pam-1.1.1-20.AXS4.1

エラータID: AXSA:2015-439:01

Release date: 
Thursday, August 20, 2015 - 10:42
Subject: 
pam-1.1.1-20.AXS4.1
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
Moderate
Description: 

PAM (Pluggable Authentication Modules) is a system security tool that
allows system administrators to set authentication policy without
having to recompile programs that handle authentication.

With this release, following issue is fixed:

* CVE-2015-3238:
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

CVEs: 
CVE-2015-3238
The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password.
Additional Info: 

N/A

Download: 

SRPMS
  1. pam-1.1.1-20.AXS4.1.src.rpm
    MD5: 3a1f21b10a24d866d1716c47c6a2cc8f
    SHA-256: 6261a8b06ea7df911232e4c1a33fe2269f89c5e050c9219d3630c0150264d169
    Size: 1.24 MB

Asianux Server 4 for x86
  1. pam-1.1.1-20.AXS4.1.i686.rpm
    MD5: 90783d7e7085970333bd1baa3d3a7903
    SHA-256: 9bd712af6f5ae3d42ec5793a6c33e62c3f44f61bc345d21faa633276f5946158
    Size: 658.04 kB
  2. pam-devel-1.1.1-20.AXS4.1.i686.rpm
    MD5: e7019d81fee6749255171950fe3ca8da
    SHA-256: aedd42dfc7f19dc4a2918558bfd7c4ef58422f541afbf16e2db1c9faee88dbca
    Size: 205.14 kB

Asianux Server 4 for x86_64
  1. pam-1.1.1-20.AXS4.1.x86_64.rpm
    MD5: e07caadb1c63a61a8d45a9f8be98558f
    SHA-256: 56f69bac910ee7cf85ea315443b4dbbe40342dff4c597fd2bb19f23ef868852d
    Size: 657.47 kB
  2. pam-devel-1.1.1-20.AXS4.1.x86_64.rpm
    MD5: ae5e9d50686549ec10bfd0137ed659db
    SHA-256: 0ae98535b943e11f8744f9fab60c479f7d8666447a4d85feabf944895042473b
    Size: 204.73 kB
  3. pam-1.1.1-20.AXS4.1.i686.rpm
    MD5: 90783d7e7085970333bd1baa3d3a7903
    SHA-256: 9bd712af6f5ae3d42ec5793a6c33e62c3f44f61bc345d21faa633276f5946158
    Size: 658.04 kB
  4. pam-devel-1.1.1-20.AXS4.1.i686.rpm
    MD5: e7019d81fee6749255171950fe3ca8da
    SHA-256: aedd42dfc7f19dc4a2918558bfd7c4ef58422f541afbf16e2db1c9faee88dbca
    Size: 205.14 kB