Fedora alert FEDORA-2009-3500 (pam_ssh)
| From: | updates@fedoraproject.org | |
| To: | fedora-package-announce@redhat.com | |
| Subject: | [SECURITY] Fedora 10 Update: pam_ssh-1.92-10.fc10 | |
| Date: | Sat, 02 May 2009 16:38:56 +0000 | |
| Message-ID: | <20090502163856.D6F9710F8F1@bastion2.fedora.phx.redhat.com> | |
| Archive‑link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-3500 2009-04-13 18:40:19 -------------------------------------------------------------------------------- Name : pam_ssh Product : Fedora 10 Version : 1.92 Release : 10.fc10 URL : http://sourceforge.net/projects/pam-ssh/ Summary : PAM module for use with SSH keys and ssh-agent Description : This PAM module provides single sign-on behavior for UNIX using SSH keys. Users are authenticated by decrypting their SSH private keys with the password provided. In the first PAM login session phase, an ssh-agent process is started and keys are added. The same agent is used for the following PAM sessions. In any case the appropriate environment variables are set in the session phase. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #492153 - CVE-2009-1273 pam_ssh: Password prompt varies for existent and non-existent users https://bugzilla.redhat.com/show_bug.cgi?id=492153 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update pam_ssh' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...