pperego
moderate
security
Security update for pam_u2f
This update for pam_u2f fixes the following issues:
- update to 1.3.2:
* Relax authfile permission check to a warning instead of an error to prevent
a breaking change locking existing users out of their systems.
- update to 1.3.1:
* CVE-2025-23013: Fixed problematic PAM_IGNORE return values in `pam_sm_authenticate()`(bsc#1233517).
* Changed return value when nouserok is enabled and the user has no
credentials, PAM_IGNORE is used instead of PAM_SUCCESS.
* Hardened checks of authfile permissions.
* Hardened checks for nouserok.
* Improved debug messages.
* Improved documentation.
pam_u2f