Security Advisory YSA-2025-01 – Partial Authentication Bypass in pam-u2f Software Package
https://www.yubico.com/support/security-advisories/ysa-2025-01/
おや。むかあし入れたパッケージの更新がOSの更新でPPAが無効にされたことで止まってるもよう。
$ sudo add-apt-repository ppa:yubico/stable
$ sudo sh -c 'apt update && apt dist-upgrade -y'
:
The following NEW packages will be installed:
libmysqlclient21
The following packages will be upgraded:
libfido2-1 libpam-yubico
2 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
:
$ cat /var/run/reboot-required*
cat: '/var/run/reboot-required*': No such file or directory
たぶんﾖｼ
YubicoYSA 2025 01Security Advisory YSA-2025-01 – Partial Authentication Bypass in pam-u2f Software Package Published Date: 2025-01-14Tracking IDs: YSA-2025-01CVE: CVE-2025-23013CVSS Severity: 7.3 Summary Yubico’s open source pam-u2f software package implements a Pluggable Authentication Module (PAM) that can be deployed to support authentication using a YubiKey or other FIDO compliant authenticators on macOS or Linux. This software package has […]