1.src.rpm	c571f61d491d6ac994256afeb894cbc9a7339aec3b12e5657b6593205dc1bc86	ELBA-2017-0759	ol6_x86_64_latest_archive
	pam-1.1.1-4.el6_0.1.i686.rpm	9e185cacfe0b2da1efcac82a24583380a87c4147573a287ff2d9d8e5b14ecf5c	ELBA-2017-0759	ol6_ga_x86_64_patch
	pam-1.1.1-4.el6_0.1.i686.rpm	9e185cacfe0b2da1efcac82a24583380a87c4147573a287ff2d9d8e5b14ecf5c	ELBA-2017-0759	ol6_x86_64_latest_archive
	pam-1.1.1-4.el6_0.1.x86_64.rpm	4fa34d30c75d173f1ca4f9d9cba0a4460cb5752fa3729953d71c14669bcb7d97	ELBA-2017-0759	ol6_ga_x86_64_patch
	pam-1.1.1-4.el6_0.1.x86_64.rpm	4fa34d30c75d173f1ca4f9d9cba0a4460cb5752fa3729953d71c14669bcb7d97	ELBA-2017-0759	ol6_x86_64_latest_archive
	pam-devel-1.1.1-4.el6_0.1.i686.rpm	7907916cf5859062725f4fecc210eb4749540cd27805c3b77a74b6ef2d9c295a	ELBA-2017-0759	ol6_ga_x86_64_patch
	pam-devel-1.1.1-4.el6_0.1.i686.rpm	7907916cf5859062725f4fecc210eb4749540cd27805c3b77a74b6ef2d9c295a	ELBA-2017-0759	ol6_x86_64_latest_archive
	pam-devel-1.1.1-4.el6_0.1.x86_64.rpm	ad966dddae3eac6176ddabda7203c0ccbb6362b4987b31f28b3fbb33327f6b9c	ELBA-2017-0759	ol6_ga_x86_64_patch
	pam-devel-1.1.1-4.el6_0.1.x86_64.rpm	ad966dddae3eac6176ddabda7203c0ccbb6362b4987b31f28b3fbb33327f6b9c	ELBA-2017-0759	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team