--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-0417
2012-02-10 17:50:23
--------------------------------------------------------------------------------
Name : pam_yubico
Product : Fedora EPEL 6
Version : 2.10
Release : 1.el6
URL :
http://yubico-pam.googlecode.com/
Summary : A Pluggable Authentication Module for yubikeys
Description :
This is pam_yubico, a pluggable authentication module that can be used with
Linux-PAM and yubikeys. This module supports yubikey OTP checking.
--------------------------------------------------------------------------------
Update Information:
CVE-2011-4120 pam_yubico: Authentication bypass via NULL password [epel-all]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #751727 - CVE-2011-4120 pam_yubico: Authentication bypass via NULL password
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=751727
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pam_yubico' at the command line.
For more information, refer to "Managing Software with yum",
available at
http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------